Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: DSY/m4mFJ+AAgDMLAIoxXZsDzky2vJokWUsJUQSajtc=
Subject key identifier: 55:E0:F2:03:F1:D2:27:1A:66:E3:24:B4:60:DE:89:AB:F9:29:44:AF
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019CBA39F2EDFD7356C0342675A6D7A2D24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 057E
Signing time: Wed 04 Mar 2026 19:01:25 +0000
Manifest this update: Wed 04 Mar 2026 19:01:25 +0000
Manifest next update: Thu 05 Mar 2026 19:01:25 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: /MZkWyBxz8kZgIHOSz7ln1sJh0P3ZpF9CiGYTjhR04Y=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:f2:ed:fd:73:56:c0:34:26:75:a6:d7:a2:d2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Mar 4 19:01:25 2026 GMT
Not After : Mar 5 19:01:25 2026 GMT
Subject: CN=55e0f203f1d2271a66e324b460de89abf92944af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:75:9a:26:66:db:2e:97:6f:d8:ce:0c:e6:
7f:52:bc:14:d2:b5:f2:9e:a0:b2:4d:d8:8c:f3:40:
ba:b0:2d:d4:22:0e:c4:d6:aa:75:e0:7b:e2:24:44:
0b:59:7c:13:bb:d3:54:a4:18:b8:9d:3c:7d:7a:3d:
b7:4f:7a:79:e7:2b:17:80:ee:fd:d5:22:7d:c2:b2:
f6:a7:ab:69:23:b7:32:e9:d9:0a:dd:60:db:4f:0f:
69:05:ca:6c:2b:1c:ec:4e:81:37:b1:27:90:57:c5:
1c:b7:49:97:b1:64:95:37:3a:6e:39:a2:4d:12:7d:
e6:96:db:97:c0:de:fb:1d:b0:6d:38:57:e0:c4:d4:
95:58:eb:c1:68:cc:e1:49:03:56:1d:48:33:c5:2d:
63:ef:eb:76:7a:6b:01:92:bb:bc:25:df:01:e6:69:
7d:df:3f:1f:3d:5b:d1:ae:13:47:28:36:33:7b:0a:
34:7b:de:80:bf:85:b4:fc:02:b1:06:04:5a:bc:8c:
e6:fd:09:5a:63:2e:17:8b:ec:4a:17:9d:0d:cb:30:
f3:0a:71:32:f6:4d:9e:22:77:92:aa:86:06:e1:bb:
47:92:03:90:e5:be:74:f3:c5:3e:09:6b:f8:56:f6:
42:47:64:55:ed:5f:b2:71:4d:fd:ab:e8:72:26:70:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E0:F2:03:F1:D2:27:1A:66:E3:24:B4:60:DE:89:AB:F9:29:44:AF
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:52:08:0c:df:48:92:5f:04:b1:8c:c3:7d:86:3b:12:c8:
db:45:9f:8e:e4:3f:fa:d8:c5:63:72:b8:d4:d5:8f:e3:83:4a:
7a:e9:b2:bc:63:43:89:eb:78:97:5d:a8:57:6d:60:08:96:69:
e2:a4:d5:2f:7d:a4:ac:d9:a3:36:59:25:42:7b:b5:9a:a2:7b:
f0:5b:6f:a6:c9:15:12:e1:17:0e:14:a1:69:48:fa:85:9b:63:
20:1e:67:b7:22:b2:34:91:7b:55:ef:89:f6:e9:5b:83:5e:4f:
c4:21:6a:25:a8:b9:90:5f:4b:67:19:20:34:e4:c4:2d:a2:a1:
1e:ea:fc:35:2d:67:35:59:93:23:ff:2d:de:7f:6e:39:d5:23:
2b:46:cd:b9:27:ce:a5:44:c0:74:a1:7c:6f:48:ac:88:3b:4e:
65:93:5f:67:7d:81:88:4a:93:bc:8c:a0:3b:3f:f9:02:0b:66:
fa:f0:7f:a0:18:28:f2:af:98:e2:4d:39:cb:ee:2d:86:73:29:
a3:11:30:7b:66:50:39:c7:96:2d:f2:8c:d4:d7:d7:cb:4b:90:
82:b2:c6:1a:4c:19:cb:cf:21:56:a9:85:9d:5d:07:9d:3f:b1:
3b:09:c3:b0:1b:c1:d2:ed:ad:88:e9:71:32:bc:6e:9c:02:8a:
51:e9:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:06 2026 by rpki-client