Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: NvIiDxO4seiETBFE+pKtHxbswCrZdeduoi6Mogu5pWI=
Subject key identifier: 2C:7B:3E:63:EC:CD:8E:83:03:A6:99:3C:FF:83:9F:7C:A0:F4:C2:C0
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019FAB63DB1230560ED9D78392455F185D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 04D9
Signing time: Wed 29 Jul 2026 01:01:15 +0000
Manifest this update: Wed 29 Jul 2026 01:01:15 +0000
Manifest next update: Thu 30 Jul 2026 01:01:15 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: MbdWkoA5+PSUbIV2hJdfhBBa2tGP1QQS+AJ0xmKL+Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:db:12:30:56:0e:d9:d7:83:92:45:5f:18:5d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Jul 29 01:01:15 2026 GMT
Not After : Jul 30 01:01:15 2026 GMT
Subject: CN=2c7b3e63eccd8e8303a6993cff839f7ca0f4c2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:92:b2:aa:91:d5:82:c8:36:d6:09:dd:4a:
57:3b:06:78:17:de:c6:fc:31:77:c8:c4:3c:92:10:
8c:18:15:35:a4:3f:de:c9:c9:f3:da:dc:78:79:2e:
0e:b7:25:da:81:c8:24:0c:6d:be:3d:12:43:8f:e0:
52:74:ab:5b:b1:0e:6a:6c:29:68:20:79:ea:6d:39:
fa:fd:e4:15:f9:f7:bf:fa:2b:0a:da:de:1b:a2:e4:
43:79:45:c1:2c:6b:2a:20:3e:df:fe:0c:e1:94:a4:
80:c5:fa:d0:34:d6:eb:f7:5c:7f:a1:66:40:f5:c9:
7a:cc:51:dd:5f:1c:6d:33:3a:37:f0:66:76:55:ab:
07:7a:e6:8a:21:84:08:87:cf:aa:54:28:96:bc:e2:
2e:cf:54:7d:bd:02:7e:38:6d:bd:a5:f5:d3:ea:7e:
08:87:bb:f6:d3:41:03:55:f7:8a:f1:ee:1d:54:24:
84:25:a9:8d:30:57:47:e9:ab:d2:c2:9c:ee:be:c7:
5a:2c:01:74:b4:8f:93:e3:f1:64:c2:df:f8:e9:ac:
04:48:6c:3e:a4:12:ec:7f:9d:73:05:54:3e:fa:cd:
e4:fc:64:99:c3:a9:09:a5:3b:06:cc:7e:05:90:4f:
bc:6b:a0:69:be:d7:b3:f7:fd:29:98:b8:6b:2a:20:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:3E:63:EC:CD:8E:83:03:A6:99:3C:FF:83:9F:7C:A0:F4:C2:C0
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:d6:2a:6b:d0:bd:eb:ea:84:50:96:ae:ac:9c:0d:d9:4f:
65:23:67:17:c5:d0:aa:e2:06:d8:e4:ba:f9:57:e6:f5:5c:70:
12:b0:f6:96:55:17:2c:7b:0e:bb:ce:8b:9a:f2:d3:0c:d8:4b:
13:dd:da:8f:50:d6:ad:29:7f:94:04:5e:36:75:cc:e3:77:62:
66:fa:24:3a:7e:58:26:e1:6d:e3:8a:61:a4:fb:f3:5c:b5:fa:
c8:b4:7a:73:b1:10:31:8a:b7:04:d1:8d:24:67:aa:57:1d:c4:
b2:c8:c5:1c:e2:98:e0:4c:1d:db:72:f7:72:30:53:59:6e:8f:
6c:ba:87:33:b5:3b:65:96:81:ec:f8:2d:1e:0a:7d:77:30:05:
66:e0:b9:7e:86:97:38:66:b3:f1:50:49:4f:b0:af:6b:69:18:
8b:8a:ec:ee:de:bf:4d:30:c0:38:79:dc:d8:62:87:0d:d2:d7:
3c:6b:2a:1a:c3:31:1b:6d:cf:a9:5c:ac:58:48:35:ec:f8:e1:
46:fc:65:b7:7e:85:45:83:f0:a2:76:ae:1b:37:7b:6a:50:ec:
5d:da:90:7d:32:12:b3:57:e9:e7:da:9a:18:71:ab:6b:22:9b:
ca:53:c5:fe:60:fd:88:a4:e6:03:ad:d8:ea:00:7d:84:65:be:
13:9e:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:23 2026 by rpki-client