Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: 3XDeuVFxcPG7be543VSSXxpqRx6xx/hIzWZ6FN84PdA=
Subject key identifier: C2:19:84:78:CE:B1:27:53:21:CB:88:0A:90:AC:D8:43:A0:C2:F7:52
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 019F954A0386E6AECB7FAF717DE7DEB47614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 170E
Signing time: Fri 24 Jul 2026 18:01:23 +0000
Manifest this update: Fri 24 Jul 2026 18:01:23 +0000
Manifest next update: Sat 25 Jul 2026 18:01:23 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: iKMXgImXyKlW9aCnUmDOdSUb4Ok3TihiH7Di2jVmCTA=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:03:86:e6:ae:cb:7f:af:71:7d:e7:de:b4:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jul 24 18:01:23 2026 GMT
Not After : Jul 25 18:01:23 2026 GMT
Subject: CN=c2198478ceb1275321cb880a90acd843a0c2f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:6d:8e:5d:b3:b4:67:ca:c9:a5:93:ec:3b:
1c:72:f4:ca:22:9b:3d:b1:b0:d7:07:c1:6b:e4:53:
43:b0:67:5c:9a:d9:a8:8d:3e:fb:56:6e:06:51:c4:
66:88:b8:e3:23:55:bf:c8:ac:33:04:a3:ae:5e:26:
06:dc:9e:70:0f:1a:9e:77:bd:35:11:28:f2:44:12:
a1:b5:5d:4f:3c:93:f8:6e:8c:f1:e3:33:4d:46:74:
a5:ae:14:de:ee:19:72:df:9f:cc:1c:63:97:51:03:
41:1b:bf:8c:7a:34:20:88:12:6d:7e:4a:27:61:e4:
23:0c:fa:4c:b9:9b:91:2c:05:57:be:a2:b9:e9:78:
ae:a1:86:9d:74:9d:29:9e:71:45:8b:cd:2c:ba:d2:
6f:a3:ba:94:24:c0:73:da:c5:88:49:49:9a:98:fe:
19:03:30:d5:d9:76:66:5a:1d:38:d8:a1:cd:c5:8e:
95:90:ac:45:e5:54:f6:8b:ef:40:aa:35:76:81:db:
40:f1:06:02:0d:4d:c1:de:77:af:03:fb:fc:b5:22:
99:da:84:a4:e9:ab:49:82:05:06:17:9d:1d:2a:39:
cf:38:f6:ab:d0:29:ad:91:1d:d8:bc:78:bc:98:ce:
5e:ba:b0:a6:70:43:2a:d2:7d:15:8e:91:94:6b:94:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:84:78:CE:B1:27:53:21:CB:88:0A:90:AC:D8:43:A0:C2:F7:52
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:91:ef:fe:e5:84:ff:63:45:cc:c3:9f:d5:73:e3:fe:d6:29:
7a:14:56:c6:ae:65:7b:dc:e1:61:ae:1b:4d:4f:ff:8b:73:b7:
11:7a:be:7d:a6:69:91:07:43:a0:c4:4c:cf:ce:75:02:6e:cf:
54:f4:b5:11:46:ea:df:28:dc:61:5e:67:6b:5b:82:b4:2f:2d:
93:b0:dc:2f:89:48:79:39:0d:cc:33:11:9b:ce:12:51:0d:bb:
89:fc:91:fc:bd:5d:ab:b5:54:cf:b2:53:37:97:2f:e5:83:2b:
bf:89:fa:c7:d7:4a:ed:2a:3e:a5:f8:80:d3:8d:a0:ea:9a:08:
44:9e:d8:87:91:e0:2f:61:37:57:c5:4e:31:70:8a:af:11:92:
90:82:1c:09:1c:3a:7e:d8:0d:27:b1:93:85:d6:c6:15:53:f4:
34:57:c7:8a:77:06:af:c2:58:3e:f2:22:b3:bf:27:ed:3f:25:
c7:12:a7:02:6f:1c:ce:5e:86:f7:94:d1:92:e7:1c:f5:e3:d7:
74:73:ad:4e:7b:e5:26:cc:1f:02:74:61:3a:3e:37:6f:b4:4a:
83:67:6e:bd:38:59:86:70:90:ab:d4:68:e9:1e:6d:94:7a:53:
79:fa:84:6c:98:8a:77:14:9f:9b:a4:a1:74:1d:d5:04:26:38:
ec:18:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:33 2026 by rpki-client