Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: fJDI0yX3QJ+kxThT+fYdwVJ3nszQhaEkhF9UntLizrg=
Subject key identifier: 77:C1:1F:BF:F1:55:17:0E:AD:8C:31:C3:12:86:1C:4B:5F:18:6E:9A
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 019D9D3FD5CEAEDAF24A22A2CF18B2C7F759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 18E6
Signing time: Fri 17 Apr 2026 21:01:39 +0000
Manifest this update: Fri 17 Apr 2026 21:01:39 +0000
Manifest next update: Sat 18 Apr 2026 21:01:39 +0000
Files and hashes: 1: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (hash: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk=)
2: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: LDSxHmf4H2qLSDCyUy4tbsT8pmIGWlAAVPJUI+WM9TE=)
3: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (hash: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc=)
4: zbPHBRrSSTxxm5GjBesQOmg5BOU.roa (hash: 2nuGIy4NdEBraXqbAUjxFu75DMqgnt0PJMHdEvGwETc=)
5: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (hash: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:d5:ce:ae:da:f2:4a:22:a2:cf:18:b2:c7:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Apr 17 21:01:39 2026 GMT
Not After : Apr 18 21:01:39 2026 GMT
Subject: CN=77c11fbff155170ead8c31c312861c4b5f186e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:52:1d:60:f0:93:f1:ef:16:be:fa:ff:86:
2d:3c:42:7b:42:14:c3:ef:46:f3:55:e5:c0:df:da:
b1:e5:f9:6b:25:a1:aa:bb:7f:80:1a:60:79:59:6c:
5f:c3:58:b4:34:0a:bb:5a:35:28:ad:87:99:bb:56:
77:af:89:a1:0f:53:47:dc:5d:ba:ff:e3:52:bc:90:
5b:41:64:b5:43:f7:2c:f6:b2:6e:fb:48:f2:4e:d4:
ef:cc:99:7e:bd:5a:ef:56:9c:33:c5:f7:d3:78:67:
01:ef:6a:ab:ff:7b:74:72:9d:db:c4:1b:89:92:bc:
c5:6f:12:e7:af:5b:54:94:0a:be:03:37:bc:1d:50:
2b:9c:d2:96:ce:71:fb:4a:ef:6f:af:04:04:82:7b:
29:c2:e2:d1:ae:57:9a:0e:57:c0:bd:08:96:dc:08:
08:f7:9e:b1:9d:01:c7:bd:e1:20:3f:16:a0:07:40:
9a:9d:60:1a:2e:c4:51:b4:8a:03:00:06:77:71:8a:
90:72:ee:83:79:a6:d0:5b:88:b3:8e:ee:31:8f:5d:
a1:02:a8:47:fa:8a:e2:f5:b8:bc:d7:7b:cd:1b:a1:
d8:04:83:df:1b:f9:12:47:0c:1b:3f:73:8a:91:f6:
b9:77:bc:1c:b9:f3:68:a0:b2:b2:2b:6b:31:c8:b5:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:1F:BF:F1:55:17:0E:AD:8C:31:C3:12:86:1C:4B:5F:18:6E:9A
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:98:39:f7:0a:53:20:cf:ec:b3:8a:c1:e6:fd:44:29:b6:
85:36:9f:67:cb:60:c2:df:a9:47:d4:4b:35:8c:71:62:a2:4a:
37:44:cd:15:74:7e:10:9f:02:06:a5:98:67:e5:81:29:e3:80:
e1:26:51:33:75:50:e9:b9:48:0c:f6:4f:44:80:71:ec:05:43:
f7:a0:71:57:e9:21:ee:e2:2d:4e:16:f1:80:fb:6a:d0:95:2b:
85:47:5b:75:9d:8d:bf:62:19:ea:08:1c:b9:81:64:d0:1f:ca:
ef:c3:c3:39:fc:5b:a8:88:29:52:59:5b:61:9e:74:67:f7:0d:
2f:0d:72:77:5b:bf:c0:57:0e:be:d8:f6:ad:81:0f:c7:d6:41:
b2:cc:3d:42:c1:53:dc:6b:1d:8f:13:ea:68:62:60:59:a5:39:
e5:2d:a6:d9:f2:e0:c5:fc:d6:97:8b:3e:64:cc:be:c9:1d:d4:
fa:c4:2d:1a:10:0c:47:42:b4:31:ce:6b:0d:56:97:33:88:eb:
ef:21:b2:5b:a1:42:84:a0:2c:70:aa:0a:7a:8a:a0:3d:18:10:
87:cf:af:14:79:2f:21:a4:8b:8b:71:91:a1:fb:fd:ee:b8:33:
10:c7:22:12:de:fc:ac:78:5b:3a:87:d8:5a:29:d0:9b:54:61:
f6:f2:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:36 2026 by rpki-client