Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: 4/ocAWIKkOdU7CwdJHZ73gsZ/zuGNGoJVnaHKs5Mlcg=
Subject key identifier: 5C:1F:51:EE:C7:71:74:48:6B:C6:8A:F7:57:B3:D2:EB:F2:D3:9B:0F
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019D265F27E38D647BD139F5D83AED1F2498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 05B6
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: xzFzz4NjfalKTEyem+MzHQxnZkuXKM9K+sLrEdRkGzQ=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:27:e3:8d:64:7b:d1:39:f5:d8:3a:ed:1f:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=5c1f51eec77174486bc68af757b3d2ebf2d39b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:83:25:62:9a:67:25:a0:3d:c7:1c:b6:64:
0c:5f:e1:d4:6a:a0:19:c4:3f:20:4b:8b:5c:dd:10:
98:ef:00:56:89:ce:14:23:7f:e4:c6:c7:fe:10:4f:
1b:41:35:b0:6e:2e:7b:1c:62:bf:cd:da:d5:c3:49:
c7:a5:74:c4:78:ac:9f:ee:e2:9c:4a:f8:dc:2b:5d:
42:55:eb:0d:52:07:c0:02:26:ba:2c:75:24:0d:16:
56:e3:5d:84:5a:8b:e6:4a:71:6d:0f:cf:74:b1:04:
af:f3:b5:ff:2c:e9:e9:df:06:1c:36:05:68:73:46:
59:d1:52:af:b3:fe:dc:4b:f3:d5:0d:b7:26:20:dc:
9c:00:df:c2:08:af:95:67:46:7e:60:19:d6:6d:54:
c9:78:2c:91:fe:b7:be:04:ac:2b:52:f5:da:9f:0f:
f3:01:c3:8d:08:89:98:12:5d:be:29:4f:3a:6a:78:
84:92:0d:6e:2d:92:9b:2a:a8:ae:c0:6f:19:85:2c:
45:bc:22:e6:c2:fa:f5:21:4b:27:c0:fd:71:fe:d4:
66:0b:c1:69:3c:f0:56:68:a7:09:19:8a:a3:10:e7:
52:bd:9b:31:d4:f3:12:a8:7a:ac:f3:ca:c2:24:8f:
94:9a:42:36:a0:43:67:c6:d3:60:05:a3:fd:76:7b:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:51:EE:C7:71:74:48:6B:C6:8A:F7:57:B3:D2:EB:F2:D3:9B:0F
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:a5:c6:52:69:a6:91:e5:22:2f:b4:40:6a:4b:48:8f:37:
2a:26:ac:09:22:7c:2b:ed:df:6d:c7:8c:35:f9:ab:5d:ae:69:
5e:c5:68:b3:f7:b3:53:67:6e:4c:ea:fc:20:c1:da:d0:35:0b:
34:84:8a:f3:ea:bd:71:b3:7d:59:4c:91:6e:7f:ef:58:66:16:
2d:24:c5:84:04:4d:7d:33:76:6f:33:e3:8a:91:e5:02:50:da:
89:63:a5:a2:f9:87:f6:40:d5:91:8e:57:40:5c:53:8b:83:ce:
d2:cd:34:8c:f1:e2:66:b3:b1:c8:03:58:24:ef:71:b1:c6:85:
a1:ed:9e:e4:bf:22:66:6c:aa:8e:b4:1d:b7:a7:66:95:1f:e2:
b1:f4:08:21:10:55:3b:40:b6:61:ed:01:77:73:59:52:6f:3a:
af:94:ce:22:11:cc:42:7f:29:fe:83:4a:be:7d:dc:26:49:53:
69:83:77:ea:6f:fd:40:f6:ea:26:ad:ff:6f:df:37:1b:57:08:
fe:2e:da:9b:ff:3f:3d:2b:f9:5c:49:af:25:e4:cd:e3:05:cc:
91:80:ea:89:fb:fc:6f:26:5f:5b:37:5b:47:84:b0:44:ba:51:
0c:19:10:fd:2a:82:31:c1:b4:6d:1a:80:24:89:b3:ba:e6:b8:
92:ff:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:29 2026 by rpki-client