Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: +yuBiZs4vBUitST9MGQeLCHYixG6OTrJJ8J9sBdqF1k=
Subject key identifier: 55:C2:55:3F:D9:80:6B:E1:D2:35:46:02:39:6A:01:BA:E1:04:FE:F8
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01A0D6B9744FB15E958E6F8159203DA2D6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 079F
Signing time: Fri 25 Sep 2026 04:01:13 +0000
Manifest this update: Fri 25 Sep 2026 04:01:13 +0000
Manifest next update: Sat 26 Sep 2026 04:01:13 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: VTXawXjAU2h+RAe70Yt0n8+kkCPnkXO0I3OelYVyuVo=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:74:4f:b1:5e:95:8e:6f:81:59:20:3d:a2:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Sep 25 04:01:13 2026 GMT
Not After : Sep 26 04:01:13 2026 GMT
Subject: CN=55c2553fd9806be1d2354602396a01bae104fef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:c2:21:8f:07:49:76:65:a5:e0:e3:92:8a:
86:04:37:b9:8f:39:78:54:20:11:c9:74:79:82:6c:
18:17:5d:8e:ac:b2:d0:a9:e2:fd:39:15:9a:29:bc:
6c:e3:92:08:83:aa:92:26:d2:4f:1f:56:bf:69:6a:
5b:3b:a0:d0:e2:f4:29:57:50:9c:9f:06:f3:33:38:
5d:14:f1:fb:f1:18:53:f2:1c:0c:85:c2:73:7c:7b:
b7:4d:0b:72:90:8a:eb:19:c6:91:53:13:79:30:94:
89:ba:0e:5b:d4:6b:d0:a7:69:44:09:81:fb:60:3e:
e1:c0:aa:d1:de:c0:1c:fe:58:88:c8:c8:80:5c:3b:
29:05:a1:9b:75:d1:d1:53:5d:67:6b:01:e7:20:38:
73:24:af:c8:aa:ab:c5:1c:6c:44:d2:17:bc:57:62:
c9:18:04:2b:20:69:61:eb:bc:16:6b:9a:24:a4:8e:
41:d7:57:e6:89:d2:84:2b:a9:ab:d0:ad:ff:c5:b6:
60:13:67:28:11:7b:7a:92:85:a8:e8:3d:a2:c0:a9:
f2:cc:48:41:0c:5e:92:14:4a:60:71:7c:ec:41:88:
2b:59:de:01:06:53:17:9f:95:d9:56:b2:bb:fc:92:
b8:76:e1:ea:54:05:1f:9e:87:d5:2a:55:62:c9:58:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:55:3F:D9:80:6B:E1:D2:35:46:02:39:6A:01:BA:E1:04:FE:F8
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:9a:2b:58:39:a8:8d:7c:ba:28:8f:32:87:18:72:ce:6a:
7d:0e:b4:07:2d:f0:d7:81:d7:1e:45:79:74:14:93:39:fa:ae:
b7:1f:e4:ac:5a:1d:00:f1:1b:99:e6:8a:a4:67:5e:82:e8:7c:
dd:99:d4:2a:28:5f:a7:5b:a5:93:e7:87:17:40:34:5d:08:df:
4f:7b:c4:01:4d:85:46:7d:ad:62:82:4b:a4:2b:ea:27:60:da:
0f:f8:d5:26:31:03:e3:4e:ef:73:76:63:d4:de:50:86:87:3d:
60:71:5a:8e:9c:8f:2b:c6:87:bf:20:5c:82:61:35:e5:5e:fd:
bb:44:54:45:b1:ee:4f:5e:b6:16:3e:1c:2a:9c:73:61:44:d9:
ee:a1:8d:dd:5d:9f:1f:27:08:89:41:9d:73:af:92:b8:1e:3a:
24:b2:71:e9:f2:ff:42:d0:52:45:16:e1:41:9c:c4:f9:87:53:
ae:bf:83:e8:00:10:e5:48:5e:21:a8:b7:85:b9:5e:ad:3b:3b:
50:00:70:a0:b6:ef:f7:85:eb:81:66:92:21:cf:79:13:f2:07:
90:5d:3d:86:75:2a:44:37:0e:6d:6d:89:4f:27:f7:22:cb:b3:
1b:ad:7a:f4:84:9f:1e:80:3f:41:9c:bf:c7:ab:45:c8:c6:d1:
86:05:3b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuXRPsV6Vjm+BWSA9ota9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjYwOTI1MDQwMTEzWhcNMjYwOTI2MDQwMTEzWjAzMTEwLwYDVQQD
Eyg1NWMyNTUzZmQ5ODA2YmUxZDIzNTQ2MDIzOTZhMDFiYWUxMDRmZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI7CIY8HSXZlpeDjkoqGBDe5jzl4
VCARyXR5gmwYF12OrLLQqeL9ORWaKbxs45IIg6qSJtJPH1a/aWpbO6DQ4vQpV1Cc
nwbzMzhdFPH78RhT8hwMhcJzfHu3TQtykIrrGcaRUxN5MJSJug5b1GvQp2lECYH7
YD7hwKrR3sAc/liIyMiAXDspBaGbddHRU11nawHnIDhzJK/IqqvFHGxE0he8V2LJ
GAQrIGlh67wWa5okpI5B11fmidKEK6mr0K3/xbZgE2coEXt6koWo6D2iwKnyzEhB
DF6SFEpgcXzsQYgrWd4BBlMXn5XZVrK7/JK4duHqVAUfnofVKlViyVj17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXCVT/ZgGvh0jVGAjlqAbrhBP74MB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmKaK1g5
qI18uiiPMocYcs5qfQ60By3w14HXHkV5dBSTOfqutx/krFodAPEbmeaKpGdeguh8
3ZnUKihfp1ulk+eHF0A0XQjfT3vEAU2FRn2tYoJLpCvqJ2DaD/jVJjED407vc3Zj
1N5Qhoc9YHFajpyPK8aHvyBcgmE15V79u0RURbHuT162Fj4cKpxzYUTZ7qGN3V2f
HycIiUGdc6+SuB46JLJx6fL/QtBSRRbhQZzE+YdTrr+D6AAQ5UheIai3hblerTs7
UABwoLbv94XrgWaSIc95E/IHkF09hnUqRDcObW2JTyf3IsuzG6169ISfHoA/QZy/
x6tFyMbRhgU7+w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:34:45 2026 by rpki-client