Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: 5ty7y3LfNmrxBjgKkSYKjCCVMSUK1t6TW4WMqIoOE14=
Subject key identifier: 51:70:B6:26:D6:75:AC:14:A8:F5:35:3B:DE:33:40:9B:9D:50:FB:C2
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 019D25BAE9ACF0F728EA006A6F2A416F6FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:39 +0000
Manifest this update: Wed 25 Mar 2026 16:01:39 +0000
Manifest next update: Thu 26 Mar 2026 16:01:39 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: gAOxAOILTG8CviQ7zyjIPVY3bWSOyY48FSwZdaVYnys=)
2: kE5VlmslAvRcrZ42pGQyAHfoqrE.roa (hash: AmEozEHyDw1oYPPxW0JA4Yammx0So33uCTb4ELzWUD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:e9:ac:f0:f7:28:ea:00:6a:6f:2a:41:6f:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Mar 25 16:01:39 2026 GMT
Not After : Mar 26 16:01:39 2026 GMT
Subject: CN=5170b626d675ac14a8f5353bde33409b9d50fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:c2:7b:a9:ac:8d:ec:b6:46:b1:a8:e6:7d:
b3:d0:2d:f0:df:39:ac:84:0a:09:3f:3b:95:ef:03:
5b:55:56:cb:e7:9a:bd:6c:38:fd:62:ac:c7:09:0e:
22:dc:f9:6e:db:8c:8f:2c:fa:24:75:46:1e:87:b1:
c9:8d:59:8b:bd:e9:d3:e7:69:a1:42:c6:26:d2:e0:
ae:71:e1:90:38:db:2f:46:96:32:86:98:af:c2:ed:
b5:30:2e:cf:c5:7c:60:aa:23:b8:b4:ed:f5:bf:61:
3f:41:05:c1:ee:d4:9b:24:5d:35:59:2a:00:59:4d:
b6:ff:5d:bb:e2:f6:27:0b:a6:a7:fe:e1:2a:7a:de:
a4:f5:75:eb:ae:ff:a2:f8:2f:b3:35:05:20:92:a4:
34:4e:bf:cd:4e:c4:98:99:9d:f7:6c:ce:d4:f4:3f:
57:1a:96:13:ef:3e:3b:dd:b3:4b:35:17:eb:4d:27:
7f:ca:7c:0f:a0:e9:8c:6c:33:58:65:54:1f:08:0f:
8b:d0:61:e8:c9:a2:7e:b9:22:34:e3:f8:8f:d8:ee:
0a:2e:f6:5a:2c:1a:a8:d6:4c:d5:67:67:79:b2:08:
88:fc:c7:78:bb:9d:f7:44:3b:ef:8e:da:63:b1:7b:
53:6a:55:d2:c1:f3:d4:83:1e:85:9e:0a:86:b2:88:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:B6:26:D6:75:AC:14:A8:F5:35:3B:DE:33:40:9B:9D:50:FB:C2
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:05:98:a4:e2:8e:49:3b:e1:52:82:a3:ce:82:a1:a6:45:
7f:b5:a4:aa:e6:dd:3c:67:b5:eb:ab:11:df:be:26:30:c5:06:
94:e9:7e:ff:ac:c9:47:67:c9:da:9d:33:0a:55:da:5c:ee:80:
bb:39:5d:9c:f1:2e:6f:b0:c5:1d:93:30:b4:b7:de:2c:46:d4:
42:78:1e:af:90:00:71:f6:3c:2e:2b:a9:23:09:f4:4c:6d:66:
95:da:8c:83:12:f8:db:e5:37:79:34:30:27:e2:38:45:b5:22:
88:a2:4c:f6:ad:0a:32:9d:3c:61:ca:c8:5d:5d:2b:48:d1:47:
8f:7d:f7:7a:6a:da:cb:00:b2:f2:b6:45:44:eb:ef:41:5a:eb:
bc:c9:db:f8:ed:fd:51:e6:de:d6:09:e0:39:51:b3:ce:f5:47:
0f:b1:ba:83:71:49:d7:64:33:01:57:83:37:75:1d:78:65:dc:
90:c1:29:80:9f:1e:52:e9:7d:af:e9:b3:2f:5d:77:c0:9b:81:
e7:83:f3:28:73:01:15:4f:1c:3e:af:0e:a9:66:ac:27:d6:58:
b1:76:7a:5a:8c:fb:60:52:a2:aa:46:0f:4b:ad:80:25:4d:92:
38:16:f9:d6:e4:89:45:b1:43:62:9a:23:3c:d0:35:fa:e6:63:
9a:f1:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:27 2026 by rpki-client