Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: QQITstZe7cWBF0mZFW5PsJ8vC9FxDH8/gi2y7PepHts=
Subject key identifier: FB:75:F8:B3:05:B6:0F:91:36:0D:E4:A8:59:F7:4D:01:9C:28:FA:0A
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019D9A3DE0D458048E7FFEB5890C06E43D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 05F2
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: lDaByYUd11OAidIORQEeKchEjPoTlWF5myqQ7oh5Bac=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e0:d4:58:04:8e:7f:fe:b5:89:0c:06:e4:3d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=fb75f8b305b60f91360de4a859f74d019c28fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:55:9f:24:2a:fe:c3:f7:4e:ee:ab:62:0b:
ac:59:f0:4a:6b:e8:64:8d:17:7e:39:1a:d7:3f:20:
14:f4:03:b1:65:47:d4:4f:f0:2e:12:c6:37:90:dd:
2d:e6:cf:39:2c:67:67:f4:5f:d2:ea:83:fc:e1:9f:
a8:60:bc:45:48:e8:28:79:26:9c:29:be:63:99:8e:
35:77:7a:72:f1:6b:ca:04:6d:84:3a:79:06:62:96:
61:a5:ac:08:33:4e:4b:92:db:9f:98:dd:e2:e9:4b:
8e:b9:7a:76:b9:75:46:c2:17:38:a5:7b:78:f5:9c:
ff:ab:2c:a2:42:16:30:92:77:75:6d:f5:38:b6:fd:
fb:4e:ed:be:24:bf:19:4e:8c:c3:bf:62:3f:8c:05:
ae:c3:d0:18:19:10:5a:69:80:a8:aa:67:04:b2:80:
bf:75:e6:c7:9f:c4:8e:c4:e4:3f:20:28:7e:6b:70:
f4:f7:89:de:23:a1:4d:75:5c:c9:ee:ce:2d:db:ce:
bd:bf:13:b1:e4:56:67:28:2e:db:85:9c:ba:28:5b:
8b:3e:d4:be:4d:84:9d:a1:0a:b8:c3:58:32:c4:4b:
6b:f9:1f:5c:66:b3:62:29:76:1f:7e:04:e2:1a:6d:
b6:cf:b8:ce:bc:99:c6:e8:6e:37:0a:9c:81:0e:54:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:F8:B3:05:B6:0F:91:36:0D:E4:A8:59:F7:4D:01:9C:28:FA:0A
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:82:06:39:f4:b4:06:97:95:54:a5:03:bb:71:6e:8b:16:64:
f3:b4:94:77:26:e7:92:04:a4:dc:ee:22:be:b6:45:70:54:35:
36:95:eb:34:21:b2:22:bd:8a:62:43:ef:0d:64:ba:a2:8a:2f:
0f:0f:db:cd:36:64:66:44:da:59:c7:da:f7:0b:e2:33:09:e7:
4d:3d:40:6d:d0:5e:02:da:1b:1a:fa:32:a9:29:b3:6b:04:32:
2a:60:26:51:9a:32:e4:cb:c0:6a:e2:42:6b:ec:5d:42:ea:69:
5e:09:fe:43:6e:dc:79:02:9e:e8:5b:d8:14:d8:d0:35:f5:20:
9c:e0:77:87:35:16:bb:33:35:49:7e:b2:23:64:8b:2c:dd:94:
87:c7:09:bf:11:73:17:c0:80:b7:63:21:eb:99:50:d0:66:15:
10:24:81:29:da:f6:63:71:9d:77:67:cd:5b:16:9b:4b:0d:9d:
74:6e:a3:d3:5c:9a:ec:fb:e1:94:c5:a7:0a:cf:54:ea:ec:9f:
57:b6:63:69:7d:06:82:bf:2c:fa:bd:3e:a7:cd:95:cd:c8:b0:
60:55:04:31:fc:67:f0:2f:44:27:c7:e6:fd:5b:94:0f:d5:16:
4f:dd:c8:5f:19:44:92:3c:52:c9:20:45:f1:5b:3d:a8:72:d4:
96:9c:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:39 2026 by rpki-client