Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: ZnclLbbw6WmfZipH3FPVnJPQwvdjUbcHlPVDRaTz5nI=
Subject key identifier: E9:54:36:23:4C:D5:63:02:10:8D:63:F7:6F:F0:DB:5D:7C:C4:55:EB
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019D389BEF74AC48343C6C2F8F2B86381BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0FCC
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 8wUaPB0WMMIH-HfrLZ9Xj7JHPSU.roa (hash: tbvw4SX+xk2sDQk81uJa12/9t00Q5IvpxQLluuXTLCc=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: RWvUyKQJJklOvkgif98y3XGENX/IH/Q1mjiBfgC31Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ef:74:ac:48:34:3c:6c:2f:8f:2b:86:38:1b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=e95436234cd56302108d63f76ff0db5d7cc455eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:9f:d5:71:2f:8c:41:a5:38:65:0e:42:89:
06:58:6e:8f:b8:cf:87:3a:68:72:8b:73:d3:6c:c5:
6e:e1:b3:00:42:77:89:82:81:a7:f3:f1:a3:d1:95:
10:fb:ab:8e:03:b3:ea:68:37:79:80:f1:9e:f0:71:
27:d9:da:41:de:88:ae:11:c7:0a:04:21:46:4e:11:
8b:db:15:be:05:fa:b0:35:15:d1:55:1b:c1:2e:35:
61:27:c3:27:2b:1c:48:e0:7b:9d:9a:4e:a0:85:75:
a6:39:0b:18:70:5a:e8:92:52:72:eb:e2:a0:aa:23:
24:dc:31:a0:c0:d5:bd:59:ec:0d:a4:6f:13:3d:e4:
da:01:75:53:e4:5a:51:b6:de:61:c6:1a:ca:d9:0d:
dd:d4:6b:b0:26:c2:50:45:44:08:c6:81:ef:f9:7e:
44:31:df:85:b1:5c:ab:31:63:6d:ce:e6:9a:01:6a:
4d:e8:42:57:2b:47:34:98:2a:fa:94:84:a6:64:be:
3b:3e:fb:ab:8b:d0:c9:80:a2:92:8d:49:27:43:70:
4c:ca:2c:55:a5:3f:60:d7:b7:4d:be:66:35:13:2d:
47:84:b2:ce:65:62:a2:56:a6:cb:2a:84:6e:9a:7e:
39:51:60:4f:b4:b4:c5:d4:29:3a:1e:59:ba:9c:c6:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:54:36:23:4C:D5:63:02:10:8D:63:F7:6F:F0:DB:5D:7C:C4:55:EB
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cd:d8:5e:6d:04:b6:82:52:d1:f2:26:be:d3:81:63:04:ed:
00:1f:93:2c:ff:34:72:11:4f:43:41:96:f6:8c:6a:b4:3f:6d:
82:15:cb:aa:a7:35:e8:cc:64:d4:d0:d5:6b:c9:91:82:c3:b6:
fd:03:13:36:7c:6c:9d:7c:41:b2:17:7a:da:63:b2:40:88:01:
f8:77:98:f5:90:e7:bc:3f:2e:28:d4:1b:f3:ef:45:ba:99:e8:
aa:83:7b:ea:61:06:2c:96:7a:b1:e5:11:df:13:0c:19:e9:2d:
38:53:0a:ef:03:1f:cd:1b:9d:37:a7:08:cc:81:07:db:75:6e:
8f:63:ea:b4:2f:af:37:d3:2a:a3:ab:c2:c8:4c:2e:46:4a:f6:
3a:6c:5d:22:59:56:52:9d:5f:44:54:f3:39:2a:17:cd:4a:84:
fb:ae:86:0c:c7:68:f5:e9:59:49:5d:16:12:5c:18:94:21:06:
54:d3:99:e8:9e:22:6b:d5:d1:46:ae:d9:bd:52:a7:c7:b3:10:
9d:05:62:1e:77:00:59:09:7d:fd:c3:1d:3b:b3:7e:c5:dd:3b:
20:88:56:1d:77:ce:f5:a8:80:b2:00:9e:62:95:da:e5:59:a6:
06:92:d3:01:b7:16:0c:09:6a:fc:82:06:23:e7:14:2f:b0:2a:
b0:84:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:32 2026 by rpki-client