Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: EpzAwJHYLK3IEcppIPnaLw28evgInwlzJy/L3ipeH2k=
Subject key identifier: 8A:FE:2C:0E:FD:84:76:2F:C0:75:76:56:BA:F1:17:77:42:FA:52:93
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 019D37C043B08C6EBFE3224FCC7CD2471405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 077B
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: UoQphpVP17w1RLgIRIjas9xZFp8kzihI9VyW3rGJ8bA=)
2: yYkIK7iiHzx2jAmuALfuoXQn_Is.roa (hash: gxk/AWSXI5drD+6qtBL8cwOZXbNZIUQAyoeMR1t9KzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:43:b0:8c:6e:bf:e3:22:4f:cc:7c:d2:47:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=8afe2c0efd84762fc0757656baf1177742fa5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:c0:70:ca:59:ef:18:cc:11:74:53:dd:57:
54:cd:d5:5a:e7:28:57:25:10:2a:de:51:0e:5f:56:
08:5a:81:01:89:d5:f1:b8:1b:0f:d8:a4:76:ea:b4:
4d:9b:aa:a1:f1:0e:bc:72:43:f5:d8:26:f4:d6:59:
8e:17:db:fd:bb:2b:f4:65:d2:89:e3:44:5b:56:f1:
d6:a8:99:f8:9d:d6:69:9e:f0:76:dc:0d:d3:26:82:
f0:59:03:f8:47:a2:aa:90:e3:a0:cd:cc:67:44:57:
04:d3:59:50:66:e5:d4:ef:92:27:ed:38:18:5a:40:
80:9c:6b:68:7d:c9:59:2a:08:1c:0d:83:0c:a4:25:
d8:96:13:35:a4:1b:fa:11:ed:bf:d6:ea:db:84:f6:
7d:d1:8d:d5:31:3d:75:88:14:90:3c:17:88:f0:e5:
19:0b:d1:1b:70:62:b3:24:f2:f0:e1:06:8f:54:53:
af:ac:bf:58:59:2a:eb:4a:2f:1b:5a:82:6d:72:e0:
d8:7d:b2:d0:34:14:91:1f:21:6b:ca:9a:26:f5:a1:
3b:a6:c4:2c:d0:f7:69:54:50:a9:26:1f:a5:e0:27:
b9:e3:96:41:63:6a:b1:96:60:f2:d5:eb:7e:c2:4b:
c9:d1:9b:1e:3f:d9:90:61:47:7d:85:e3:f1:64:cb:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:2C:0E:FD:84:76:2F:C0:75:76:56:BA:F1:17:77:42:FA:52:93
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:d8:80:85:7a:36:e4:f7:43:93:a5:72:1a:43:eb:d5:56:
be:f2:16:dd:47:fb:f3:cb:01:3b:37:df:40:4f:df:66:07:34:
3d:5f:90:2f:35:a9:14:13:83:9e:ff:b0:3f:d5:36:a2:2d:03:
30:b5:2c:7a:cc:82:1b:b5:01:eb:ef:ed:a7:b9:83:15:6d:14:
e6:7c:3e:9e:8e:67:49:4e:2e:7f:ee:b0:04:0f:e7:09:5c:30:
c3:02:e1:42:1a:a2:d3:2b:69:d6:89:86:c3:e9:25:34:4b:f6:
48:64:64:71:8e:ee:83:4e:f8:8d:ff:f3:c4:bb:cf:d3:e5:9f:
46:49:30:9e:5c:e3:0a:10:0f:67:b2:47:bd:3b:63:45:da:b8:
3d:c7:26:7c:2c:54:e7:f3:49:35:d7:a2:1b:83:ce:df:f9:f5:
e3:8c:de:2c:6d:c6:6e:d9:43:ef:9e:fe:3b:39:3f:09:b0:68:
5d:99:92:f3:23:8b:e9:82:a9:75:7f:ef:8e:23:80:a5:89:2a:
37:bb:28:49:5b:1f:de:ce:58:1b:26:2c:84:fa:d5:40:7b:f3:
e7:82:f2:20:ea:07:df:ba:d0:bc:7e:d7:b1:79:ad:41:00:eb:
f9:69:34:cc:e3:6d:f5:0a:ae:53:06:a6:13:f3:7f:49:0a:68:
f9:ea:d8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEOwjG6/4yJPzHzSRxQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjYwMzI5MDQwMDQwWhcNMjYwMzMwMDQwMDQwWjAzMTEwLwYDVQQD
Eyg4YWZlMmMwZWZkODQ3NjJmYzA3NTc2NTZiYWYxMTc3NzQyZmE1MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVDAcMpZ7xjMEXRT3VdUzdVa5yhX
JRAq3lEOX1YIWoEBidXxuBsP2KR26rRNm6qh8Q68ckP12Cb01lmOF9v9uyv0ZdKJ
40RbVvHWqJn4ndZpnvB23A3TJoLwWQP4R6KqkOOgzcxnRFcE01lQZuXU75In7TgY
WkCAnGtofclZKggcDYMMpCXYlhM1pBv6Ee2/1urbhPZ90Y3VMT11iBSQPBeI8OUZ
C9EbcGKzJPLw4QaPVFOvrL9YWSrrSi8bWoJtcuDYfbLQNBSRHyFrypom9aE7psQs
0PdpVFCpJh+l4Ce545ZBY2qxlmDy1et+wkvJ0ZseP9mQYUd9hePxZMtlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr+LA79hHYvwHV2VrrxF3dC+lKTMB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv/YgIV6
NuT3Q5OlchpD69VWvvIW3Uf788sBOzffQE/fZgc0PV+QLzWpFBODnv+wP9U2oi0D
MLUsesyCG7UB6+/tp7mDFW0U5nw+no5nSU4uf+6wBA/nCVwwwwLhQhqi0ytp1omG
w+klNEv2SGRkcY7ug074jf/zxLvP0+WfRkkwnlzjChAPZ7JHvTtjRdq4PccmfCxU
5/NJNdeiG4PO3/n144zeLG3GbtlD757+Ozk/CbBoXZmS8yOL6YKpdX/vjiOApYkq
N7soSVsf3s5YGyYshPrVQHvz54LyIOoH37rQvH7XsXmtQQDr+Wk0zONt9QquUwam
E/N/SQpo+erYRA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client