Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: XR6jaqGn7Ssjc/8sLaWdFbDEhSCUYSzlUPnRHiev86I=
Subject key identifier: 0C:67:4F:44:71:6E:B0:4A:F2:2C:36:60:96:E7:AE:CC:0B:24:C7:4D
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 019CAB6B7DE598D9467690BD0ED3201B24F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 0976
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa (hash: UMdzymruvfotkFYiGIjdIXyvlwL7DTcm4OFrb3LPVB0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: k36clywGkrq/mY9yMJQ7TLVDxvaSM63gg3S7U0vAc4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7d:e5:98:d9:46:76:90:bd:0e:d3:20:1b:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=0c674f44716eb04af22c366096e7aecc0b24c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:45:63:5d:a0:ef:89:f6:1b:62:9b:fc:38:
a2:77:e3:59:f4:78:35:06:0d:ce:57:20:0a:e2:65:
58:c6:be:69:63:c2:62:34:bb:34:f4:4e:8c:b6:fd:
42:a0:95:9b:cb:4d:92:73:88:06:a2:5e:11:8a:4a:
43:f2:d5:6a:42:5e:20:3c:34:16:b6:a7:d5:c8:98:
f2:58:16:30:2f:52:7f:0b:66:6d:db:c9:b3:29:c1:
5f:6f:64:3a:a6:7c:6a:ac:ad:5d:cf:a7:3f:63:bd:
70:d1:38:da:d2:13:dc:25:d1:64:88:78:fe:56:a0:
0b:10:d8:c7:0e:98:7a:4d:15:35:c2:a4:d3:b1:d8:
0a:ac:36:a5:d5:8b:87:02:6d:3d:0d:b2:b5:70:72:
61:fc:b6:bc:c9:0d:a8:57:69:4a:3e:ba:24:be:73:
fa:41:96:fd:b2:a1:03:1c:4d:e5:7b:8b:1d:60:7e:
f9:3a:2c:9b:7c:f1:cc:e8:8a:a3:66:55:d4:e8:5f:
44:22:9b:2b:6b:e7:b3:87:e5:2a:2d:44:5d:cb:77:
78:9e:b4:1e:c2:da:e0:82:46:b8:bf:df:64:e7:6b:
94:eb:1d:c5:eb:42:48:70:fd:4f:61:32:8e:81:74:
1e:e5:f0:72:23:07:f7:05:99:8f:b9:9b:ff:23:81:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:4F:44:71:6E:B0:4A:F2:2C:36:60:96:E7:AE:CC:0B:24:C7:4D
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7d:4e:74:99:b8:ce:b9:63:7e:c9:d9:08:8a:4e:45:c5:2c:
b6:da:db:28:ff:02:7d:da:cd:7e:f7:3c:bd:b9:6b:8b:53:c2:
7e:43:a1:05:fb:11:54:9d:ca:a9:ea:32:a6:42:4a:5f:fd:96:
c5:1b:ea:ff:39:79:ef:18:9b:bb:96:d2:cd:c5:67:f7:5c:03:
66:4c:83:50:6d:8b:4b:dc:11:7b:cc:dd:fd:91:e6:ca:ce:55:
22:fe:a2:1d:28:0a:f1:5b:66:7f:95:47:eb:cc:c9:42:b6:06:
5f:b2:6e:8c:31:bb:89:84:27:3f:4d:55:0a:f4:43:6c:90:e3:
44:2f:59:58:6e:92:e6:f6:77:f7:c3:f8:41:83:6e:eb:82:6d:
a1:c2:c6:9a:a2:ef:8c:e0:9d:09:39:22:45:99:36:ba:ba:d9:
de:9d:48:62:22:58:8f:a1:ad:ea:ce:85:91:0d:77:54:b2:d0:
47:cf:0a:2c:81:d4:c8:b6:4f:68:64:3c:57:e7:b2:01:98:e2:
2e:2a:fc:81:a7:d6:af:06:b0:13:70:51:b1:4a:40:5f:ee:f3:
0f:d1:24:70:70:32:66:c9:78:41:0f:ca:76:b0:2c:7b:f4:cd:
db:c7:8c:b5:49:62:9a:43:63:45:92:dd:ce:ac:b4:d9:4f:d4:
e5:63:40:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra33lmNlGdpC9DtMgGyTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjYwMzAxMjIwMTE0WhcNMjYwMzAyMjIwMTE0WjAzMTEwLwYDVQQD
EygwYzY3NGY0NDcxNmViMDRhZjIyYzM2NjA5NmU3YWVjYzBiMjRjNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpVFY12g74n2G2Kb/Diid+NZ9Hg1
Bg3OVyAK4mVYxr5pY8JiNLs09E6Mtv1CoJWby02Sc4gGol4RikpD8tVqQl4gPDQW
tqfVyJjyWBYwL1J/C2Zt28mzKcFfb2Q6pnxqrK1dz6c/Y71w0Tja0hPcJdFkiHj+
VqALENjHDph6TRU1wqTTsdgKrDal1YuHAm09DbK1cHJh/La8yQ2oV2lKProkvnP6
QZb9sqEDHE3le4sdYH75OiybfPHM6IqjZlXU6F9EIpsra+ezh+UqLURdy3d4nrQe
wtrggka4v99k52uU6x3F60JIcP1PYTKOgXQe5fByIwf3BZmPuZv/I4E4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxnT0RxbrBK8iw2YJbnrswLJMdNMB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk31OdJm4
zrljfsnZCIpORcUsttrbKP8CfdrNfvc8vblri1PCfkOhBfsRVJ3KqeoypkJKX/2W
xRvq/zl57xibu5bSzcVn91wDZkyDUG2LS9wRe8zd/ZHmys5VIv6iHSgK8Vtmf5VH
68zJQrYGX7JujDG7iYQnP01VCvRDbJDjRC9ZWG6S5vZ398P4QYNu64JtocLGmqLv
jOCdCTkiRZk2urrZ3p1IYiJYj6Gt6s6FkQ13VLLQR88KLIHUyLZPaGQ8V+eyAZji
Lir8gafWrwawE3BRsUpAX+7zD9EkcHAyZsl4QQ/KdrAse/TN28eMtUlimkNjRZLd
zqy02U/U5WNAuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:32 2026 by rpki-client