Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
File: immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json)
Hash identifier: Z9K8C7uSqywi4u+sf48CdUjyzcPwZcfP0keqK1z7tH4=
Subject key identifier: B1:6A:83:36:AA:FF:32:79:01:49:77:C8:E4:AB:AF:82:F5:6A:43:F4
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial: 019D9A3DFC02117145C85E5EBA95D3CA162A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
Manifest number: 065C
Signing time: Fri 17 Apr 2026 07:00:46 +0000
Manifest this update: Fri 17 Apr 2026 07:00:46 +0000
Manifest next update: Sat 18 Apr 2026 07:00:46 +0000
Files and hashes: 1: HxmIn0AGzA-g9k-4bheqqTcmLgI.roa (hash: uHSpZAAfzcw7ixBYZphuiZW4nA4GJ515tOk36J46Jqw=)
2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: CPFvcsc603x4uRfNZ7HtWRLwGzrUpaoa2hqxl2Qz84c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fc:02:11:71:45:c8:5e:5e:ba:95:d3:ca:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
Validity
Not Before: Apr 17 07:00:46 2026 GMT
Not After : Apr 18 07:00:46 2026 GMT
Subject: CN=b16a8336aaff3279014977c8e4abaf82f56a43f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:f9:47:53:b2:bb:f3:4f:8a:42:3a:58:04:
29:16:9e:64:29:1c:9d:27:19:51:d3:81:81:04:12:
bf:45:19:3a:6b:cb:22:eb:9e:b0:f4:8f:86:68:a1:
3d:62:dd:29:6d:30:9f:f9:c8:18:94:c3:73:02:6b:
9a:b3:b3:c9:8a:87:4a:d0:32:cc:62:ea:6f:0c:d7:
fc:73:a3:8d:9f:b6:62:24:b3:59:02:c6:eb:06:30:
92:db:25:bf:05:cf:76:09:25:42:ff:0b:07:72:d3:
10:cb:f9:16:d6:a0:bf:54:97:61:8c:2c:ad:28:d6:
94:e8:39:15:b0:ec:1c:31:77:36:44:19:b6:2c:a6:
06:df:84:c7:45:e0:1d:8e:ed:81:64:e1:46:9b:06:
b7:1e:10:2c:35:b5:81:38:07:23:c9:94:80:1e:91:
98:19:42:58:e9:88:60:7d:9a:35:c4:cf:23:d6:cf:
5c:23:f4:d3:ed:40:52:de:92:73:86:57:a4:49:20:
96:35:fe:6d:38:74:30:1d:17:c3:d6:2f:6b:ef:ba:
e0:05:67:8d:dc:2a:fb:3d:51:50:10:c6:d9:e3:ad:
b1:90:09:4d:3c:e8:61:47:f1:fb:3e:44:ad:72:ae:
6a:25:15:dc:f0:a1:8d:ec:57:23:a1:45:6d:97:a8:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:83:36:AA:FF:32:79:01:49:77:C8:E4:AB:AF:82:F5:6A:43:F4
X509v3 Authority Key Identifier:
keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4d:f0:e3:c0:fa:ae:b3:bc:48:77:92:a8:20:bc:a3:5b:b2:
47:a7:a2:8f:1b:ef:93:4a:fd:63:dd:3f:db:ea:a2:c3:d2:8a:
8f:3c:48:dc:52:7c:f0:22:83:ca:ac:24:4c:bf:f3:71:ec:5c:
90:db:43:7c:76:45:32:c6:0e:9b:64:4e:0a:50:49:72:2a:16:
92:16:cc:96:a5:b4:53:ca:96:1e:be:81:03:bb:d6:d4:7e:ac:
7c:e8:ae:d6:6c:7c:43:11:32:e8:cc:0c:ea:10:43:05:c1:9d:
3b:46:66:91:7b:f7:1d:9b:88:64:f5:2c:05:48:7c:62:c1:8b:
34:2c:6f:68:f5:de:f0:92:ad:c9:5e:c4:24:80:c3:e8:a8:ac:
ef:96:48:f0:6e:81:7a:f9:ed:e0:ef:36:f8:d6:26:ab:41:31:
38:79:3a:52:c2:94:c8:0a:37:85:a0:6c:36:aa:e4:31:68:9c:
41:8e:2b:52:04:0d:74:91:28:f5:a7:72:10:62:91:81:e3:df:
56:f7:e0:9d:05:53:34:ba:3d:39:53:5e:c2:4e:3c:2c:1a:16:
22:62:f0:d5:fc:b5:a2:70:e8:17:bd:06:f7:9f:1f:5b:2e:86:
ef:d6:cc:ea:da:ec:47:75:55:d6:91:07:30:26:77:7c:2d:6f:
2a:54:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:39 2026 by rpki-client