Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: dcclkyTY6P/aMqWynSHWEraChoOtCo8zHwTvlSkrASk=
Subject key identifier: 4F:B1:88:99:01:84:F0:2E:71:42:AE:95:4F:22:AF:D9:38:91:4D:CB
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019DCE62BC27E03AB65971E36ECE2D91499B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 03E2
Signing time: Mon 27 Apr 2026 10:01:10 +0000
Manifest this update: Mon 27 Apr 2026 10:01:10 +0000
Manifest next update: Tue 28 Apr 2026 10:01:10 +0000
Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=)
2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: CGu3HY2DJtUQolH0V+1kGeD0LhwrrV+QjmOPLg9/mMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:bc:27:e0:3a:b6:59:71:e3:6e:ce:2d:91:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Apr 27 10:01:10 2026 GMT
Not After : Apr 28 10:01:10 2026 GMT
Subject: CN=4fb188990184f02e7142ae954f22afd938914dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:18:48:0f:88:5d:ec:16:80:4e:8d:7d:41:
42:df:cd:51:3e:c4:2c:65:ee:f8:32:06:28:59:f7:
44:e2:4f:46:f3:a2:ba:f5:18:42:a4:8c:e1:f7:57:
b1:25:0b:fa:b7:6d:33:8e:9a:1a:ae:5b:21:2a:ea:
f9:e9:6e:59:18:64:8b:4a:56:2b:06:51:2c:f8:6e:
a1:ff:5f:96:5a:80:c4:b0:7b:32:51:a2:eb:17:16:
ca:e9:de:e9:b1:da:76:56:6c:27:64:81:67:d6:10:
fb:ae:3d:27:28:13:1d:75:52:4b:75:65:41:e0:13:
2e:1c:22:f6:dc:04:2f:a2:e9:7e:28:34:d8:e5:54:
91:0f:98:83:9a:82:07:01:de:8b:fb:0d:e9:8a:88:
61:3e:66:4f:8a:e6:f7:67:60:09:69:bb:b3:24:52:
c2:1e:81:f9:b4:e2:71:76:0e:1b:64:9d:1b:1c:fa:
9b:c3:83:e6:d0:94:97:e5:d2:f0:28:fb:4e:12:ab:
9c:9a:12:b4:5c:78:7b:42:f0:1e:d6:1b:5a:64:ec:
a1:48:5c:e8:df:a9:03:81:f7:77:83:89:4f:a7:3a:
a8:3e:29:fe:e7:44:e9:a7:58:cc:b3:90:21:36:47:
15:18:07:91:c0:0f:51:79:fe:0e:00:d6:9f:56:2f:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:88:99:01:84:F0:2E:71:42:AE:95:4F:22:AF:D9:38:91:4D:CB
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:82:1c:eb:03:3c:b5:cb:c1:d4:a5:a7:44:e9:a8:25:09:
ae:bd:10:7c:ed:e8:28:23:9e:ac:fc:f8:3e:c0:b2:5a:70:f2:
e3:51:86:f0:24:29:2d:fc:73:4c:68:a0:ce:e6:60:af:f2:de:
6c:fa:ac:02:2a:3b:65:4a:5d:8c:c7:25:13:01:8d:ea:11:82:
bf:22:6a:10:43:99:c0:0c:dc:2c:92:fe:90:e6:51:66:04:6c:
57:8b:a0:0c:d4:99:51:e8:90:d1:42:78:95:15:9d:c5:07:51:
95:51:88:1b:ee:85:61:18:79:28:38:72:80:1d:1a:30:5d:1a:
51:58:e4:f2:19:42:3f:73:b3:e0:e1:59:f7:9a:35:e6:79:33:
23:70:c0:a1:0f:71:85:68:47:ea:a9:dc:17:52:d6:cc:e6:cb:
ff:dd:2b:6f:57:b5:80:d0:47:af:d4:3a:ad:31:75:43:7d:5f:
83:0d:65:d6:17:4b:9f:31:87:1d:e7:2d:5e:cc:61:fe:be:ce:
e3:15:e3:b7:0f:7a:53:f6:92:c5:42:02:e9:a5:ad:51:29:a3:
05:6e:c9:ff:0e:31:47:48:3f:f2:7b:51:8b:14:3b:08:01:af:
54:9b:71:db:f0:54:37:75:c5:7d:25:38:b7:4d:07:80:eb:76:
f2:c9:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:57 2026 by rpki-client