Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File: ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier: De9CJoSyKbASQ/J97bPnWmUFkQh9zEh75hJG+qToAAA=
Subject key identifier: 6E:5B:5C:5A:DD:0E:49:D5:F3:B0:99:D1:4C:95:7C:1D:75:8D:92:33
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer: /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial: 019CAC0FB9DCBF25CEF8F20490C2B1450303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: 1-SAETGTeaUOj1XdkqRLUPF6Q-1g.roa (hash: J6jUaufkYMrjM7ww1ErRboScW6ZHhG3Zu67b1RodNlQ=)
2: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: Oi31VW1gCipveYlq00fJwoB+27fyzF/lyBR72dMSWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:dc:bf:25:ce:f8:f2:04:90:c2:b1:45:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=6e5b5c5add0e49d5f3b099d14c957c1d758d9233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:1f:92:b3:bf:1d:97:c4:57:68:2b:e5:ef:
af:9e:15:0d:40:f0:5d:49:12:61:75:5f:55:7e:b7:
66:43:1b:ea:02:be:73:ce:2f:2e:9b:c3:4d:2c:fd:
19:46:aa:89:30:d7:2c:b0:15:54:ac:3a:21:97:0d:
1f:7e:cc:f0:66:f6:64:07:99:9b:6f:10:e4:df:30:
85:6d:95:51:f1:9a:6b:c4:ae:e4:48:94:9d:73:19:
c8:82:51:14:01:41:7b:3d:e4:6b:7c:60:cd:4a:35:
31:cf:f6:e8:4b:65:41:fc:0f:b4:43:cf:ff:1d:24:
23:21:2d:37:2e:0a:99:7c:58:37:90:a2:54:dd:7d:
3c:5e:dd:63:be:e2:dc:c3:b4:02:9c:02:69:8b:ad:
45:62:b3:1b:d1:19:d2:c5:c4:39:3a:71:52:1f:d9:
cc:99:b8:c2:4a:60:8d:ac:91:ad:6c:9e:e6:bf:ef:
86:81:38:fa:cd:e3:4d:de:c0:f6:e7:6f:c7:fb:4b:
93:26:2a:f5:4a:6f:97:97:b5:24:50:ad:6a:58:62:
5e:10:12:ba:66:04:05:24:67:0f:8b:64:8f:4e:0b:
1d:59:a4:de:02:5a:63:63:a0:64:4f:a9:bf:27:ff:
c1:b8:c4:d4:13:60:84:97:8f:db:58:07:5b:fe:3d:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:5C:5A:DD:0E:49:D5:F3:B0:99:D1:4C:95:7C:1D:75:8D:92:33
X509v3 Authority Key Identifier:
keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:68:cc:8a:4c:ec:5d:1d:af:aa:d0:65:04:83:b2:7e:a7:ad:
d0:fb:e0:3c:74:7a:ac:d0:1a:80:15:fe:38:e0:97:1d:e9:c6:
67:b5:c3:cb:0e:33:17:28:c2:64:f7:7b:fb:d2:b1:b9:e5:3f:
1a:fc:c8:99:34:aa:be:4a:6a:ae:2a:14:8f:9c:e8:ec:6f:16:
ba:d1:4c:99:34:d0:2f:d2:1b:b4:9c:be:b6:73:e0:38:a0:70:
72:26:46:cb:ec:ee:a6:1c:dc:76:e1:e2:e8:3e:16:21:ed:3c:
41:b4:8a:e5:21:da:07:f4:fa:da:9f:f5:72:81:d0:76:2a:8d:
c1:71:c6:2a:be:89:b3:3a:65:8c:3d:ec:26:05:fd:3f:9b:90:
9a:8e:24:fa:32:78:0b:a0:c3:c7:51:b8:ce:4a:c3:dc:49:a2:
25:8c:f1:d6:29:66:65:b6:2e:0a:09:c5:c3:75:19:59:ed:56:
78:ab:ff:d4:f3:7a:97:78:5b:70:dd:67:15:74:96:a9:64:5e:
ea:bb:8f:f1:d9:83:ef:85:b9:61:e5:6a:0e:fd:0b:9e:d5:8e:
96:f1:f8:9d:8d:e2:c1:05:b5:4c:52:84:a4:f8:32:b0:ed:b5:
3d:6e:c9:56:99:27:c3:5c:0c:96:dc:6b:36:bd:06:34:a3:63:
db:c0:0e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:45 2026 by rpki-client