Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: HWGqW59S2nbP4pMR8n/IaHQPQwdQsS9oedXsWAY0FjU=
Subject key identifier: 0B:39:1D:B9:06:73:61:7D:AB:4F:D2:DA:8D:BA:D1:49:E9:BD:94:2C
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 019F92ECF684389C01D2796D4102690234AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:00:30 +0000
Manifest this update: Fri 24 Jul 2026 07:00:30 +0000
Manifest next update: Sat 25 Jul 2026 07:00:30 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: oO7C9ur+ytl990qC5qIXKlz33tSJlTJP1BA+IovCcvU=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:f6:84:38:9c:01:d2:79:6d:41:02:69:02:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Jul 24 07:00:30 2026 GMT
Not After : Jul 25 07:00:30 2026 GMT
Subject: CN=0b391db90673617dab4fd2da8dbad149e9bd942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:0a:f6:f2:6c:a6:e0:9e:89:e9:f1:8c:ac:
c8:f7:ed:28:48:2e:b1:b4:7f:4b:5b:ef:ab:f4:43:
37:1d:e8:c7:2f:49:75:67:a2:61:d4:c7:05:50:9c:
8c:7d:6e:ed:a1:66:d3:3c:90:48:70:4a:53:a7:c1:
01:af:09:40:bb:c0:1e:da:f7:4b:b1:ff:4f:2b:b3:
83:49:1f:89:92:cd:7f:d1:2d:1f:de:9c:2f:b3:59:
45:72:f5:63:32:12:31:21:1a:62:03:05:93:f1:d1:
d6:ef:75:78:0f:bf:ab:ea:37:6d:ec:23:5e:56:09:
b2:29:68:4d:3b:60:c9:f5:a3:fa:6e:89:6a:5b:66:
9a:0c:89:bf:98:26:46:59:db:55:70:28:69:62:eb:
4d:f9:a9:fc:05:02:d4:40:53:a2:3b:21:f3:42:2b:
e5:b5:fa:41:31:7f:0f:1c:6c:05:d0:c7:de:b3:6c:
0a:03:c2:2e:8a:28:b1:3c:e9:c7:b0:55:1b:af:5e:
36:6e:c4:6f:92:24:1a:b4:a8:e6:48:d4:c8:5c:9c:
1a:d7:66:7f:d1:e9:de:66:17:a9:74:e5:c2:fd:69:
4a:55:ab:b5:73:91:2f:98:0b:82:ed:7e:b1:86:89:
a5:84:4f:70:99:17:2c:d0:8f:d7:f9:20:a1:c7:9f:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:1D:B9:06:73:61:7D:AB:4F:D2:DA:8D:BA:D1:49:E9:BD:94:2C
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e0:4c:b7:1f:3d:f1:25:d1:b8:4a:31:74:01:70:f9:bd:c7:
28:28:1b:ea:bf:9d:c5:76:8a:8b:40:f1:01:05:b4:f6:ff:0c:
30:35:a8:4a:7d:a2:f8:2b:92:9e:3d:08:5f:52:28:98:61:e1:
76:f1:23:80:63:fe:3c:01:19:06:88:1c:7d:8d:f7:44:72:2b:
57:05:30:8f:ce:e4:86:5b:3a:71:54:dc:c4:ca:63:cf:39:e3:
18:34:53:68:e1:03:93:21:31:71:dd:94:4a:8b:ff:40:60:df:
e9:f8:cd:be:fc:58:44:a5:0b:f0:83:8f:4f:e2:44:8e:38:76:
0d:e8:2c:fe:2e:5a:7e:9c:26:d9:26:3a:ea:75:c6:7f:ea:7e:
ef:eb:86:97:21:14:02:4e:e0:aa:a8:35:74:88:af:44:c6:3a:
a1:5c:89:46:8d:46:3e:7b:1e:9b:b9:04:b5:1a:99:12:58:82:
22:4e:d9:c5:f9:b9:4f:f3:42:fe:dc:10:5e:9d:72:20:b8:87:
ea:2f:cf:3b:bf:93:b2:a4:d1:e6:e1:8a:58:31:ce:ae:24:65:
cb:6c:68:90:7f:4a:a4:43:13:58:10:de:1f:27:f2:e6:33:90:
70:c4:cb:8c:86:c4:ed:47:ef:63:e3:e3:63:fb:84:4c:81:b0:
6d:15:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:54 2026 by rpki-client