Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: uGwvmxeoUhuP3OJIB/yWghFaAS5dfb2RGkrEYUQ2rR8=
Subject key identifier: 45:0A:71:F3:CF:62:C3:48:4F:F2:44:E3:E2:72:41:3D:8B:DA:1A:17
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 019D38664F7C98F18F8EBA91AB2C53E159E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 09BF
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa (hash: UMdzymruvfotkFYiGIjdIXyvlwL7DTcm4OFrb3LPVB0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: bi69XEj2lqRKZ9fVspNUG33VldNSKPbx/5myUyejLDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4f:7c:98:f1:8f:8e:ba:91:ab:2c:53:e1:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=450a71f3cf62c3484ff244e3e272413d8bda1a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:4f:7b:a2:f8:ab:c2:28:75:26:ad:7d:cc:
1a:85:a8:77:07:55:81:29:a4:4d:af:c8:52:d5:50:
12:58:43:57:59:17:5e:1a:0c:a6:52:34:94:30:2f:
f2:4c:08:5b:1b:ff:03:dd:5e:8b:a6:0d:18:51:aa:
75:24:09:e8:ca:38:4d:38:43:fd:b7:57:e1:67:18:
8e:75:93:8c:ee:05:7e:ee:af:8a:13:0f:95:00:f4:
a4:8e:02:e8:8a:65:43:35:6d:47:cd:33:54:a7:26:
98:99:87:a3:52:3a:4b:8a:6a:49:86:7f:1c:9f:43:
75:d7:3d:16:1d:02:71:dd:bd:55:a5:0f:cb:c9:fc:
34:cb:24:2b:cd:03:b2:c9:b2:b7:1a:3d:7a:4e:f3:
e8:63:99:e3:e3:4f:16:e5:93:39:d6:27:79:4d:7c:
b5:fa:88:9d:91:5a:6f:82:c3:a4:a8:57:70:66:7b:
11:ac:76:2e:66:80:ee:33:67:a2:8e:89:58:00:08:
91:aa:86:1b:41:3e:d8:65:00:07:2d:5e:20:2b:fd:
58:02:51:19:49:ba:c6:b8:34:b1:d1:34:50:85:1a:
55:b8:ea:9c:1d:8c:37:4f:da:76:db:35:1a:97:ca:
d9:1c:0a:e7:5e:08:dd:05:88:a3:58:c0:82:1f:ef:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:71:F3:CF:62:C3:48:4F:F2:44:E3:E2:72:41:3D:8B:DA:1A:17
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:c6:32:1e:fd:3a:2e:37:4f:6d:96:df:1e:01:aa:53:02:
67:64:5c:09:94:0f:2b:90:a0:4f:57:28:2e:f2:97:a8:06:03:
fd:2a:ac:b3:4a:e0:eb:2e:77:34:c5:16:0e:77:22:24:fc:7c:
49:23:bc:00:c0:00:55:6e:61:49:db:57:54:a0:76:51:a2:de:
3c:8b:8d:df:a1:a4:46:b2:fd:4d:23:13:a9:27:92:8a:bb:cf:
25:26:89:3c:33:73:d6:6c:5d:27:b6:a0:4d:87:13:75:66:8c:
49:8f:0d:c3:e0:db:a4:3e:3b:8c:7e:aa:04:30:04:75:84:9b:
e3:3d:0c:7f:2e:5d:ee:77:58:3f:83:42:1e:56:b3:cf:92:d6:
d4:49:bc:94:68:94:ab:8e:0a:2c:e5:df:75:43:e0:af:d6:ac:
73:c3:96:b0:02:a9:30:a0:e6:d3:85:30:02:72:67:d3:36:c4:
07:37:59:c5:af:da:77:79:81:af:94:82:74:d4:80:08:86:71:
71:37:ea:13:7f:95:90:3b:96:d3:45:ad:97:70:09:7a:3c:d6:
8b:9d:f1:76:42:bd:49:b6:ec:45:07:a2:96:b4:3e:98:54:7e:
b6:98:5a:07:a9:c2:43:73:88:71:8b:96:f5:7f:e4:88:06:c7:
73:eb:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client