Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: htDW/gkM59qYC5szzRcPjEiLjtbL8LVEoGy/BojwKrY=
Subject key identifier: 22:FF:3F:E3:B9:59:FC:1B:CB:EB:C2:DD:37:B4:3B:87:1A:70:9B:05
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 019DA4F8D6BA6B7BFDE1FF56D4C98A14A720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 0BE8
Signing time: Sun 19 Apr 2026 09:01:04 +0000
Manifest this update: Sun 19 Apr 2026 09:01:04 +0000
Manifest next update: Mon 20 Apr 2026 09:01:04 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: CYvBQ+uyub4H8nWBOxhYENOo4KiXHorUiBWULACCivo=)
2: UyCQmQzgb130efKAikwvTZay9vQ.roa (hash: NfN/ivDYE1D3RgyrEpLsNnMXDrA0/EHnp98caL5ep7Q=)
3: gcJY2xqjp6xOMcCVgtCRtHMyXb0.roa (hash: K3ikNWKlNPs26aV//oAeOvjCgIC32GqIp6d5diZtNJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:d6:ba:6b:7b:fd:e1:ff:56:d4:c9:8a:14:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Apr 19 09:01:04 2026 GMT
Not After : Apr 20 09:01:04 2026 GMT
Subject: CN=22ff3fe3b959fc1bcbebc2dd37b43b871a709b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:35:95:0f:d0:e3:91:2a:ae:df:08:9f:4b:
8a:72:07:ad:01:bb:a5:0d:8a:ae:8d:e2:f9:eb:12:
dc:1f:c6:f7:2a:6e:46:1c:f3:ec:6c:aa:be:8f:07:
3d:c1:1b:14:e0:5c:93:da:9a:a2:94:a8:c4:d3:3f:
d8:09:e2:52:59:43:e5:99:e3:64:cc:ec:20:5c:0d:
8d:e4:27:78:ff:be:7c:de:5e:92:04:16:b8:ca:65:
d6:a0:02:f4:ed:8d:ef:ef:f2:68:f1:65:c2:10:91:
8d:71:34:8c:4f:6d:91:f2:c9:14:80:3e:0b:ed:e8:
51:16:67:66:c3:41:aa:0a:51:24:32:9f:07:79:56:
20:38:fd:b4:a9:56:5e:69:1b:01:50:58:a8:8d:fe:
74:10:72:a1:5e:1c:f1:90:e4:cd:06:06:1d:a8:27:
13:77:0c:74:ab:d9:c0:b7:a8:35:e8:e7:43:2f:c2:
11:28:2c:a8:bb:ac:81:bc:c4:31:87:cd:9c:9c:ee:
32:05:c0:58:48:e4:41:36:80:25:05:a6:ea:ae:18:
e8:a1:7d:02:5b:15:86:a8:e0:09:34:ba:b0:82:fe:
20:36:48:b0:cb:87:28:50:14:07:a3:77:c8:9c:35:
3d:b2:f1:d3:37:c4:66:b8:e0:a8:df:dd:d2:5e:ee:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:3F:E3:B9:59:FC:1B:CB:EB:C2:DD:37:B4:3B:87:1A:70:9B:05
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a8:7f:0e:a7:a3:b0:49:d5:4d:54:54:be:45:e0:76:76:65:
8c:0a:e7:40:e7:e1:44:b5:26:55:e9:0d:6f:b4:cc:bf:e1:d5:
d0:28:50:40:05:bd:e3:b7:75:4f:bd:93:9e:0a:11:dd:30:f8:
f7:bc:50:6a:d8:86:1b:95:f0:a2:bf:a2:25:d0:57:83:9d:cc:
a6:16:38:58:8c:4e:a7:cb:e2:1e:86:d8:a7:aa:c5:3a:74:f7:
ec:43:e3:92:88:12:2f:ff:b9:48:14:fb:a7:64:00:e1:2b:45:
64:08:10:26:b2:1f:91:66:11:2e:f9:cf:54:2c:be:28:f3:25:
bf:43:af:11:d8:98:f0:9d:22:5c:cb:81:c2:4b:2e:0f:7d:7d:
1b:a7:81:f7:8a:cf:89:3c:52:9c:33:42:08:5f:12:e5:b0:ce:
6f:c1:2c:b2:95:38:58:80:aa:15:96:63:6f:2f:4b:34:1e:08:
1c:ad:3a:5c:ca:21:b7:a9:ad:04:8c:7f:56:42:f0:a1:ea:64:
04:c9:10:af:75:90:76:e8:b2:0a:ac:e3:35:be:65:29:11:a0:
4f:60:58:40:ae:19:66:24:0c:5f:03:85:16:62:c7:dc:34:b6:
4e:cc:e8:48:58:23:3b:bf:bc:36:1f:8b:b4:22:f4:f9:65:b5:
78:90:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:24 2026 by rpki-client