Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier: cqjuH9g8t4U58R4xjZC3osTb0Y+nHjf2qVduYUuafPU=
Subject key identifier: 8B:86:44:7C:72:09:1E:C9:9B:53:C4:C5:32:28:48:EF:3C:5C:D8:30
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 019DCED02A8DC692EADEB0F09B58A2A80131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number: 07A8
Signing time: Mon 27 Apr 2026 12:00:42 +0000
Manifest this update: Mon 27 Apr 2026 12:00:42 +0000
Manifest next update: Tue 28 Apr 2026 12:00:42 +0000
Files and hashes: 1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: +Soj2fk0YoIGw56aLtJv3f8gI7Xclz436vU68j3Xvuc=)
4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:2a:8d:c6:92:ea:de:b0:f0:9b:58:a2:a8:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Apr 27 12:00:42 2026 GMT
Not After : Apr 28 12:00:42 2026 GMT
Subject: CN=8b86447c72091ec99b53c4c5322848ef3c5cd830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:1a:2d:d1:15:62:f6:e9:ae:ae:11:58:f1:
1f:ae:c7:51:75:ce:67:06:6d:d4:74:62:45:25:25:
8c:27:e4:88:6f:02:d7:4c:45:5e:6c:ec:00:74:51:
4b:15:6d:01:d2:6d:77:af:2c:de:90:1d:9b:ce:44:
fc:60:e9:da:be:f8:37:02:d0:84:a8:57:e7:d2:3b:
3f:96:75:a7:6c:8c:b9:09:49:e9:5f:4f:50:f5:cf:
8d:f1:e3:c0:63:79:20:07:5e:dd:d7:45:dc:aa:54:
14:0b:6e:4f:47:c6:29:2d:a3:26:df:6e:95:d9:00:
83:94:b8:3b:93:b8:ba:4c:ef:b1:09:86:91:87:f6:
11:79:04:9f:a3:9c:72:0a:29:c4:d8:69:0c:b5:43:
c2:75:6f:ba:8b:0c:c3:17:75:50:9c:65:04:de:df:
61:bf:4c:52:49:dc:a1:16:d7:f4:a4:ac:70:e7:6c:
8a:7a:0a:12:95:40:82:ac:c4:50:bb:de:ba:7f:6a:
e1:c5:50:61:2a:b4:62:c5:82:c3:cc:aa:47:a4:6a:
f8:57:91:64:60:d8:82:77:57:65:d9:83:68:e5:7a:
4c:e9:6e:47:67:8a:51:1c:f3:1b:87:4b:1c:83:82:
92:80:1a:53:40:90:fa:c8:28:81:74:50:4b:1a:c7:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:44:7C:72:09:1E:C9:9B:53:C4:C5:32:28:48:EF:3C:5C:D8:30
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:92:a1:00:9e:69:36:57:b9:fe:d0:1a:6f:d4:7b:f2:13:
dc:a6:b5:59:86:05:d8:cb:9d:36:1f:14:14:c0:e0:9c:4e:0e:
81:57:39:94:4f:7d:ff:7a:bc:e0:c1:bc:de:ee:be:5b:8f:48:
e0:81:ba:75:77:44:d6:d4:35:01:47:76:b8:21:57:45:5e:fa:
79:c8:19:51:e3:ee:66:54:81:71:80:b7:b6:b9:2b:e5:fb:6d:
32:67:18:b2:d1:52:0e:d3:0b:88:87:ec:81:23:80:82:94:e4:
eb:98:1e:e2:57:9c:2a:64:99:f3:3b:d3:77:fa:2e:e3:89:b9:
63:f9:c9:dc:8a:2c:10:34:ba:9e:43:cf:26:49:1b:af:5a:10:
58:56:49:62:57:66:da:4e:9a:7d:c6:37:86:66:4c:15:ba:71:
c4:c5:a3:9d:d6:22:c5:ba:3f:98:6e:18:b6:84:79:2e:0b:85:
44:ad:7b:c9:58:84:40:28:88:fa:d8:1d:e0:9f:3f:47:e9:21:
8e:32:3d:2c:e0:1f:e5:2c:a7:b1:25:cb:73:62:f6:ba:9c:19:
3a:b4:4f:84:2f:a7:6f:09:9d:05:8f:d6:02:29:4b:23:1a:6f:
4f:26:ff:d3:a8:25:3b:f2:b6:29:77:3c:78:c4:68:3b:b0:9b:
58:46:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:54 2026 by rpki-client