Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: NVWt89ti5rhZX2pxp+MI7vvdqMig0Rez7F28Ris0B3M=
Subject key identifier: 5E:C1:CD:58:F8:35:F8:F5:53:B8:10:69:28:70:38:B2:E7:89:CA:7C
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019CE4B580B4FB9CFA140D0978527B2A292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 0369
Signing time: Fri 13 Mar 2026 01:00:25 +0000
Manifest this update: Fri 13 Mar 2026 01:00:25 +0000
Manifest next update: Sat 14 Mar 2026 01:00:25 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: gS8nItzzym5MlHwlEHl1QaZlc60Mdytb+e4xHfoApZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:80:b4:fb:9c:fa:14:0d:09:78:52:7b:2a:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Mar 13 01:00:25 2026 GMT
Not After : Mar 14 01:00:25 2026 GMT
Subject: CN=5ec1cd58f835f8f553b81069287038b2e789ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:96:e9:d6:1f:b9:ce:f9:81:59:dd:35:7d:
d5:4e:ad:60:80:ac:3d:e9:5a:f0:81:96:f2:1c:67:
0e:ef:75:70:e2:4e:ea:c3:72:c0:f2:52:12:15:13:
b2:1e:c2:4b:3c:d7:8f:97:f1:a3:30:82:d7:0b:b5:
75:af:de:1a:c7:11:cc:7f:a3:87:f8:66:50:fd:8b:
27:be:ef:49:eb:33:02:b3:bb:cd:2f:38:52:d9:06:
36:12:6e:d9:20:2c:68:d9:8a:63:f9:d6:63:84:e9:
3c:c1:5c:cd:2e:48:31:80:26:c1:85:88:80:13:7d:
fc:ea:e1:e8:df:a3:55:04:1f:e6:67:f4:9e:a6:3e:
b1:81:fe:c0:23:3e:fc:f8:72:c2:9a:91:50:ec:de:
4d:b6:a2:91:19:6b:51:83:7f:45:2f:64:bc:17:00:
39:25:74:75:0b:99:70:95:6c:a2:24:78:04:2b:86:
ac:6b:1e:60:4f:5b:ea:55:6a:c1:d9:ed:70:a1:1d:
22:33:eb:76:64:3c:5c:f2:da:fe:be:98:9c:af:db:
9d:0e:f4:a5:47:c2:7e:cc:b8:e9:fb:11:90:31:9d:
ca:33:2d:a8:c3:46:97:0b:ab:61:10:6f:cf:99:41:
6a:54:f5:ed:c8:16:46:e6:5d:52:94:d1:a6:5a:b4:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:CD:58:F8:35:F8:F5:53:B8:10:69:28:70:38:B2:E7:89:CA:7C
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:55:e3:ee:1d:dc:48:ad:24:76:87:4a:17:07:37:40:91:60:
b7:dc:a3:27:f7:28:ea:73:1f:3e:49:32:ee:03:e8:07:d8:c4:
a7:80:c0:09:a0:62:3a:4b:39:ab:0d:4a:84:3b:d8:cd:f0:4e:
0d:55:fa:8a:0d:da:f2:97:83:92:5d:d9:da:13:7a:4a:a4:02:
0f:e4:a2:af:65:b6:c9:1d:91:ce:cb:6a:5e:18:da:cd:4c:e9:
37:82:28:9e:cd:cb:08:df:c5:e4:cf:74:47:f5:f7:fb:5a:06:
fb:9c:56:6f:d6:b9:18:47:58:0f:a4:6f:af:b2:c0:bb:5a:3b:
e0:32:58:0b:6e:de:db:37:7c:5d:42:42:ac:a0:64:be:18:95:
de:1b:fe:04:fa:ed:26:ba:96:3b:5e:e6:e2:9d:38:eb:0b:41:
e9:34:1f:62:8d:a4:87:0f:85:b3:c2:f6:c1:84:83:23:b3:26:
2c:9e:c5:c6:65:9c:d3:8a:ef:95:e0:72:46:11:64:65:f0:d7:
3c:b6:8e:dc:04:60:81:ac:22:88:c6:fa:f7:dd:f7:ee:44:1c:
67:12:39:d2:f3:37:97:bb:69:d1:f7:b4:e5:fb:85:3d:78:4a:
68:49:d4:54:db:a4:32:a0:11:9e:dc:ad:a4:d9:68:49:7f:b0:
29:26:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:05 2026 by rpki-client