Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: aEtuHJvzJcRMXqVLbO5GtdmJMBzaSt0lH93rn1QZq5Q=
Subject key identifier: 07:59:4A:BC:6E:65:EE:60:DF:4A:B2:13:CF:B3:D8:FC:35:12:E8:BC
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019DA1F76B4154886EE27F13D03F250A2B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 05F6
Signing time: Sat 18 Apr 2026 19:00:39 +0000
Manifest this update: Sat 18 Apr 2026 19:00:39 +0000
Manifest next update: Sun 19 Apr 2026 19:00:39 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: La3JnR6HwI6aYC1LaCk3nBTAn2jdAmAlabqB+72N1Z4=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:f7:6b:41:54:88:6e:e2:7f:13:d0:3f:25:0a:2b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Apr 18 19:00:39 2026 GMT
Not After : Apr 19 19:00:39 2026 GMT
Subject: CN=07594abc6e65ee60df4ab213cfb3d8fc3512e8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:9c:6e:cb:15:f7:8b:e5:eb:6a:47:a1:87:
68:f4:63:a7:11:ff:d2:a4:65:6e:c6:c1:ad:ee:0f:
52:c8:8b:00:78:c2:4e:fa:3c:3a:bd:fb:2f:ad:54:
cc:5d:04:35:ff:f7:c9:fe:ad:ef:49:e5:95:e6:2f:
eb:1c:ca:b8:aa:6f:e4:a3:bd:55:ea:af:e6:4d:51:
e1:e4:a5:eb:d7:35:98:8d:f4:89:12:1e:5c:3a:a9:
88:4f:16:e3:5f:54:fc:3f:96:fd:a7:01:b7:5f:d1:
4e:a0:3e:80:39:25:91:99:ee:1a:80:94:52:c5:6f:
54:55:9f:d0:e9:ab:7b:e5:a4:e0:3c:dc:71:88:63:
2e:e1:97:cf:9d:ef:ef:74:13:80:38:90:59:a8:25:
7c:35:7d:6f:5b:13:fa:c6:b2:ac:50:49:fe:a0:02:
d6:e6:73:9e:0b:5c:0a:06:5c:e2:ed:91:df:17:4d:
59:a5:94:3e:22:45:19:fc:7d:9c:e9:b5:63:0d:f0:
58:ed:31:47:5a:05:c9:51:10:9b:92:85:1c:49:b9:
17:19:dc:4f:40:c9:45:35:b5:8a:63:07:34:7d:5e:
91:b8:43:bf:e2:71:49:9f:21:77:67:1a:33:aa:9a:
45:81:33:c7:40:f0:20:e5:4e:ce:5d:44:81:76:a2:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:4A:BC:6E:65:EE:60:DF:4A:B2:13:CF:B3:D8:FC:35:12:E8:BC
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:d4:ef:25:d0:20:a6:bc:94:29:84:75:53:88:b2:71:33:
68:80:fb:8e:26:63:6e:62:48:45:0b:23:4f:95:56:39:73:d4:
66:9a:9d:99:4e:37:60:05:39:dd:7b:57:d0:06:bb:78:51:3d:
04:d0:08:dc:93:56:cb:86:96:fe:94:20:3e:68:d0:f2:25:71:
cb:4b:aa:91:9f:6c:fa:12:0a:9e:e4:b4:2c:e5:b6:97:35:00:
73:56:9e:ae:0d:8f:fb:c9:b8:66:b5:05:b3:97:eb:01:da:f8:
88:72:19:6a:de:33:5e:60:aa:38:81:27:36:cd:e0:ab:31:03:
a4:41:21:bc:ee:e1:d6:01:df:b1:85:97:61:c8:7b:dc:33:87:
af:21:b3:17:3d:34:6d:72:16:7e:8d:fd:b7:53:12:fb:b8:02:
f3:c7:2d:01:18:7d:28:85:40:74:5c:ec:1e:32:03:bf:49:17:
d0:eb:da:db:16:76:16:c5:1e:e1:59:82:5f:4f:0b:a1:88:26:
03:4c:87:3d:9b:f9:03:f2:00:41:b7:ee:3b:19:82:43:60:e2:
f6:22:c5:ef:14:59:ea:d9:58:d7:9c:20:18:bd:c3:e6:c3:70:
1e:1d:c8:56:ee:4a:56:cd:b6:f6:15:8b:57:ca:28:08:be:5c:
f9:d9:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:13:47 2026 by rpki-client