Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: HsiE4WkNRZ/0ta04Sc0zblIpx2TY3T5NpEWUlow8a7k=
Subject key identifier: 90:C0:44:9D:0C:11:4F:86:B9:9A:80:D9:88:64:44:23:5D:0A:FB:BD
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 01A186764734E41E05058156B5CA4495C257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 05CF
Signing time: Thu 29 Oct 2026 07:01:00 +0000
Manifest this update: Thu 29 Oct 2026 07:01:00 +0000
Manifest next update: Fri 30 Oct 2026 07:01:00 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: vG9U35jQqHmlqWV5+sA7KnvHL45eRY34rwP1HX4kobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:47:34:e4:1e:05:05:81:56:b5:ca:44:95:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Oct 29 07:01:00 2026 GMT
Not After : Oct 30 07:01:00 2026 GMT
Subject: CN=90c0449d0c114f86b99a80d9886444235d0afbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:60:68:72:88:3b:af:20:9d:d3:b9:a6:81:
f0:86:0c:14:7d:c7:2a:46:30:7e:1c:80:4c:86:b8:
d3:0b:a4:50:8e:f2:c5:86:05:c1:84:c9:26:a4:f6:
aa:55:19:32:2c:cd:87:a0:53:bc:74:75:d4:b3:2d:
c1:66:69:e5:02:72:d8:b2:27:d2:55:cd:d7:3b:53:
30:f7:99:4f:1e:aa:5d:30:ca:40:20:6c:18:a5:b5:
f7:84:e4:fb:ce:ff:f2:5b:0b:5d:a8:3b:42:74:e8:
27:91:b2:aa:25:ff:0f:1f:34:9b:c9:d6:89:ca:60:
f8:d5:d8:bd:2a:f4:d9:48:d1:c0:fb:2b:bc:40:56:
e0:be:6b:2e:ba:2b:9e:fa:27:90:23:27:9d:7e:c7:
0b:24:34:a4:f3:9a:7b:2a:72:2a:70:9e:99:8e:57:
a5:94:a3:ee:d0:ac:0e:9c:b5:f9:a6:34:49:2b:0e:
61:ad:69:9d:f9:96:0b:98:d2:53:8b:fe:46:96:a0:
24:0c:ae:06:f8:a5:17:85:3c:2a:a0:26:c4:c8:58:
36:82:43:9a:ba:0b:4c:0c:bf:a3:b6:81:bc:a5:f4:
db:72:0a:74:91:a5:37:07:2b:8d:49:92:8c:16:9c:
05:d0:cf:5d:7f:09:33:88:4f:f9:6d:fa:ec:b0:77:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:44:9D:0C:11:4F:86:B9:9A:80:D9:88:64:44:23:5D:0A:FB:BD
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:55:da:24:dd:98:b0:a3:c8:7b:0a:83:e9:60:13:ef:4c:8a:
ca:00:02:95:ee:65:16:74:9e:e2:9e:d0:ea:1f:49:35:5d:4e:
6e:93:fd:57:91:10:a5:4c:22:b9:4c:88:bd:b4:ec:a2:22:51:
ab:87:ea:a7:09:94:ad:17:35:11:31:eb:76:a6:b9:df:a5:38:
c3:e5:a2:e5:25:49:36:c7:a1:bc:25:db:09:04:6b:bb:c5:f1:
01:ae:80:f7:90:1a:dd:df:82:fb:9b:27:2a:6a:61:40:04:de:
ab:06:15:4a:3e:e2:b5:04:42:28:58:bb:8e:e1:d1:d3:4b:3f:
35:6b:d6:e9:4e:e3:5b:1d:b6:e3:58:c9:fe:a6:1b:af:cd:46:
5e:ee:e1:9e:64:a5:2e:cb:7e:cc:97:3c:06:20:3e:0a:54:98:
52:71:c9:bc:5b:d0:7d:f3:0c:db:6c:76:aa:b0:a7:aa:5d:64:
0b:80:d1:c5:4d:93:51:ce:ed:09:c9:e0:61:98:4b:b2:9a:cd:
fc:c3:01:77:b0:8b:78:38:d5:07:75:d0:db:e8:4f:93:e3:7b:
a8:79:cc:29:10:1a:34:24:c2:7e:dc:0b:01:d0:0c:7b:53:a2:
dc:8c:90:d4:5d:10:f1:00:aa:cd:4f:b6:28:16:75:5c:a3:02:
bc:73:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:56:46 2026 by rpki-client