Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: pV7f2Bo/eD+eq79I/lJLGajG7O+GlCeGsqfbXzcCd24=
Subject key identifier: 36:A4:E4:2A:0A:46:91:58:A6:98:49:31:7F:2B:8B:F8:19:F5:7B:85
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019DA3E689EB190A4A6AA8FC44C7C3D8A3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 03CC
Signing time: Sun 19 Apr 2026 04:01:27 +0000
Manifest this update: Sun 19 Apr 2026 04:01:27 +0000
Manifest next update: Mon 20 Apr 2026 04:01:27 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: DrqljEiOoSL8dA4fnLgE8u6bMVtBzRMP0meJL1Keryg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:89:eb:19:0a:4a:6a:a8:fc:44:c7:c3:d8:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Apr 19 04:01:27 2026 GMT
Not After : Apr 20 04:01:27 2026 GMT
Subject: CN=36a4e42a0a469158a69849317f2b8bf819f57b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:ad:2b:0a:45:03:73:d4:0e:32:87:a1:a7:
ce:e6:16:ee:74:60:e3:3d:ac:42:72:24:5b:cd:7f:
00:f8:f6:a6:b1:ee:0c:80:cb:63:d4:f9:05:fd:f4:
a7:e4:7f:08:0d:17:a5:ba:aa:c5:93:80:77:d0:fe:
6e:76:ab:62:1c:57:61:00:c9:76:6d:f4:e0:e5:74:
a8:3f:8a:78:ac:b2:f9:02:1e:71:11:05:49:4b:2d:
cc:9b:01:59:8c:bb:64:e8:34:c0:f1:86:8f:65:8c:
69:1e:f5:11:1f:f2:6c:4e:39:e8:60:84:24:ce:8d:
1f:5b:e9:8f:3b:6e:d7:81:bc:86:71:6c:49:b9:af:
b6:c2:d4:c5:7e:68:e1:73:50:3e:b5:c3:d4:41:41:
54:57:5d:25:88:24:81:20:e1:cb:6f:d8:97:6b:01:
c4:58:48:96:ca:f3:d7:17:b5:d1:ba:f1:d6:7d:19:
a5:3f:5f:b3:28:fa:b2:35:8d:bb:0a:a3:f1:0d:28:
d6:ca:45:65:3f:9a:9a:4b:78:1d:ae:73:88:37:e8:
2c:79:7e:94:d3:e0:d9:42:b5:d6:8c:06:88:38:d1:
a4:40:1a:de:8f:7a:22:2f:7b:bd:be:7e:9e:ae:25:
e7:10:33:7d:31:4a:c7:c2:ee:41:58:86:eb:7e:f7:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:E4:2A:0A:46:91:58:A6:98:49:31:7F:2B:8B:F8:19:F5:7B:85
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:32:58:e4:f3:03:60:1f:5c:c3:c4:7a:62:f3:92:fd:d9:
4b:81:50:fd:67:c8:99:73:b1:4c:42:95:36:50:33:1a:f6:94:
c1:3e:05:93:ca:22:87:77:6e:6b:80:01:87:dc:47:47:c7:47:
87:52:89:0c:83:b2:ff:66:a8:ae:f1:66:83:de:5c:b6:10:b5:
29:52:70:3f:c1:ce:e4:e7:b4:c2:ef:bf:94:d9:28:2e:67:4b:
aa:30:93:c1:6e:46:d2:af:f8:83:bb:91:5a:f1:e3:6b:ae:97:
d7:b5:00:d2:07:bb:37:22:39:e5:e7:9b:02:e1:e4:37:03:4e:
db:2c:67:bf:ce:04:c3:2c:4c:5c:cd:04:1c:24:a2:8b:2f:63:
07:89:64:b1:05:ca:48:e4:39:5f:7b:47:ea:a1:b9:f5:8e:f4:
00:49:d0:f6:25:8b:01:4e:e7:8b:a5:22:84:f6:bd:76:82:d0:
ce:9b:f5:b0:22:26:2f:6d:6b:58:51:cd:75:48:e7:3e:d6:b0:
7c:82:c0:91:e3:91:77:db:67:3c:9a:db:33:0d:6a:e5:d8:74:
57:80:f0:7f:02:a0:7c:82:ad:02:e0:16:fa:c1:e1:57:0f:f9:
33:f0:18:f5:ed:d3:77:6e:83:aa:72:d8:5b:cd:52:4e:35:6c:
e0:8d:d1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5onrGQpKaqj8RMfD2KPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj
YjZmNWEwHhcNMjYwNDE5MDQwMTI3WhcNMjYwNDIwMDQwMTI3WjAzMTEwLwYDVQQD
EygzNmE0ZTQyYTBhNDY5MTU4YTY5ODQ5MzE3ZjJiOGJmODE5ZjU3Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqtKwpFA3PUDjKHoafO5hbudGDj
PaxCciRbzX8A+Pamse4MgMtj1PkF/fSn5H8IDReluqrFk4B30P5udqtiHFdhAMl2
bfTg5XSoP4p4rLL5Ah5xEQVJSy3MmwFZjLtk6DTA8YaPZYxpHvURH/JsTjnoYIQk
zo0fW+mPO27XgbyGcWxJua+2wtTFfmjhc1A+tcPUQUFUV10liCSBIOHLb9iXawHE
WEiWyvPXF7XRuvHWfRmlP1+zKPqyNY27CqPxDSjWykVlP5qaS3gdrnOIN+gseX6U
0+DZQrXWjAaIONGkQBrej3oiL3u9vn6eriXnEDN9MUrHwu5BWIbrfvf8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDak5CoKRpFYpphJMX8ri/gZ9XuFMB8GA1UdIwQY
MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt
ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx
LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGAyWOTz
A2AfXMPEemLzkv3ZS4FQ/WfImXOxTEKVNlAzGvaUwT4Fk8oih3dua4ABh9xHR8dH
h1KJDIOy/2aorvFmg95cthC1KVJwP8HO5Oe0wu+/lNkoLmdLqjCTwW5G0q/4g7uR
WvHja66X17UA0ge7NyI55eebAuHkNwNO2yxnv84EwyxMXM0EHCSiiy9jB4lksQXK
SOQ5X3tH6qG59Y70AEnQ9iWLAU7ni6UihPa9doLQzpv1sCImL21rWFHNdUjnPtaw
fILAkeORd9tnPJrbMw1q5dh0V4DwfwKgfIKtAuAW+sHhVw/5M/AY9e3Td26DqnLY
W81STjVs4I3Rvg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:07 2026 by rpki-client