Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: XHgluY1fhTKiuQnXqH7hNFtOHPCThZ06iFD4RfKGCyw=
Subject key identifier: D6:B2:E8:5C:AC:2C:16:78:71:5A:85:56:DD:B1:DE:A2:B8:E8:09:C7
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 019D12A22BDC314FB50376FC6F51F5B035F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 09C7
Signing time: Sat 21 Mar 2026 23:01:50 +0000
Manifest this update: Sat 21 Mar 2026 23:01:50 +0000
Manifest next update: Sun 22 Mar 2026 23:01:50 +0000
Files and hashes: 1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: kq/tORi2ttY4An4DJ57+Zn2JxVHt4QqFKLV7oN+ZI0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:a2:2b:dc:31:4f:b5:03:76:fc:6f:51:f5:b0:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Mar 21 23:01:50 2026 GMT
Not After : Mar 22 23:01:50 2026 GMT
Subject: CN=d6b2e85cac2c1678715a8556ddb1dea2b8e809c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:54:3f:14:2a:03:d4:65:42:af:6b:93:fc:
c3:c1:6a:c0:93:44:56:31:4f:cc:3e:18:30:81:8f:
dd:e1:25:bb:99:aa:a1:d1:35:59:db:87:8d:d0:d5:
0e:c6:e1:7b:bf:32:d8:fd:61:f9:fe:c1:c0:ba:04:
8b:91:35:42:36:1b:8e:7b:62:44:68:45:4d:22:9d:
90:12:69:24:0e:df:8e:5e:24:c1:24:fc:94:b5:7a:
af:98:ff:4d:a2:da:41:69:33:1c:52:0e:ec:47:9d:
29:79:2e:4f:59:34:16:57:9a:c0:64:c6:94:4d:e4:
d9:62:6d:26:8d:65:eb:a8:1c:35:3c:cf:32:a4:46:
ea:51:9c:d9:c0:15:72:48:c9:3f:13:f9:9c:72:64:
0f:6a:58:a5:97:e6:9c:a5:ed:7d:5c:a3:23:18:7f:
3d:46:b0:e3:62:ea:42:ba:87:37:5d:3a:d0:8b:6d:
91:58:a8:31:fc:c2:c2:c4:ea:33:ac:8a:78:c4:7b:
52:0a:00:e1:8d:18:76:92:d0:34:d7:0a:65:82:bb:
c1:85:70:ee:49:91:e3:8b:fa:6d:85:c2:6d:85:bb:
6d:21:7d:41:59:05:9f:ac:36:cd:9d:1e:18:b2:94:
88:d0:11:2d:f9:93:3a:c5:05:b8:d7:c4:fa:f9:34:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:E8:5C:AC:2C:16:78:71:5A:85:56:DD:B1:DE:A2:B8:E8:09:C7
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e3:d9:39:8f:3a:a6:88:ac:d5:9e:17:ec:ca:9c:de:ca:1c:
33:a8:d8:57:46:32:ef:87:54:00:0b:3b:a1:98:62:4e:0c:c9:
e1:57:b7:a3:3a:62:d2:66:c9:f2:77:ea:4c:92:db:b1:e5:21:
86:39:8f:2f:4a:7f:2d:82:9a:04:a4:d9:a7:4d:36:9c:8b:af:
67:d7:b8:c3:56:da:94:8c:37:9a:a1:92:f6:ca:b4:2d:83:0e:
31:62:6f:36:a4:3d:0a:81:7d:ca:64:7b:36:ea:a1:68:f0:ee:
ec:20:f1:ea:1f:9d:19:87:64:66:af:57:b5:8e:d6:2b:5f:f0:
42:80:f7:d3:9b:60:f9:d4:c0:9d:84:d3:41:47:f2:22:94:7c:
82:62:c7:b2:90:a8:06:07:39:35:92:4e:95:14:5d:14:c2:5e:
52:e4:84:1d:d8:40:99:bd:82:8a:d9:de:5c:b1:55:af:88:91:
50:ae:b6:f5:a9:7c:08:db:4f:40:61:8c:15:27:d3:4b:ca:c6:
56:ae:0c:fe:15:cc:c0:2f:b2:30:c0:d8:2b:35:bc:36:92:63:
77:88:ba:e6:2e:41:ea:48:4e:ed:c9:69:96:8f:ff:76:1e:40:
c4:86:53:38:f1:de:f6:a7:5d:44:c9:cc:db:c1:f4:15:4b:dc:
ac:4e:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:48:28 2026 by rpki-client