
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: qnpnEPKkioCPS4Gt/UxSM7dwSFp0PaRGSXk1I6Mx6qY=
Subject key identifier: AF:56:39:7B:6E:30:3E:45:82:66:8B:A7:3F:44:57:DD:B5:DE:5F:A5
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 019D9A3ED5E851194C26C402A3530C8FAA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 049F
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: ppoJ2Mz2VsWMyenXJsJoQqZqXdLYJCsNmfGn+q7UHco=)
2: iY_NBjZ2wKvEhgTBknWfs0fub4o.roa (hash: MW6tL8GWHpevV/SjR3+AcIiCM8p+f2aCKazHwkxkalU=)
3: ijczCncElROlHI46d-XpTNHadTg.roa (hash: KzZMYnuTUZlqE9+oyNnH3CyhXQ+2YyXZupvfcmp4Fcw=)
4: jRaIj2LT8WIXU3iA4cJ8_db3efw.roa (hash: tCAkC3mU7deWUJjP8Hv0/NGEuNV3/CbI9UawHSvYVy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d5:e8:51:19:4c:26:c4:02:a3:53:0c:8f:aa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=af56397b6e303e4582668ba73f4457ddb5de5fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:48:5e:ae:9f:6e:88:0f:22:6c:23:e8:13:
af:60:2a:29:79:88:6c:ad:24:aa:f8:5c:fe:1a:ac:
78:9c:5a:87:f7:f9:32:c0:fa:19:cb:05:d4:04:02:
f5:f8:b5:b7:4c:e7:a0:49:bb:f2:ee:d0:83:54:bf:
f9:4e:a7:08:1e:2c:56:c4:8f:20:ef:08:9d:d4:93:
2a:aa:70:e2:98:fc:42:8e:08:c9:e3:a9:71:5f:c8:
ee:f7:2d:46:86:a9:3c:b0:d2:2c:e5:ea:1f:cf:f3:
db:75:07:21:c6:98:33:98:6b:41:28:07:e8:16:00:
62:51:4f:88:d5:dc:b7:1a:76:8d:21:c7:fd:60:db:
f9:9d:bd:7c:0b:75:06:26:27:47:e5:6a:1c:0b:01:
d1:2f:10:9a:42:78:fd:84:dc:44:da:10:43:4e:b8:
f4:45:22:a6:38:10:63:6b:14:dc:8c:39:50:26:4e:
a5:57:4e:01:b5:a2:06:8a:59:1c:f2:3a:97:05:e9:
b9:84:32:b8:87:04:47:bc:c6:10:f6:e5:72:25:75:
e3:55:9b:b7:48:df:d2:f3:3e:ce:b4:51:6b:29:22:
6e:1c:07:cb:38:33:42:7a:e0:f8:c0:e5:28:81:cf:
3f:21:15:33:2c:c9:ad:3e:d8:ae:a0:bc:70:6e:2c:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:39:7B:6E:30:3E:45:82:66:8B:A7:3F:44:57:DD:B5:DE:5F:A5
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:74:dd:54:a9:2e:c6:4b:d5:f0:52:91:99:ec:e7:3e:e2:bd:
96:b6:6d:8f:5d:ea:0f:b7:b8:55:e8:ae:33:2b:1b:17:a0:4d:
0f:97:47:36:32:e7:91:04:f3:06:3c:d9:20:f5:5d:31:ab:99:
a1:b3:2f:e9:66:6e:c5:98:b3:e4:98:99:7c:5e:c6:15:12:66:
d1:24:44:a6:5d:96:84:d1:bb:bb:06:35:29:23:39:5c:36:b5:
34:e8:c9:87:e8:27:ec:fe:ee:e2:3b:8d:d1:77:57:15:91:2c:
b1:58:90:01:a8:d4:36:01:ea:0e:78:40:3c:3d:e4:28:95:5d:
1e:83:71:43:e0:e7:e1:7c:22:56:5f:79:00:42:76:01:a7:46:
ef:d5:bb:67:a4:0c:66:17:34:fe:fb:dc:11:8f:b9:08:14:71:
06:42:a7:a5:5d:0b:de:d0:6f:11:f4:69:10:e3:89:01:00:6c:
8b:18:0c:49:d3:1b:2d:82:59:e4:6b:b5:ac:2f:8e:3b:5e:36:
5d:7b:33:58:dc:9a:99:9b:00:24:e5:f0:07:4e:74:e0:b1:ff:
5f:35:c0:6d:f3:ff:de:04:1b:4d:cd:18:f1:cb:c2:da:e2:5a:
d1:b0:6f:e7:13:7d:7e:6b:1b:2f:93:bd:9a:56:29:8f:16:35:
fa:37:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:21 2026 by rpki-client