Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: qZ4rtdqX7x2O3vmQFj921eIBYoZBdAQGPM9tF5UirEU=
Subject key identifier: 60:22:8A:44:41:83:7D:33:E4:9B:D0:EC:3F:EA:53:FE:62:BB:16:B5
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019F92487CDFF2F053FC62EC8EB6A303C42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 06F7
Signing time: Fri 24 Jul 2026 04:00:51 +0000
Manifest this update: Fri 24 Jul 2026 04:00:51 +0000
Manifest next update: Sat 25 Jul 2026 04:00:51 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: U+sTJJaqKQRmtI5OIilcDYfOlfe2ytBpRCldG6Y58uY=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:7c:df:f2:f0:53:fc:62:ec:8e:b6:a3:03:c4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jul 24 04:00:51 2026 GMT
Not After : Jul 25 04:00:51 2026 GMT
Subject: CN=60228a4441837d33e49bd0ec3fea53fe62bb16b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:87:41:c3:66:e5:1c:52:62:f3:ed:73:c3:
82:7e:22:86:37:8d:1c:7d:cb:a3:ad:03:93:46:c3:
3a:0e:ae:da:35:94:90:eb:db:00:ca:1a:46:c5:9e:
c4:d4:ed:1b:e8:36:e0:41:20:d4:53:48:ee:e6:31:
98:0f:e3:4c:4e:4e:2a:0d:da:73:78:ef:fc:bc:a8:
ee:8f:06:3a:91:62:c0:ad:e3:88:f0:08:ed:0f:e1:
ee:54:a2:63:a1:9d:3e:d2:93:28:e8:33:5c:e8:d1:
28:f9:e7:63:7e:99:73:8f:17:0d:ce:be:21:72:a9:
39:13:86:26:82:33:8d:ab:5b:be:7b:76:e2:16:41:
29:4d:dc:da:10:f0:bb:16:b6:f0:c4:09:bc:a5:1a:
09:d3:31:7a:60:57:4e:4f:05:03:f5:99:13:30:d5:
eb:4b:9d:8f:e0:de:73:c4:c6:bb:d6:3c:ee:42:ff:
75:eb:52:a7:85:00:3f:cc:d4:9a:54:55:27:08:3d:
aa:8b:c4:f3:49:bf:4e:f1:60:b2:74:2e:b9:ee:69:
57:63:69:1c:85:14:5e:b3:a5:08:19:bc:38:0e:c4:
f0:a2:6a:d5:86:92:dd:1f:03:f6:d5:b6:91:27:8d:
dd:f2:df:60:9f:eb:75:32:de:63:32:4a:68:e3:4e:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:22:8A:44:41:83:7D:33:E4:9B:D0:EC:3F:EA:53:FE:62:BB:16:B5
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:fe:3b:9e:05:f1:80:38:d2:7b:b7:15:31:bd:6b:5e:5a:
9a:53:d7:98:99:f1:ad:70:75:62:82:0d:26:65:3a:48:29:5a:
03:32:9d:77:62:0f:ad:03:f9:8a:2e:ee:4b:fc:97:a7:31:66:
5e:ce:4d:ed:28:c6:b1:b1:01:3f:b8:98:02:c2:0e:2e:6c:71:
11:71:29:76:9c:38:1e:df:81:99:1f:83:09:d1:d6:48:69:5b:
d4:9e:4b:be:fa:22:83:83:ac:f9:7d:74:64:f1:90:aa:23:81:
8f:7b:eb:9a:4b:a7:69:e3:07:24:9f:70:b4:7d:35:19:15:19:
37:97:5e:8a:a6:0e:f9:cf:82:99:4b:ca:52:c6:05:67:2a:50:
93:b9:74:f0:d8:d3:8f:06:3c:c8:54:81:59:ce:c8:46:8d:d1:
e1:e8:e0:a5:16:a7:67:3b:8c:3f:99:ae:0a:2f:85:96:11:3d:
57:72:89:b0:87:16:49:f4:b4:20:54:3f:7a:27:ba:8e:20:1a:
e2:0c:e4:7a:9b:da:8f:08:c1:97:0f:e8:0d:c4:4f:89:dd:6e:
34:6d:a0:8f:72:a2:0a:60:ce:05:a3:aa:da:5a:6c:ec:94:ec:
d0:71:a8:e7:9e:dd:92:02:f3:c9:a7:d4:30:7d:ed:8b:cc:71:
8c:6d:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:27 2026 by rpki-client