Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: zsRDZk9D70jgBg6coT4HfPx2/GfG4SmNpnzGbbslBUw=
Subject key identifier: 5A:B0:A8:77:A2:25:4E:93:B9:52:E4:4B:EB:45:79:85:E3:74:56:6D
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019D992B52A010616EA8910EE209E182C840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0FFE
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: 8wUaPB0WMMIH-HfrLZ9Xj7JHPSU.roa (hash: tbvw4SX+xk2sDQk81uJa12/9t00Q5IvpxQLluuXTLCc=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: bAgAo4GrFsd4EOuD9w/cBCgOdz5crTIwCB4MD7ijyHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:52:a0:10:61:6e:a8:91:0e:e2:09:e1:82:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=5ab0a877a2254e93b952e44beb457985e374566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:a5:d1:62:d6:7b:7e:b8:ce:a8:ad:5f:66:
1b:36:95:0f:ac:b5:a2:d1:db:69:6d:a2:6e:a3:14:
27:43:36:5b:dc:0a:b1:f2:c7:b6:e0:07:af:af:13:
d5:44:42:0b:3d:b5:fc:01:52:50:22:8a:63:35:b8:
f2:e8:e6:05:8a:5b:cb:2a:10:37:05:c3:5f:fb:09:
81:6f:2f:54:eb:8f:ce:f7:c7:84:06:2f:5b:dc:f8:
10:e6:77:9c:c7:2f:04:03:0d:76:99:9f:38:7f:85:
4d:a1:0f:85:34:59:3a:5c:75:6f:38:ad:f6:a2:30:
3c:24:dc:63:64:1a:aa:31:c7:56:83:8a:18:19:f7:
f5:88:15:20:af:9d:4b:8b:39:8b:d3:a0:9e:66:d9:
0f:46:8f:74:e0:a8:15:54:aa:80:7c:f5:5a:cb:de:
92:46:54:0d:1d:13:87:b5:9b:f6:4e:f3:15:80:8a:
bb:6f:44:5c:91:4d:99:b0:6d:fe:ba:1c:09:c4:32:
a0:51:43:65:46:57:3a:22:ec:f9:ec:2c:f5:d8:98:
e6:2e:41:ed:1a:7c:ed:2c:87:23:7a:7e:4b:5e:65:
56:73:28:00:cd:69:05:35:2c:2f:3a:f8:e0:95:dd:
ae:cb:07:ff:88:54:03:aa:60:ad:1f:2c:3f:57:91:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:A8:77:A2:25:4E:93:B9:52:E4:4B:EB:45:79:85:E3:74:56:6D
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:fc:bb:02:4e:39:e6:c4:75:87:a8:65:65:bd:4e:cc:5d:
95:bd:96:e8:75:20:96:70:46:2b:52:19:31:ab:f7:05:45:b7:
e0:8c:4d:84:31:6e:67:d7:7d:50:8e:c2:fd:e5:12:92:69:9d:
c0:17:a8:85:78:c9:5a:27:be:01:87:27:74:0c:aa:bf:2d:4e:
3e:be:fe:d2:bc:d1:67:60:13:07:99:78:2e:2b:3c:93:35:ac:
64:b6:40:3e:89:de:92:7b:1f:15:a3:2e:67:39:15:3e:42:3f:
7b:7f:30:29:5b:ad:c4:e6:0f:4c:13:78:b1:94:18:c7:c9:3d:
f6:c4:e3:78:40:b4:98:f4:2a:69:6e:bb:2f:71:f4:2b:d7:d9:
2a:31:45:de:2c:f5:24:91:19:27:c1:2a:d7:74:64:7e:c9:11:
e0:c2:d4:a6:6c:f6:d1:3c:dc:7a:9e:e0:3f:85:75:12:df:a8:
c9:cb:42:39:cf:93:28:00:d9:08:d9:c0:24:72:a6:37:c3:ec:
ad:1e:b0:ca:c2:d4:06:59:14:be:68:b1:55:54:11:c4:e8:a1:
c6:9c:63:61:13:6c:48:23:f9:df:43:5f:f2:c8:75:09:32:27:
29:46:56:d1:66:de:88:a6:69:e6:b8:97:8d:20:bb:f4:c6:dd:
5a:33:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:49 2026 by rpki-client