Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: NiPn6IbIjTc2FeovBewIuonWCLuF8WECE61fRvdnUwU=
Subject key identifier: 70:C6:3A:BA:EE:AD:47:F0:EE:F4:CE:FB:9A:36:E1:A8:6A:FD:8C:62
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019CAA8F7AF3FB85EF66851B44CF4A629033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 054C
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: LW//JqLJszA9w7YRnsIzFSyZX/s21yNW3O/7RB5Uz38=)
2: wyv5vBa47PAsnMwdHNximNKw3Uk.roa (hash: 7tiep6Gb67cUku8Kl/ICbKHtHb5PWFafeqQ40Zk2Vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7a:f3:fb:85:ef:66:85:1b:44:cf:4a:62:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=70c63abaeead47f0eef4cefb9a36e1a86afd8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:da:ae:c6:78:35:9d:a9:59:3e:38:4f:c7:
71:09:1b:e4:9c:1b:11:7b:dd:90:d3:97:d2:e9:86:
4d:c5:96:4f:69:b1:27:32:8a:66:fb:17:9e:5e:a6:
60:63:68:0b:22:ba:d1:de:77:e5:ac:73:d0:1b:b6:
c2:39:2e:98:7d:f8:ab:8f:53:cc:e4:24:32:6d:6d:
d9:31:7a:1c:ac:10:97:ec:25:2f:13:95:50:63:76:
bf:55:14:e6:10:15:a5:55:41:bc:57:d3:55:08:49:
12:1e:5b:6e:2f:ad:a5:04:4c:b6:ee:3d:36:4a:75:
1f:29:12:9b:71:52:cf:c2:80:8b:0d:64:f2:5e:c7:
49:ce:8f:d6:d9:44:f0:e0:e6:a8:c6:f4:91:f3:a0:
97:3b:99:72:87:76:07:64:c0:81:0f:d0:8e:28:47:
8a:fb:fa:48:21:57:86:50:66:b4:6e:a7:be:8f:bc:
8c:49:81:48:89:b3:d5:6a:15:92:42:f9:80:3d:f1:
b9:83:48:2f:23:3f:0b:ee:9a:25:49:31:12:08:08:
e4:ba:2b:f3:95:ff:b6:53:85:3d:b4:09:4d:96:cf:
c9:c0:29:00:57:b5:b4:ea:c0:b0:64:60:86:b8:50:
17:9f:33:62:c7:73:b7:09:7c:f5:d1:1d:10:60:2f:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:3A:BA:EE:AD:47:F0:EE:F4:CE:FB:9A:36:E1:A8:6A:FD:8C:62
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:51:d5:d7:c1:b6:f9:45:54:f4:61:12:dc:7d:a0:9a:26:
99:05:fb:18:7b:fa:ef:19:2f:ee:ac:20:74:1a:d0:dd:82:90:
fc:be:d5:46:64:28:d9:ea:3f:c8:bc:98:27:fe:4d:68:41:f0:
a1:3b:3a:78:52:5a:9a:7f:5a:b7:bd:f9:08:28:11:6f:f3:31:
f9:e9:67:33:e7:fe:4a:3b:50:65:d4:89:11:a3:9c:60:b0:e4:
63:cb:cc:94:ad:48:d0:28:0d:f2:7f:ef:75:12:cd:d1:59:5d:
a0:ba:35:04:54:59:15:06:e6:00:3e:79:86:db:d0:0e:2c:11:
c5:ea:6e:c8:48:5d:2e:ce:68:04:90:25:05:dd:6e:75:04:84:
49:ef:58:7d:8a:29:f4:03:5f:46:0f:66:a9:d6:47:e6:e0:bc:
91:26:9d:3f:0b:2c:3d:18:ce:7b:4d:16:b6:13:bf:14:51:f9:
df:64:f2:15:62:15:3d:b4:7f:79:63:06:b7:16:20:ab:6c:a0:
75:ec:6d:5e:5d:c2:2b:66:ef:e7:14:e9:44:15:f1:83:a0:b7:
42:35:8c:11:31:4e:95:9f:9a:7c:25:34:57:87:e9:17:99:1a:
5e:c6:dd:18:58:cd:da:dc:98:88:27:49:06:4e:1f:dd:37:d4:
20:97:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:31 2026 by rpki-client