Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: Uz6dApDu0GeF+dQviqfelE8Vi4M2oQLMXX+05Dz+VBQ=
Subject key identifier: 0B:96:02:55:C9:08:51:12:04:77:51:E7:F2:5F:09:CB:6F:E1:7C:E3
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019CABA2595DEA30BC790A43FF56F36963F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0F83
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: 8wUaPB0WMMIH-HfrLZ9Xj7JHPSU.roa (hash: tbvw4SX+xk2sDQk81uJa12/9t00Q5IvpxQLluuXTLCc=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: EgvXuL3dDpxh9mwhzkfVEJXljlGP41a5LFelrh37wmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:59:5d:ea:30:bc:79:0a:43:ff:56:f3:69:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=0b960255c9085112047751e7f25f09cb6fe17ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:27:b5:f3:02:3e:79:50:0a:c4:37:f6:75:
1d:11:07:86:f4:92:c3:02:3c:68:46:d7:4e:ea:47:
5e:db:5a:38:cf:86:7c:85:1f:fa:5f:58:11:fc:95:
3b:42:54:9b:ca:74:dc:81:6b:6a:27:f0:b3:e5:d9:
3d:3e:24:fa:48:6e:b8:79:ad:e4:6a:83:c6:9b:01:
2a:ab:71:28:05:5e:17:d3:08:93:6d:13:6f:cf:8f:
8d:65:b3:13:f4:4c:27:08:3e:25:c0:a9:cd:ba:44:
86:01:f6:2c:c6:7d:a5:8a:75:16:d8:5a:dc:4e:0e:
16:13:7e:50:2a:d8:27:7e:dd:00:33:43:3d:2b:91:
56:99:69:76:5f:f1:96:72:5e:1a:b2:b3:fe:6f:b6:
44:d2:e1:50:84:fa:8e:98:82:50:0a:33:30:5e:45:
9b:8e:26:be:e2:77:1b:02:32:df:4e:61:3d:40:a5:
ee:58:b8:7a:7b:f1:9b:f5:4c:c7:d8:f6:38:d2:87:
c0:09:3b:b1:88:06:b5:d8:38:0e:a8:cb:ff:fc:76:
dc:03:68:d3:a1:1a:8e:26:74:7e:a4:82:70:a1:d9:
bc:ef:bc:01:ea:47:a5:92:3a:29:89:3a:33:18:f3:
5f:52:18:d1:af:74:88:ec:49:bb:d7:5d:99:8e:67:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:02:55:C9:08:51:12:04:77:51:E7:F2:5F:09:CB:6F:E1:7C:E3
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:71:17:25:b1:e9:fa:30:63:30:8a:19:93:f5:00:28:e7:
33:dc:15:c5:ca:f6:ca:70:df:7c:15:99:ff:97:72:0d:52:54:
21:cd:4d:11:13:a6:be:ba:e5:33:4b:0d:46:cb:54:6d:cf:65:
1b:cf:39:b0:c3:6d:e5:59:59:55:d4:20:19:30:89:52:97:bf:
c4:3c:31:cc:9a:59:a1:5e:db:1c:db:73:80:37:55:70:99:c6:
3a:e1:b2:2a:c5:92:83:c3:40:1a:65:aa:b3:29:74:a3:1c:9d:
e2:ac:7c:8d:92:18:27:d2:e0:64:d9:6a:e4:24:a4:3a:80:d7:
50:1c:7c:ea:8f:bd:66:be:11:f9:6b:98:93:63:f9:76:0a:fb:
3a:51:17:3d:bd:3a:7c:a5:76:cb:6d:d7:ad:51:5f:f7:8a:1b:
cd:29:f5:8c:45:34:a9:ab:9d:90:19:dc:d0:e7:a7:29:9d:32:
ef:17:91:34:33:ad:42:95:93:bb:18:6a:da:59:8c:03:72:72:
11:1b:65:35:ec:8c:e9:ac:6e:a7:f2:f3:c7:db:5c:e5:20:b3:
f6:53:1e:43:48:76:c9:88:b9:e0:86:22:94:69:18:ef:76:9f:
aa:f7:cd:1a:c8:8f:02:8d:04:3b:5e:97:7a:5d:17:04:d1:d7:
df:35:02:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolld6jC8eQpD/1bzaWP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjliMDM5Y2Y4YWFmMTQxZDZlNmQ2MTZlN2MxNjkwODlj
YmNiMzIwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD
EygwYjk2MDI1NWM5MDg1MTEyMDQ3NzUxZTdmMjVmMDljYjZmZTE3Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8ntfMCPnlQCsQ39nUdEQeG9JLD
AjxoRtdO6kde21o4z4Z8hR/6X1gR/JU7QlSbynTcgWtqJ/Cz5dk9PiT6SG64ea3k
aoPGmwEqq3EoBV4X0wiTbRNvz4+NZbMT9EwnCD4lwKnNukSGAfYsxn2linUW2Frc
Tg4WE35QKtgnft0AM0M9K5FWmWl2X/GWcl4asrP+b7ZE0uFQhPqOmIJQCjMwXkWb
jia+4ncbAjLfTmE9QKXuWLh6e/Gb9UzH2PY40ofACTuxiAa12DgOqMv//HbcA2jT
oRqOJnR+pIJwodm877wB6kelkjopiTozGPNfUhjRr3SI7Em7112ZjmeGGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuWAlXJCFESBHdR5/JfCctv4XzjMB8GA1UdIwQY
MBaAFHIpsDnPiq8UHW5tYW58FpCJy8syMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQt
ODdhNjg0NWY2NmY5LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQtODdhNjg0NWY2NmY5
LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdZxFyWx
6fowYzCKGZP1ACjnM9wVxcr2ynDffBWZ/5dyDVJUIc1NEROmvrrlM0sNRstUbc9l
G885sMNt5VlZVdQgGTCJUpe/xDwxzJpZoV7bHNtzgDdVcJnGOuGyKsWSg8NAGmWq
syl0oxyd4qx8jZIYJ9LgZNlq5CSkOoDXUBx86o+9Zr4R+WuYk2P5dgr7OlEXPb06
fKV2y23XrVFf94obzSn1jEU0qaudkBnc0OenKZ0y7xeRNDOtQpWTuxhq2lmMA3Jy
ERtlNeyM6axup/Lzx9tc5SCz9lMeQ0h2yYi54IYilGkY73afqvfNGsiPAo0EO16X
el0XBNHX3zUCiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:21 2026 by rpki-client