Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: Gup65JWb/QISk/lrxATxmGUuYh+0PyKg8tvkAwZSgD4=
Subject key identifier: 39:F0:BD:66:C6:78:62:B3:DA:05:7D:04:A1:E2:97:6F:7C:9E:CC:C1
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019E8D9291BFB73DC861BCEB25F8CDD4A313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0670
Signing time: Wed 03 Jun 2026 13:00:53 +0000
Manifest this update: Wed 03 Jun 2026 13:00:53 +0000
Manifest next update: Thu 04 Jun 2026 13:00:53 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: EdUrgvxUfYcS3xbJe2k4uV8lTIxYZXYc8e0urSFutaE=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:91:bf:b7:3d:c8:61:bc:eb:25:f8:cd:d4:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jun 3 13:00:53 2026 GMT
Not After : Jun 4 13:00:53 2026 GMT
Subject: CN=39f0bd66c67862b3da057d04a1e2976f7c9eccc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:99:1d:96:26:d4:4a:c0:92:62:8f:6a:f9:
0d:a6:c7:ac:65:2a:5e:29:04:1f:84:07:0e:fd:20:
a2:ae:db:6e:99:7d:c4:c9:b9:bf:bf:be:2d:79:4f:
3a:95:72:92:aa:63:f0:17:2e:97:a9:b3:c2:9b:be:
3a:db:a4:f8:a3:ca:3a:b4:28:b7:29:30:83:cb:5a:
bf:fb:b2:1d:7c:58:f2:e8:bb:ff:da:b1:b4:f3:21:
f1:3e:0b:1d:b5:df:22:87:84:e0:4d:e5:a8:1d:96:
d6:de:e0:82:46:3f:1c:02:6a:98:8b:57:91:08:b0:
8a:a3:75:1e:d7:bb:fd:a8:80:5b:98:ce:5e:63:7b:
6e:d3:a8:6f:d2:b4:ab:80:19:8b:b5:a5:c1:e9:78:
71:7e:7e:9e:ac:c6:6a:de:ee:be:a7:8d:ee:90:60:
cf:3e:83:4e:87:bd:32:ef:96:9f:c1:1d:4c:7c:25:
75:9c:b7:2f:ef:33:e9:5e:f8:c5:a8:a5:8a:27:08:
a6:3d:b5:31:c6:5e:6b:81:49:67:82:62:db:a4:e2:
0a:66:81:6d:90:71:51:6b:f2:69:2b:30:83:73:09:
df:01:79:0e:23:84:07:e6:67:cb:59:03:af:c2:ba:
5d:4b:08:7a:d8:34:33:f4:cf:04:8f:48:15:60:fe:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:BD:66:C6:78:62:B3:DA:05:7D:04:A1:E2:97:6F:7C:9E:CC:C1
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:b4:15:37:c5:36:89:9f:11:41:03:85:1f:e0:0d:32:54:
cc:1e:e5:d7:d8:e8:29:cc:d9:d2:be:ef:20:79:db:13:8e:3a:
fd:6d:1b:68:67:75:54:94:34:58:df:d0:37:d5:13:5f:70:46:
f4:f0:70:7c:91:1b:09:41:21:1f:4c:62:bf:b1:cd:bb:04:95:
e0:fa:7c:f3:9d:9a:63:c6:ab:81:ee:f2:2d:b9:fd:9d:e5:7c:
d5:cb:f5:8b:f2:92:71:45:f1:8c:f2:2c:f0:35:b0:fc:6d:f8:
a2:ba:b3:9a:08:ca:82:ea:ee:dd:44:f5:35:97:ff:f1:14:c6:
3d:26:ff:37:62:95:27:5a:5a:f0:c3:82:11:b7:c4:99:95:8b:
b9:f9:dd:66:3e:03:78:03:85:d5:aa:fd:55:5f:55:34:10:70:
28:a6:db:03:9d:4a:f7:41:65:d1:bb:2a:bc:fd:16:d6:8c:b0:
a2:53:25:00:61:c5:95:fb:b4:b9:85:6f:11:3f:0a:a2:64:01:
03:59:c5:7a:67:69:42:87:ae:33:5e:57:96:7e:10:de:fa:12:
43:2e:bb:bf:ba:d5:13:a5:fb:4c:6c:95:88:a3:76:79:27:36:
b7:76:7f:b7:ce:18:6d:58:2c:ed:8b:9f:e3:9b:e8:fa:83:4d:
c1:b3:0b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6NkpG/tz3IYbzrJfjN1KMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjYwNjAzMTMwMDUzWhcNMjYwNjA0MTMwMDUzWjAzMTEwLwYDVQQD
EygzOWYwYmQ2NmM2Nzg2MmIzZGEwNTdkMDRhMWUyOTc2ZjdjOWVjY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM6ZHZYm1ErAkmKPavkNpsesZSpe
KQQfhAcO/SCirttumX3Eybm/v74teU86lXKSqmPwFy6XqbPCm74626T4o8o6tCi3
KTCDy1q/+7IdfFjy6Lv/2rG08yHxPgsdtd8ih4TgTeWoHZbW3uCCRj8cAmqYi1eR
CLCKo3Ue17v9qIBbmM5eY3tu06hv0rSrgBmLtaXB6Xhxfn6erMZq3u6+p43ukGDP
PoNOh70y75afwR1MfCV1nLcv7zPpXvjFqKWKJwimPbUxxl5rgUlngmLbpOIKZoFt
kHFRa/JpKzCDcwnfAXkOI4QH5mfLWQOvwrpdSwh62DQz9M8Ej0gVYP7YxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnwvWbGeGKz2gV9BKHil298nszBMB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjG0FTfF
NomfEUEDhR/gDTJUzB7l19joKczZ0r7vIHnbE446/W0baGd1VJQ0WN/QN9UTX3BG
9PBwfJEbCUEhH0xiv7HNuwSV4Pp8852aY8arge7yLbn9neV81cv1i/KScUXxjPIs
8DWw/G34orqzmgjKguru3UT1NZf/8RTGPSb/N2KVJ1pa8MOCEbfEmZWLufndZj4D
eAOF1ar9VV9VNBBwKKbbA51K90Fl0bsqvP0W1oywolMlAGHFlfu0uYVvET8KomQB
A1nFemdpQoeuM15Xln4Q3voSQy67v7rVE6X7TGyViKN2eSc2t3Z/t84YbVgs7Yuf
45vo+oNNwbMLpQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:29 2026 by rpki-client