Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: AwyjSBAURNnuN7gUmYb2MDVQehFogxRlHcTmEt/Ib0k=
Subject key identifier: 5D:D3:BA:CE:5B:D1:03:F4:49:5B:80:6E:29:15:F4:79:B6:9A:01:EE
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 019DED48CD771CE19763B342156EC2CC2D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 04CA
Signing time: Sun 03 May 2026 10:01:04 +0000
Manifest this update: Sun 03 May 2026 10:01:04 +0000
Manifest next update: Mon 04 May 2026 10:01:04 +0000
Files and hashes: 1: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: Y8K9KnQbJwwYPkyq1zqjJ7Q89EMBqW7ZMeAzl0zEj+g=)
2: iY_NBjZ2wKvEhgTBknWfs0fub4o.roa (hash: MW6tL8GWHpevV/SjR3+AcIiCM8p+f2aCKazHwkxkalU=)
3: ijczCncElROlHI46d-XpTNHadTg.roa (hash: KzZMYnuTUZlqE9+oyNnH3CyhXQ+2YyXZupvfcmp4Fcw=)
4: jRaIj2LT8WIXU3iA4cJ8_db3efw.roa (hash: tCAkC3mU7deWUJjP8Hv0/NGEuNV3/CbI9UawHSvYVy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:48:cd:77:1c:e1:97:63:b3:42:15:6e:c2:cc:2d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: May 3 10:01:04 2026 GMT
Not After : May 4 10:01:04 2026 GMT
Subject: CN=5dd3bace5bd103f4495b806e2915f479b69a01ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:22:54:6c:a7:79:4f:95:65:c8:2c:a1:4c:
3d:b5:18:4d:3e:2d:a3:c1:38:ad:14:c2:d3:33:61:
0f:ed:ec:77:fc:fe:35:c4:7e:b5:3e:b5:62:27:48:
fb:c3:76:c8:2c:c5:17:f7:7a:d8:18:dc:4b:77:67:
ca:e1:bd:a5:6e:f2:1e:48:7f:de:c5:23:9e:ab:a1:
7a:73:30:5d:23:21:27:da:bb:73:13:e0:21:52:b2:
91:00:85:77:04:2c:c1:7f:ae:c8:04:67:23:c7:32:
8c:26:1d:c4:e2:5e:14:92:d6:84:81:f9:3e:10:70:
64:a2:e6:5e:aa:9b:31:65:3f:bc:fa:ce:ad:c1:99:
5e:f7:4e:4b:f2:dd:62:8d:b6:aa:8c:71:e2:54:06:
83:e6:c2:8e:45:fd:13:1f:0d:4a:66:10:75:4e:96:
3f:00:b1:a7:3f:fa:20:a1:2a:d4:23:fa:9e:49:c0:
4b:24:68:43:d6:5a:b5:08:72:db:c0:02:89:4e:25:
9c:50:b4:fe:25:b9:f8:2c:b2:a6:75:25:15:b3:11:
f0:31:b3:2f:f5:23:6a:26:b0:73:fc:41:40:f8:67:
ee:7a:d7:00:05:64:4c:ad:77:fe:73:c5:92:83:b1:
db:ec:a6:d9:7e:9a:4a:8b:75:60:00:ff:82:f1:07:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:BA:CE:5B:D1:03:F4:49:5B:80:6E:29:15:F4:79:B6:9A:01:EE
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3b:25:fb:44:86:e5:57:55:6e:bc:70:f3:c4:41:b1:55:62:
d1:35:1b:4f:5b:06:00:0b:67:e1:bb:72:d0:92:94:4b:05:d8:
a2:3a:18:0c:62:ee:59:b4:d7:72:e6:d8:08:6c:c9:ad:27:a5:
9d:04:0f:5e:a7:5f:58:2c:38:a8:15:3f:e3:f4:df:77:b6:b4:
ce:72:32:07:30:4c:6b:bf:cf:de:da:f6:f2:80:b2:10:ae:13:
d9:cf:11:6f:1a:c1:ea:35:19:72:c6:e5:ae:e0:86:d1:17:74:
4b:e2:0b:74:dc:28:ee:00:c8:96:03:67:64:52:7a:f0:a1:b2:
a6:90:7c:f8:d4:a2:46:ae:07:71:79:ff:fe:5f:c4:81:f5:b9:
23:21:d9:69:6f:1e:42:c1:f7:b1:60:3a:8c:12:34:1d:6d:47:
e8:7c:65:7d:58:97:65:0d:9d:e9:5f:c3:cd:55:ea:7f:99:0a:
68:33:8d:08:0e:f2:e9:7c:7e:e2:ad:c8:51:91:d6:84:a1:ce:
0c:ec:88:ab:7e:f4:0c:bc:95:f9:7b:d3:af:f1:d8:63:c7:80:
d9:67:6e:1d:0e:19:f6:71:29:b0:66:34:86:d3:49:51:5e:eb:
60:65:30:5a:b2:8d:20:9d:b6:01:96:73:01:db:c2:ff:cb:33:
8a:75:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:45:15 2026 by rpki-client