Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: QygFgjwOE+kTo3ld9iwa1fDeH8IHErPJ+X6OITOy9hg=
Subject key identifier: 00:A7:16:B7:CC:0A:96:78:65:DC:47:AB:9C:A1:BC:62:43:BB:9E:3F
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 019D38D365FA2505ADAC5399E5FD2D8E8F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 0BB0
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: d1pB6tyMT6J6rR3dwq/D272Vgu67FOCR1qAYYAXr674=)
2: UyCQmQzgb130efKAikwvTZay9vQ.roa (hash: NfN/ivDYE1D3RgyrEpLsNnMXDrA0/EHnp98caL5ep7Q=)
3: gcJY2xqjp6xOMcCVgtCRtHMyXb0.roa (hash: K3ikNWKlNPs26aV//oAeOvjCgIC32GqIp6d5diZtNJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:65:fa:25:05:ad:ac:53:99:e5:fd:2d:8e:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=00a716b7cc0a967865dc47ab9ca1bc6243bb9e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:df:62:dd:8a:99:31:e5:fe:69:66:cb:79:
80:c5:08:85:dd:1b:b4:61:04:2f:96:81:e3:74:98:
60:f2:fc:e0:1d:0f:32:ac:b4:2b:b2:0b:85:db:36:
cf:21:4c:49:e0:e1:aa:e9:bf:8e:15:af:c2:3f:d8:
28:d6:69:ba:64:96:42:01:e9:13:65:6d:63:1f:cc:
1b:cb:4e:35:99:5c:05:96:c2:26:93:29:8a:d2:01:
a3:6d:54:8e:5d:74:38:48:e5:71:18:b9:9c:83:9b:
0e:81:f6:3e:ad:5b:be:52:05:ec:b1:42:8d:02:e1:
88:bf:0b:86:5f:d3:2d:63:4e:7a:7c:d7:59:68:90:
7e:1b:88:3e:36:d6:30:34:c1:8f:4c:6b:a3:62:51:
3c:44:95:ac:07:ae:49:46:8d:f8:fa:2a:ed:2a:b1:
96:f3:5e:fb:9d:ab:fb:d4:ae:45:da:f5:73:03:78:
3d:62:b4:fa:e0:28:3f:78:4d:3b:b4:6f:70:d2:81:
57:08:56:2e:11:18:0a:81:de:1a:e1:c0:a0:3f:d8:
d8:b5:35:82:15:75:f5:0e:97:2f:7d:6c:b3:6a:83:
7a:15:98:39:91:0c:a7:8f:c3:de:76:ef:72:31:e9:
0b:73:b5:1a:3b:38:cb:da:bf:06:49:a2:7f:29:52:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:16:B7:CC:0A:96:78:65:DC:47:AB:9C:A1:BC:62:43:BB:9E:3F
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:92:d4:c1:75:21:6b:8e:87:a4:2c:8d:3b:e1:b2:32:e3:
67:f7:55:72:e5:95:d0:8b:00:2b:ba:f4:95:04:b8:05:b4:2b:
cc:db:8c:b6:a7:4c:11:88:06:d4:e8:ef:fe:0a:9a:a1:ba:e8:
bf:c7:da:71:66:28:b9:19:a0:18:94:d1:c7:bd:4e:e1:4d:54:
b0:83:0f:6d:b2:1a:36:eb:14:b3:e6:63:25:21:d2:f5:76:1b:
71:d9:71:ae:60:f8:7b:08:99:7c:11:aa:4b:fd:dd:a2:31:80:
4c:f0:7c:33:ad:4f:cb:04:e7:eb:81:7e:56:f3:ce:50:bf:98:
c7:61:7e:9c:0a:13:de:68:86:3e:01:70:e3:a2:e1:67:ac:26:
d0:38:e3:a3:70:4a:8a:7e:78:4a:44:fe:a8:fa:65:1b:19:01:
49:a0:4f:1c:17:29:58:c5:f2:0c:f7:80:a1:95:7b:f3:49:05:
b0:fc:4f:de:1a:97:64:c4:cf:d0:e6:d2:af:44:65:74:87:5e:
76:55:d0:0e:6e:12:cf:17:9f:fd:7b:74:fb:e9:d3:72:b8:e3:
67:fc:75:7f:34:4d:f3:30:b0:28:4f:1c:1f:66:d2:0a:e4:53:
82:cb:a0:a8:4f:93:21:d7:79:88:09:af:5d:cc:3c:b0:16:73:
b5:7e:74:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402X6JQWtrFOZ5f0tjo9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNmE4NzIxNmQ3ZTNjNTkzMTVmNzc4YjJjOGY0YTllZjQ3
OGI5M2UwHhcNMjYwMzI5MDkwMTExWhcNMjYwMzMwMDkwMTExWjAzMTEwLwYDVQQD
EygwMGE3MTZiN2NjMGE5Njc4NjVkYzQ3YWI5Y2ExYmM2MjQzYmI5ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvTfYt2KmTHl/mlmy3mAxQiF3Ru0
YQQvloHjdJhg8vzgHQ8yrLQrsguF2zbPIUxJ4OGq6b+OFa/CP9go1mm6ZJZCAekT
ZW1jH8wby041mVwFlsImkymK0gGjbVSOXXQ4SOVxGLmcg5sOgfY+rVu+UgXssUKN
AuGIvwuGX9MtY056fNdZaJB+G4g+NtYwNMGPTGujYlE8RJWsB65JRo34+irtKrGW
8177nav71K5F2vVzA3g9YrT64Cg/eE07tG9w0oFXCFYuERgKgd4a4cCgP9jYtTWC
FXX1DpcvfWyzaoN6FZg5kQynj8Pedu9yMekLc7UaOzjL2r8GSaJ/KVJ6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACnFrfMCpZ4ZdxHq5yhvGJDu54/MB8GA1UdIwQY
MBaAFCJqhyFtfjxZMV93iyyPSp70eLk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzIt
Yzk5MDAwM2IyNGNhLzEvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzItYzk5MDAwM2IyNGNh
LzEvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2yS1MF1
IWuOh6QsjTvhsjLjZ/dVcuWV0IsAK7r0lQS4BbQrzNuMtqdMEYgG1Ojv/gqaobro
v8facWYouRmgGJTRx71O4U1UsIMPbbIaNusUs+ZjJSHS9XYbcdlxrmD4ewiZfBGq
S/3dojGATPB8M61PywTn64F+VvPOUL+Yx2F+nAoT3miGPgFw46LhZ6wm0Djjo3BK
in54SkT+qPplGxkBSaBPHBcpWMXyDPeAoZV780kFsPxP3hqXZMTP0ObSr0RldIde
dlXQDm4Szxef/Xt0++nTcrjjZ/x1fzRN8zCwKE8cH2bSCuRTgsugqE+TIdd5iAmv
Xcw8sBZztX50xA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:28 2026 by rpki-client