Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: RFeSGHlxA/oJ3wvtTGCiMSpACYgzZPxKzlqgijRtV4w=
Subject key identifier: D2:19:21:B6:1A:28:D3:D0:C1:94:FE:7E:AC:7E:CA:1D:30:55:E4:F2
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 019CAAFD21377E2039BBC447E5AE41A810C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 0475
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa (hash: CfqYoJORgk50J8/a4wFc3Mw6td5sedXHYSUR5haXaCE=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: PxAvYnxQrS7xh11rVckEMTS0nMpq/wKDUf25GSFJDNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:37:7e:20:39:bb:c4:47:e5:ae:41:a8:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=d21921b61a28d3d0c194fe7eac7eca1d3055e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:3a:29:87:8c:cd:05:38:69:b8:28:83:ce:
82:e2:4b:c9:d5:63:a6:2d:29:a8:b8:94:81:f0:74:
30:41:03:ed:83:23:9a:f6:11:20:99:ac:53:c4:41:
29:7b:45:c0:a8:d7:52:51:75:40:c4:8c:c9:cc:87:
52:74:da:56:3d:c2:ab:00:43:a5:87:21:73:11:b9:
6c:ff:db:1f:54:c6:e6:cc:6d:80:77:22:15:0c:b3:
68:71:e1:74:51:6f:ec:9e:c5:49:bf:d8:6a:40:88:
1d:0e:94:c1:49:57:16:40:15:db:64:15:1f:5b:c1:
84:92:0f:76:d5:00:f7:52:61:f7:7d:f5:bb:4a:f0:
03:53:4f:1c:2a:02:a2:4a:31:fb:3b:5e:a8:5d:70:
35:fc:89:c3:c2:64:71:31:4b:b1:b7:ed:fb:39:16:
e1:57:12:b1:79:64:0c:d7:cb:e7:e9:c9:68:ae:46:
32:fb:22:fe:54:f9:26:63:55:07:6c:72:cd:f8:0e:
c7:c1:51:fa:2a:8c:fe:5d:9d:ab:b0:30:56:3b:59:
d3:a2:88:0a:32:54:ef:32:85:35:5d:a5:d7:4d:c7:
7e:37:bb:f1:be:cb:b0:81:83:34:e0:b0:47:b4:2a:
58:da:62:0d:8c:d8:d6:1d:89:a2:1a:6f:9b:54:ce:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:21:B6:1A:28:D3:D0:C1:94:FE:7E:AC:7E:CA:1D:30:55:E4:F2
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:99:f4:31:26:27:1d:70:16:08:b8:9d:14:11:4a:e0:42:8c:
66:78:5e:2c:70:7a:d8:9f:8f:8c:d7:35:97:24:35:1b:87:55:
d1:0e:d6:77:9c:de:c1:a5:89:ef:3a:73:96:c2:6b:ee:2e:5f:
d7:a5:09:e7:b8:86:2e:37:a8:25:f9:60:05:a6:17:46:fd:31:
21:21:22:cd:f5:bc:74:29:14:d6:83:a3:46:53:fc:fb:a2:70:
c6:a8:cb:5d:54:90:e8:49:55:1b:e9:5a:4b:a0:7a:fa:e7:c9:
9c:45:7d:e5:20:a5:a3:d1:a8:ce:1a:34:26:72:3e:cf:2d:f6:
e7:bf:23:c1:5f:10:65:ee:25:f6:0c:65:54:4a:1c:0c:d8:c6:
85:cf:14:e3:3f:b9:80:70:32:9a:13:39:c6:7f:41:2e:54:34:
30:19:6f:0e:3c:6c:a0:c3:7e:6f:4e:6e:1a:a9:a5:5c:6d:fa:
1c:2a:0b:28:2b:32:c8:a7:bd:6a:7d:7a:24:97:84:73:8e:eb:
33:84:c0:cb:67:f3:e6:fd:fd:87:96:a2:17:32:45:c4:f9:72:
eb:45:5f:e5:36:cf:d9:8d:3e:72:77:7b:fb:25:94:e5:df:f8:
52:63:43:1b:6c:1b:37:7c:15:9d:b7:3a:71:7e:24:8b:de:68:
b5:00:34:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SE3fiA5u8RH5a5BqBDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjYwMzAxMjAwMDQxWhcNMjYwMzAyMjAwMDQxWjAzMTEwLwYDVQQD
EyhkMjE5MjFiNjFhMjhkM2QwYzE5NGZlN2VhYzdlY2ExZDMwNTVlNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM46KYeMzQU4abgog86C4kvJ1WOm
LSmouJSB8HQwQQPtgyOa9hEgmaxTxEEpe0XAqNdSUXVAxIzJzIdSdNpWPcKrAEOl
hyFzEbls/9sfVMbmzG2AdyIVDLNoceF0UW/snsVJv9hqQIgdDpTBSVcWQBXbZBUf
W8GEkg921QD3UmH3ffW7SvADU08cKgKiSjH7O16oXXA1/InDwmRxMUuxt+37ORbh
VxKxeWQM18vn6clorkYy+yL+VPkmY1UHbHLN+A7HwVH6Koz+XZ2rsDBWO1nToogK
MlTvMoU1XaXXTcd+N7vxvsuwgYM04LBHtCpY2mINjNjWHYmiGm+bVM7jfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIZIbYaKNPQwZT+fqx+yh0wVeTyMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZn0MSYn
HXAWCLidFBFK4EKMZnheLHB62J+PjNc1lyQ1G4dV0Q7Wd5zewaWJ7zpzlsJr7i5f
16UJ57iGLjeoJflgBaYXRv0xISEizfW8dCkU1oOjRlP8+6JwxqjLXVSQ6ElVG+la
S6B6+ufJnEV95SClo9Gozho0JnI+zy32578jwV8QZe4l9gxlVEocDNjGhc8U4z+5
gHAymhM5xn9BLlQ0MBlvDjxsoMN+b05uGqmlXG36HCoLKCsyyKe9an16JJeEc47r
M4TAy2fz5v39h5aiFzJFxPly60Vf5TbP2Y0+cnd7+yWU5d/4UmNDG2wbN3wVnbc6
cX4ki95otQA0Ng==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:51 2026 by rpki-client