Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: x2RnLs7TLEbjQKXz2TPUFdu+UuQ2PY8IMDLL/d3W82c=
Subject key identifier: 04:28:5E:4D:6D:6D:CA:67:79:DE:80:BF:BD:40:EE:0C:E6:11:C6:44
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01A06E7102E214479E560A9AFDF5C7B19248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0769
Signing time: Fri 04 Sep 2026 22:01:34 +0000
Manifest this update: Fri 04 Sep 2026 22:01:34 +0000
Manifest next update: Sat 05 Sep 2026 22:01:34 +0000
Files and hashes: 1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: UouHnEW2WtTlk0xkkOtO5Hs9AYvdEtKRBokaLNuqNNo=)
3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:02:e2:14:47:9e:56:0a:9a:fd:f5:c7:b1:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Sep 4 22:01:34 2026 GMT
Not After : Sep 5 22:01:34 2026 GMT
Subject: CN=04285e4d6d6dca6779de80bfbd40ee0ce611c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:31:be:66:a2:f9:52:b0:36:db:c0:f4:da:
b6:5d:ce:3d:67:df:71:82:24:84:4c:c5:a6:58:50:
f0:2f:8e:c0:e9:25:a7:32:75:a0:59:7a:92:72:8a:
64:dd:3b:7f:d3:c9:47:71:07:6f:53:e0:b5:87:52:
40:27:4a:43:37:d2:2f:88:c0:0f:69:1a:80:0a:8e:
e0:c6:06:5b:cd:0b:25:9a:d3:aa:f6:b6:aa:a0:b6:
04:c0:d9:d7:ba:ea:92:c4:06:3f:d8:a0:e7:11:71:
75:eb:0f:f8:13:7b:5b:42:3b:f2:6d:fb:8f:d4:b4:
fe:68:4e:29:b4:f1:16:84:7f:82:22:6f:31:d0:7b:
3c:ec:59:8e:d4:70:04:5b:6e:8d:44:88:c4:2a:60:
a3:ee:8e:72:07:ca:b5:ab:37:ba:9d:c0:a7:a3:08:
9f:ea:2d:cc:46:96:64:63:a9:30:d2:75:e3:2e:16:
29:03:8a:f2:b6:ce:f8:fe:36:c1:94:00:95:e0:65:
1f:96:26:bf:86:d4:39:82:eb:41:20:eb:95:66:6e:
70:2d:3e:99:26:df:1a:fb:19:60:0e:fc:e2:7c:a7:
8e:74:f7:0d:a5:f1:00:36:b5:71:b7:5e:88:64:ea:
1f:03:50:28:09:a8:b8:93:d0:a5:a1:bd:6e:d7:56:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:5E:4D:6D:6D:CA:67:79:DE:80:BF:BD:40:EE:0C:E6:11:C6:44
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:c6:01:e2:c2:09:7a:d3:61:54:01:6a:02:7d:31:3b:d7:
3a:2c:f1:2f:02:ae:3b:a0:7d:74:a2:5d:8d:d1:7c:f4:66:00:
77:a0:00:a4:39:90:7e:55:81:4e:47:74:42:56:3b:2a:3d:64:
6d:51:bd:a7:e8:03:41:18:8e:87:a1:19:49:ae:d6:96:bf:7f:
3e:67:a1:a4:0a:c8:b2:48:38:8a:64:15:2b:f3:f7:6c:ab:2e:
17:95:eb:2e:ad:ae:38:4b:45:50:7a:af:40:56:e5:9a:0a:89:
38:5c:94:2b:71:f9:95:99:9f:ac:67:3a:61:fe:ea:cd:ac:8a:
1c:6d:ef:7f:af:ab:4f:69:3f:30:2d:94:05:a4:79:16:c8:cf:
17:df:b6:4b:c6:22:4d:8d:f8:c8:aa:03:66:1b:5f:fd:bb:6f:
97:ca:55:01:37:8b:ec:30:c7:71:81:9d:27:09:d5:77:fc:16:
38:1e:cc:33:65:15:bd:4d:b5:be:97:87:1c:c1:cd:38:27:50:
4e:8a:8f:c3:cd:40:96:e8:b1:d5:a1:30:41:59:a2:e1:19:bb:
bc:f8:c7:e4:36:8d:3e:42:28:07:1b:40:ab:21:9a:23:74:aa:
e1:8a:36:51:90:48:35:a6:bf:c4:63:2e:b9:be:f1:89:47:8d:
e3:8a:33:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucQLiFEeeVgqa/fXHsZJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjYwOTA0MjIwMTM0WhcNMjYwOTA1MjIwMTM0WjAzMTEwLwYDVQQD
EygwNDI4NWU0ZDZkNmRjYTY3NzlkZTgwYmZiZDQwZWUwY2U2MTFjNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9sxvmai+VKwNtvA9Nq2Xc49Z99x
giSETMWmWFDwL47A6SWnMnWgWXqScopk3Tt/08lHcQdvU+C1h1JAJ0pDN9IviMAP
aRqACo7gxgZbzQslmtOq9raqoLYEwNnXuuqSxAY/2KDnEXF16w/4E3tbQjvybfuP
1LT+aE4ptPEWhH+CIm8x0Hs87FmO1HAEW26NRIjEKmCj7o5yB8q1qze6ncCnowif
6i3MRpZkY6kw0nXjLhYpA4ryts74/jbBlACV4GUflia/htQ5gutBIOuVZm5wLT6Z
Jt8a+xlgDvzifKeOdPcNpfEANrVxt16IZOofA1AoCai4k9Clob1u11YzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQoXk1tbcpned6Av71A7gzmEcZEMB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu7GAeLC
CXrTYVQBagJ9MTvXOizxLwKuO6B9dKJdjdF89GYAd6AApDmQflWBTkd0QlY7Kj1k
bVG9p+gDQRiOh6EZSa7Wlr9/PmehpArIskg4imQVK/P3bKsuF5XrLq2uOEtFUHqv
QFblmgqJOFyUK3H5lZmfrGc6Yf7qzayKHG3vf6+rT2k/MC2UBaR5FsjPF9+2S8Yi
TY34yKoDZhtf/btvl8pVATeL7DDHcYGdJwnVd/wWOB7MM2UVvU21vpeHHMHNOCdQ
ToqPw81Aluix1aEwQVmi4Rm7vPjH5DaNPkIoBxtAqyGaI3Sq4Yo2UZBINaa/xGMu
ub7xiUeN44ozUg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:36 2026 by rpki-client