Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: uVgt+GadOVa/emS9qVIYL0Rh1hT4B/41vViZsOaw9Nc=
Subject key identifier: AA:9B:02:5E:E0:38:DE:E5:91:28:9C:C0:83:CF:26:18:D6:95:63:24
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01A113AA602D5A031C6903FD407E327788EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 17D4
Signing time: Wed 07 Oct 2026 00:01:35 +0000
Manifest this update: Wed 07 Oct 2026 00:01:35 +0000
Manifest next update: Thu 08 Oct 2026 00:01:35 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: RETAJbjOL8G/1HPJPjw/o0SIzmeW9Z74ZG20e4+7x/U=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:60:2d:5a:03:1c:69:03:fd:40:7e:32:77:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Oct 7 00:01:35 2026 GMT
Not After : Oct 8 00:01:35 2026 GMT
Subject: CN=aa9b025ee038dee591289cc083cf2618d6956324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:1c:1b:63:52:91:ca:e1:99:f9:76:3f:52:
72:1e:b2:1c:e3:8e:d8:ae:52:f9:f8:c4:5a:71:9d:
22:80:45:80:bb:48:7a:5e:f8:35:9d:69:05:c2:25:
37:86:d4:b3:3e:f9:69:0a:97:84:81:fe:fe:b1:60:
f2:86:b5:fc:28:aa:e7:65:65:6b:e7:7f:32:f8:e6:
0e:82:47:1a:76:94:0f:5b:79:4b:b3:49:00:10:b6:
29:c7:6f:33:0c:78:48:c9:96:75:a6:9a:28:26:8a:
50:c7:eb:38:4b:af:51:cd:84:17:bb:05:08:e7:1a:
2b:7a:57:3b:7c:f7:a5:c6:ee:62:3a:f8:4f:77:f1:
a0:e6:5f:04:27:8d:f6:00:88:16:60:08:3a:89:54:
ee:34:21:94:07:04:30:b4:96:c9:e1:30:94:29:11:
1b:4b:46:bd:db:b1:ba:e8:26:ab:ee:b9:dc:13:89:
64:9f:b5:57:1a:1e:c7:31:8c:bc:d4:d4:33:68:d6:
de:a6:f8:8f:b7:e2:a7:c3:31:14:af:aa:d7:5e:b8:
a3:b2:8b:90:bb:08:77:2e:97:f1:9a:57:bb:4b:bd:
7e:61:69:f1:e0:39:45:10:ae:1f:6e:0d:57:61:e3:
1e:3a:42:d2:dc:6a:bd:14:22:39:7f:0d:89:92:3e:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:02:5E:E0:38:DE:E5:91:28:9C:C0:83:CF:26:18:D6:95:63:24
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7f:70:68:15:58:6a:33:b1:8b:75:57:d0:9f:8e:d3:4b:db:
a3:1a:bb:3c:a3:84:69:12:dc:53:97:e5:95:a8:ad:69:57:c7:
dd:5d:fc:78:0e:4b:b3:f4:89:5d:fb:a1:8b:e3:a4:fe:39:4d:
e8:79:17:85:a0:0f:80:f8:5c:1d:01:d8:b5:6b:d9:63:63:2a:
1b:bb:b4:45:e2:07:6f:4c:1b:57:bd:23:59:00:6d:2b:39:d3:
c0:97:3f:d1:1a:3c:8e:27:80:02:01:3c:96:c0:77:5f:9c:f0:
bf:b5:ab:36:47:8b:14:94:a3:95:a8:3c:7e:8e:cb:4f:43:79:
45:ee:cf:93:b5:14:43:14:0c:92:eb:52:6c:cc:63:aa:80:23:
e5:1b:c7:13:f9:ed:92:c4:ed:54:b5:fa:95:aa:b2:64:7c:78:
fa:ce:d5:c1:2a:9d:85:42:b4:b8:6f:b6:9f:9a:dc:d9:c8:cb:
3b:a0:95:d2:8d:5b:b8:cb:84:8c:2c:30:d1:bc:58:8e:c5:aa:
1f:c5:d3:12:dd:94:ba:05:c9:2c:ff:11:bb:e7:02:2e:c9:57:
f6:d3:91:3e:41:03:22:af:b7:6d:f9:1c:cd:85:32:40:74:08:
b5:cc:4b:15:31:84:d2:18:42:12:ed:a0:88:25:52:b8:f2:19:
ef:71:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:22:07 2026 by rpki-client