Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: b7UDMW12PfcB2j02SgVZnJjL2FI4Pr730uQOQjdO2Ag=
Subject key identifier: 7B:13:1A:CB:1A:6C:0D:FE:F1:D2:43:BA:D7:C9:EB:8F:1F:97:48:CB
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 019CAAC5FF53631E3CC4ADA7B6D30583F0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: BZkVxkX4NRNAhejG2k4AhOF/+BJrVOAq0LWGaIX0GKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:ff:53:63:1e:3c:c4:ad:a7:b6:d3:05:83:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=7b131acb1a6c0dfef1d243bad7c9eb8f1f9748cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:1d:a1:30:93:d0:bf:92:b0:d0:5c:9a:77:
b4:9a:b5:4d:5d:67:63:12:79:8c:7d:d5:39:00:5a:
ff:0d:54:b2:2c:31:37:25:ce:c6:75:8b:9b:16:66:
5c:e0:a9:4a:dc:a6:07:91:d2:2c:a3:8a:ca:68:d0:
3f:36:8e:2e:4c:32:27:bd:cd:fa:51:ae:06:d0:e3:
62:26:0a:dc:e7:fc:32:1f:09:ef:be:93:66:4e:d8:
4b:65:c7:ec:6a:c1:90:3d:11:fc:4f:df:6f:ac:83:
c4:a5:73:35:ef:8c:6f:4a:cf:61:0b:e0:b1:1e:96:
49:7e:4c:c7:87:f9:72:bb:7d:a7:34:7d:1f:ab:c2:
23:7b:56:16:f7:c9:97:43:9f:12:b6:82:45:e3:d7:
90:6f:38:f6:95:40:cb:ea:69:d2:b4:f4:32:d2:c1:
b5:9d:28:ab:19:fa:d4:6d:9b:97:b8:96:50:dc:58:
50:96:3d:8b:33:3c:55:e7:01:2c:cf:09:88:38:92:
a4:f1:cc:40:a7:7d:c8:e9:36:d1:fa:d5:93:30:9d:
84:2c:99:bc:12:5c:49:de:d8:b4:c2:29:4c:b4:b9:
5d:b1:56:0d:bb:16:36:ad:83:ad:2b:5d:c9:c2:dd:
bd:34:0f:eb:2d:b2:85:86:fa:94:f2:3e:a4:04:6e:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:1A:CB:1A:6C:0D:FE:F1:D2:43:BA:D7:C9:EB:8F:1F:97:48:CB
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:aa:3e:15:7a:ff:cb:7d:06:5e:5f:5d:57:ff:02:f3:f1:
87:72:38:24:9d:76:54:c1:8c:e2:24:3d:43:0f:82:1c:b7:4f:
16:aa:d2:49:78:20:2d:3c:1f:1c:7a:4d:c5:14:2f:90:04:08:
86:dd:b0:63:db:af:9c:b1:22:d9:f4:65:17:4a:57:c1:8c:2a:
8c:cf:d5:fe:e8:ac:eb:6b:c7:9a:4b:24:96:45:05:75:6a:11:
e5:3c:3f:0e:0f:70:95:fc:74:c5:98:9a:a0:58:0d:28:9d:ed:
18:d5:c3:cf:bc:05:d3:76:65:07:1d:94:2f:59:d8:88:ed:5e:
f7:04:6a:5b:05:d7:19:8f:6f:8f:9a:78:7f:04:10:78:fa:e4:
b0:b0:ba:7c:d7:c2:ce:e4:c6:02:6a:27:90:9a:70:fb:26:13:
ad:59:c4:43:3e:ca:8a:e8:fe:d5:1e:c1:2b:18:15:67:8c:a4:
9b:15:c2:b2:47:3c:9b:37:60:8c:e9:e5:5c:aa:1a:dd:f2:cb:
01:46:9e:56:a2:c4:4c:34:90:fb:78:e3:a8:7b:f9:c6:a7:6b:
90:1d:04:2f:52:87:c4:67:e0:53:eb:15:24:da:85:23:26:c2:
e8:43:0a:cd:34:ef:51:ff:75:0f:e2:73:90:f3:5e:7b:58:0a:
7d:eb:ac:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxf9TYx48xK2nttMFg/DuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNmEzNDExNTgzZTI2MTQzMzQ5MmU1MDQ3Y2YzMWM0NmMz
ZDJjMWQwHhcNMjYwMzAxMTkwMDI4WhcNMjYwMzAyMTkwMDI4WjAzMTEwLwYDVQQD
Eyg3YjEzMWFjYjFhNmMwZGZlZjFkMjQzYmFkN2M5ZWI4ZjFmOTc0OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsekdoTCT0L+SsNBcmne0mrVNXWdj
EnmMfdU5AFr/DVSyLDE3Jc7GdYubFmZc4KlK3KYHkdIso4rKaNA/No4uTDInvc36
Ua4G0ONiJgrc5/wyHwnvvpNmTthLZcfsasGQPRH8T99vrIPEpXM174xvSs9hC+Cx
HpZJfkzHh/lyu32nNH0fq8Ije1YW98mXQ58StoJF49eQbzj2lUDL6mnStPQy0sG1
nSirGfrUbZuXuJZQ3FhQlj2LMzxV5wEszwmIOJKk8cxAp33I6TbR+tWTMJ2ELJm8
ElxJ3ti0wilMtLldsVYNuxY2rYOtK13Jwt29NA/rLbKFhvqU8j6kBG6hpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsTGssabA3+8dJDutfJ648fl0jLMB8GA1UdIwQY
MBaAFIpqNBFYPiYUM0kuUEfPMcRsPSwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYt
NzA5OGE3YTUyYzdlLzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYtNzA5OGE3YTUyYzdl
LzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGCqPhV6
/8t9Bl5fXVf/AvPxh3I4JJ12VMGM4iQ9Qw+CHLdPFqrSSXggLTwfHHpNxRQvkAQI
ht2wY9uvnLEi2fRlF0pXwYwqjM/V/uis62vHmksklkUFdWoR5Tw/Dg9wlfx0xZia
oFgNKJ3tGNXDz7wF03ZlBx2UL1nYiO1e9wRqWwXXGY9vj5p4fwQQePrksLC6fNfC
zuTGAmonkJpw+yYTrVnEQz7Kiuj+1R7BKxgVZ4ykmxXCskc8mzdgjOnlXKoa3fLL
AUaeVqLETDSQ+3jjqHv5xqdrkB0EL1KHxGfgU+sVJNqFIybC6EMKzTTvUf91D+Jz
kPNee1gKfeus/Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:45 2026 by rpki-client