Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: YL1LMvXgWapZVrmzHKTnql4/p6fVu9zsTpuIBf168Io=
Subject key identifier: 58:51:53:07:5C:09:97:D6:8C:5D:B7:95:28:05:E3:4B:46:3F:07:C1
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019EC1B65A666508AD21098AA1F06845C6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 068B
Signing time: Sat 13 Jun 2026 16:00:13 +0000
Manifest this update: Sat 13 Jun 2026 16:00:13 +0000
Manifest next update: Sun 14 Jun 2026 16:00:13 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: wT28arehSfI+TSKHmfXzhOIbpPAvlxT4K5lltt2baqQ=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:5a:66:65:08:ad:21:09:8a:a1:f0:68:45:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jun 13 16:00:13 2026 GMT
Not After : Jun 14 16:00:13 2026 GMT
Subject: CN=585153075c0997d68c5db7952805e34b463f07c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:b7:b6:39:fe:06:12:26:d4:e9:39:2a:f7:
06:da:b9:68:31:1a:06:e8:03:6f:78:a1:7e:62:d5:
a9:22:08:ee:51:4e:3d:6f:10:05:63:fe:47:3f:1d:
dd:00:12:b6:3c:01:22:6b:fc:d9:bb:6a:e9:8a:e1:
7d:9b:a5:dd:75:20:51:6a:29:f0:50:d3:2a:5e:03:
fa:a5:da:cb:43:e0:51:3a:9b:c2:45:a1:88:0f:92:
f6:4f:bb:4b:56:75:5b:28:c4:59:fa:93:dc:fa:06:
67:dd:9a:c4:79:26:a9:07:fc:e5:bc:c8:54:d5:79:
43:e3:09:bc:29:f7:b0:bc:9f:cd:e7:0d:9c:52:9c:
a8:89:0e:53:3f:98:70:4c:2f:a8:3e:ce:a2:38:83:
62:26:92:cc:74:b2:c6:d0:d0:a7:1c:97:89:ba:c9:
08:06:7a:38:04:ec:7b:d0:e5:9e:68:7a:b6:19:8c:
12:17:7d:72:e4:91:40:0c:ed:0b:79:5b:93:5c:52:
20:2a:56:8d:7b:b1:a6:2d:97:3c:07:98:83:0b:b2:
93:04:6c:07:d6:e8:1f:3c:06:30:d7:ab:9c:78:0b:
b0:24:23:e9:ee:f9:96:db:57:0e:c8:43:9a:29:89:
56:e2:f2:0b:ce:40:25:de:2b:c7:a1:a3:87:04:1f:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:53:07:5C:09:97:D6:8C:5D:B7:95:28:05:E3:4B:46:3F:07:C1
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:24:80:4f:da:ea:c9:4d:5b:e1:c6:88:be:8b:02:5e:27:
ea:28:e7:11:f4:2e:5a:8d:a7:13:95:3d:85:ee:b3:02:d2:3f:
5c:0b:84:13:2e:42:0a:f6:95:70:be:49:70:a4:c0:c0:00:f1:
43:0d:fe:d5:e8:88:fb:df:a1:e3:35:1e:91:39:55:53:35:51:
cc:e3:df:23:65:d4:93:10:9b:9c:e3:a9:3f:8c:f5:26:ca:4a:
d3:55:07:eb:a3:ba:a6:87:f2:75:a0:64:d4:2d:12:b2:f2:16:
f2:8d:d1:25:b5:51:d3:7e:c6:7b:43:cd:5d:5e:33:53:3c:a0:
3c:45:a2:7b:cb:09:11:ff:4a:1a:41:72:56:05:72:51:86:21:
54:5b:49:5f:fb:d9:43:af:dd:5e:a7:0b:a0:41:74:42:be:77:
28:45:e5:f1:bb:65:32:1e:0f:b8:0f:59:fe:62:8f:35:3a:2d:
1c:c4:d0:e2:f8:4f:8d:bc:6d:7b:ca:c4:5e:0e:83:e7:c5:cd:
95:85:d9:b5:01:ac:f3:58:b4:e6:f2:c5:61:93:95:b5:13:6d:
ad:ea:94:15:f1:6b:84:43:2c:e4:ab:d5:ac:e1:24:68:8c:16:
90:c0:28:b5:99:f9:ae:2d:af:c8:0e:42:56:ce:4a:17:df:1c:
4b:c7:c5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtlpmZQitIQmKofBoRcbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjYwNjEzMTYwMDEzWhcNMjYwNjE0MTYwMDEzWjAzMTEwLwYDVQQD
Eyg1ODUxNTMwNzVjMDk5N2Q2OGM1ZGI3OTUyODA1ZTM0YjQ2M2YwN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJi3tjn+BhIm1Ok5KvcG2rloMRoG
6ANveKF+YtWpIgjuUU49bxAFY/5HPx3dABK2PAEia/zZu2rpiuF9m6XddSBRainw
UNMqXgP6pdrLQ+BROpvCRaGID5L2T7tLVnVbKMRZ+pPc+gZn3ZrEeSapB/zlvMhU
1XlD4wm8KfewvJ/N5w2cUpyoiQ5TP5hwTC+oPs6iOINiJpLMdLLG0NCnHJeJuskI
Bno4BOx70OWeaHq2GYwSF31y5JFADO0LeVuTXFIgKlaNe7GmLZc8B5iDC7KTBGwH
1ugfPAYw16uceAuwJCPp7vmW21cOyEOaKYlW4vILzkAl3ivHoaOHBB+IxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhRUwdcCZfWjF23lSgF40tGPwfBMB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuwkgE/a
6slNW+HGiL6LAl4n6ijnEfQuWo2nE5U9he6zAtI/XAuEEy5CCvaVcL5JcKTAwADx
Qw3+1eiI+9+h4zUekTlVUzVRzOPfI2XUkxCbnOOpP4z1JspK01UH66O6pofydaBk
1C0SsvIW8o3RJbVR037Ge0PNXV4zUzygPEWie8sJEf9KGkFyVgVyUYYhVFtJX/vZ
Q6/dXqcLoEF0Qr53KEXl8btlMh4PuA9Z/mKPNTotHMTQ4vhPjbxte8rEXg6D58XN
lYXZtQGs81i05vLFYZOVtRNtreqUFfFrhEMs5KvVrOEkaIwWkMAotZn5ri2vyA5C
Vs5KF98cS8fF3A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:20 2026 by rpki-client