Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: bHzXej0bkmGz1oQ0KNh0n4Vv6ApkYr6qANeNmkMwzpg=
Subject key identifier: 34:3A:AE:39:2C:4E:D4:30:32:5D:23:63:8B:32:CA:26:A2:7B:50:EC
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 01A11DBF053296E093ECDA8C7FE34CE754AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0BDF
Signing time: Thu 08 Oct 2026 23:00:20 +0000
Manifest this update: Thu 08 Oct 2026 23:00:20 +0000
Manifest next update: Fri 09 Oct 2026 23:00:20 +0000
Files and hashes: 1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: GF5pE92woKmrN55GFHMjX3+U3rhIO3D318uRfT/eR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:05:32:96:e0:93:ec:da:8c:7f:e3:4c:e7:54:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Oct 8 23:00:20 2026 GMT
Not After : Oct 9 23:00:20 2026 GMT
Subject: CN=343aae392c4ed430325d23638b32ca26a27b50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:fa:b4:06:39:71:34:e2:3b:6e:d4:b9:60:
37:ad:b9:44:07:79:ea:3a:6c:63:59:b8:69:ae:b7:
ac:15:4d:f0:62:49:fe:cf:f3:22:fb:2e:0b:07:68:
9f:55:91:23:3d:92:e4:f4:d8:5d:4c:f6:7f:71:74:
a9:64:cd:7b:30:b8:90:f0:f9:e6:07:80:4c:a8:5f:
6b:3c:3e:53:f1:d3:4c:8b:d8:00:90:5c:15:a4:ec:
f6:14:c2:d1:16:79:ed:fe:c8:c0:4e:6e:d7:bb:44:
2b:93:73:fb:36:ed:da:13:bc:04:65:3e:ec:8d:3d:
69:63:a5:a9:23:de:a7:ec:b8:cf:a4:6f:f4:f9:22:
f5:28:56:57:cc:ae:6d:a8:f5:a0:0d:5d:c6:e1:ff:
2a:b9:85:8a:c7:e0:a8:24:5b:0b:6b:45:1a:3b:4c:
4f:f5:39:1d:62:d0:74:99:c2:40:de:ba:64:b1:eb:
a2:bc:a8:fc:f0:31:25:b8:67:0e:8a:c2:55:12:9b:
34:8c:9f:fa:bb:ae:1a:05:78:3f:cb:02:fa:f4:ba:
38:1c:c4:72:da:96:06:a7:af:94:bc:f5:7e:eb:34:
50:60:bb:f0:f6:9e:63:fa:ff:91:81:ca:06:60:a8:
cd:bf:d5:3e:33:04:0e:5b:6e:c8:d8:96:12:86:c0:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:AE:39:2C:4E:D4:30:32:5D:23:63:8B:32:CA:26:A2:7B:50:EC
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:a5:63:0a:3b:d5:f2:3d:f9:fd:71:ca:53:07:79:44:09:
59:b4:f3:1d:a2:d6:0d:73:48:06:c6:4e:04:56:80:f4:ac:87:
a7:2e:91:f7:b9:03:1c:53:0c:3a:ac:5f:55:11:0d:e9:ba:d2:
3c:cf:6a:59:78:45:96:9d:77:43:86:70:c6:ae:e3:76:60:55:
00:d1:06:83:85:12:66:8c:02:8f:7e:b9:74:0a:30:d9:41:ca:
5c:c5:de:95:b3:23:49:e5:d4:f9:b4:d4:c1:4c:de:81:c6:46:
52:00:9a:97:6b:32:71:d7:6a:b0:35:6d:2d:b3:25:f6:11:23:
44:41:ab:60:1e:d0:f7:80:fa:03:93:d5:3a:2c:40:5f:fa:74:
38:f8:94:fc:f2:46:cf:4c:4f:1c:33:65:34:db:ad:75:37:a6:
00:59:8d:fc:00:32:27:b1:8a:3d:1f:dc:59:07:87:23:3c:22:
cf:73:5a:59:1d:f7:cd:81:a4:0d:4b:c5:01:96:d1:c5:03:c5:
d4:82:03:36:e9:49:eb:b6:2a:dd:12:6e:28:59:e8:96:74:14:
8b:f1:3e:01:3d:90:2a:27:3d:bf:68:2d:9b:d5:65:7b:08:19:
dd:2e:a9:5d:2d:8c:3b:a8:21:bd:7a:e2:23:37:f7:53:dc:10:
86:b8:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:25:21 2026 by rpki-client