Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: F9f/CA/BsA+q1C7KsKBcHPrK67Nj/Qqk0Lqiwvd98Oc=
Subject key identifier: AF:83:03:B0:5B:ED:05:97:C4:81:E5:E9:E9:67:81:B8:BA:7A:DE:E9
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019CAAC6DC11A5CE9F6CD8E8D61383DA2234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0576
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: RiVur3iSV26AUvAWWpatavvL8VBXePCwtASkVHaXET8=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:dc:11:a5:ce:9f:6c:d8:e8:d6:13:83:da:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=af8303b05bed0597c481e5e9e96781b8ba7adee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:09:23:62:ff:a7:5d:41:b0:9b:46:ed:61:
4c:da:9a:37:f6:15:45:74:e9:bb:4b:9d:52:da:6f:
ce:5b:f4:56:92:d2:91:78:fd:84:eb:4d:b9:d7:05:
d7:96:22:e0:e4:27:10:31:99:f0:d6:7d:76:27:be:
e1:b9:2f:bd:5a:cf:f8:84:85:a3:5c:f1:d1:db:31:
85:ee:02:e3:f0:23:38:cf:62:1d:c2:2b:bc:72:fe:
28:46:ea:d7:c8:26:1b:d3:3f:01:90:23:b2:db:5d:
c6:f2:06:48:c7:0e:da:6d:e6:7b:ee:f7:63:92:47:
ca:56:71:92:97:f9:74:e3:4c:de:8a:a4:d9:5b:39:
89:c9:f2:82:44:f3:bc:ab:52:e6:bc:24:ff:3f:60:
f5:ba:12:f0:8f:d1:2f:49:5d:93:c2:28:d2:9f:43:
02:67:79:c4:a9:5c:b1:43:72:34:6f:3e:1f:13:d7:
5c:28:b2:8b:41:17:1b:76:e6:59:fc:7c:3c:99:fb:
a4:69:74:3c:b1:76:15:31:46:4f:70:6d:3d:1f:2a:
a9:7c:a5:e3:98:3d:7d:cc:dd:01:6c:76:0f:ff:a9:
25:6c:a1:f5:e5:82:7d:04:39:f3:ff:1d:7b:90:ea:
9c:19:9f:7b:c8:1e:74:6b:d2:b9:7b:85:db:d4:e7:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:03:B0:5B:ED:05:97:C4:81:E5:E9:E9:67:81:B8:BA:7A:DE:E9
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6e:44:00:c2:d0:00:ba:8a:f6:af:2e:ce:fe:f9:1b:4e:fb:
19:5f:65:67:cc:78:bf:2f:a2:e0:af:99:4f:9a:ca:b3:38:17:
c8:4f:59:2f:e9:2b:cf:51:ee:74:47:f7:36:5f:96:eb:c0:96:
27:5d:16:15:0c:be:a2:05:6a:75:20:35:96:4b:58:e0:fd:21:
78:76:03:e7:a5:9a:c2:c6:97:aa:91:dc:0f:5c:8c:3d:5f:94:
6e:af:69:4a:e9:5e:8c:d9:f1:e3:4b:4b:38:8c:1f:26:b5:c7:
8e:f2:4f:d1:da:01:84:f7:05:9f:61:3e:eb:1a:e5:a4:e2:45:
cc:87:28:ca:ac:b0:87:9c:f5:4f:5a:56:f4:96:50:05:a8:30:
37:cc:f6:a6:41:20:18:4a:08:6e:64:95:93:a2:0f:2a:1b:b2:
54:ea:47:fc:70:b8:30:00:9e:ab:40:d5:bb:56:b2:76:30:4b:
ee:43:20:83:61:3e:cb:32:11:bb:23:a6:5c:b6:31:ea:b4:95:
4f:9e:cd:9f:fd:4b:e2:36:65:3c:15:cb:68:9e:1a:ba:26:63:
5e:f9:6f:28:e8:31:71:4f:69:38:5c:c1:ce:28:63:d3:54:0c:
7f:a7:0b:b8:5b:a1:3e:5c:3b:c4:54:aa:6a:cd:11:3d:23:25:
3b:c1:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:06 2026 by rpki-client