Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: h4Q40C5QQsCqw1v+SHF6lt5xs6XdeqZXCsHqmHQ+U5s=
Subject key identifier: 91:51:42:C0:7D:02:A5:1F:B0:B2:CB:98:42:38:82:64:4C:C2:87:A0
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 019D27046EEA6B16205627EED44062085D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: qIcYBLEzIAlzprmZT02M2FhCf/Jc8j0PPTudfxqgXhs=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6e:ea:6b:16:20:56:27:ee:d4:40:62:08:5d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=915142c07d02a51fb0b2cb98423882644cc287a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:f8:50:d5:9a:a3:69:d7:86:10:b6:b5:8b:
b9:ef:da:2b:5e:ac:1e:56:44:af:ed:22:ba:d8:c4:
4e:1e:1f:bb:16:cb:a4:09:9d:3c:02:d7:5f:3e:bd:
ae:a2:4b:86:ec:e2:1d:8f:df:6d:af:ce:7b:8a:89:
35:d9:71:79:af:4f:e7:cb:a6:9c:ff:30:82:98:2c:
c8:c6:84:99:ac:e8:7e:0c:22:7d:15:6d:dc:64:ae:
64:a0:fd:6e:6c:83:9e:ce:ab:70:7f:2e:c0:75:c0:
a6:bf:aa:30:5a:04:94:2f:d6:9e:c1:20:5e:58:af:
f3:48:4f:41:59:e5:61:f8:95:b8:47:87:d0:9c:69:
c6:8d:3b:c1:74:27:00:3f:41:42:1d:5c:19:92:23:
5e:c7:7b:83:ee:f4:83:04:2f:f5:e1:a1:33:09:77:
b4:37:b9:29:f5:5a:36:27:6f:2d:56:9e:c4:14:2d:
0d:de:38:79:b0:29:36:e5:2e:c2:22:ee:6c:f2:a5:
08:64:d9:6c:b6:dd:10:d7:a2:48:62:9a:95:8a:51:
08:db:49:0a:6f:a3:b2:b1:02:ad:e2:11:07:c4:e1:
0f:c8:d7:fb:44:d2:45:07:83:cc:05:29:e1:57:2f:
0c:ad:2a:fd:fd:c0:e5:0a:bf:38:cb:8b:34:0a:15:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:42:C0:7D:02:A5:1F:B0:B2:CB:98:42:38:82:64:4C:C2:87:A0
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:9b:0f:29:0c:12:11:e5:c4:7a:80:07:35:83:2e:6d:72:
e6:fb:64:4d:8d:39:fd:72:fb:30:6d:d6:71:fd:7c:1f:c6:d6:
27:d3:5b:e5:77:ad:ad:65:d9:b8:97:aa:e7:3b:aa:de:44:da:
d3:40:59:32:53:3e:33:c5:56:76:12:0d:12:fa:21:11:43:3f:
ba:11:6c:55:53:8f:68:41:fb:18:72:ae:c6:fb:eb:94:01:01:
67:18:08:f8:14:55:17:54:fc:40:52:e9:b0:6b:5e:6a:8e:b3:
09:b9:ce:35:4b:7c:3f:5b:5e:3e:4e:53:c5:05:49:48:fc:f6:
6b:89:cc:23:26:34:6d:5a:3e:f9:06:57:d7:c3:de:2d:5a:c3:
fd:b9:c2:70:ae:99:ad:a3:2c:45:27:f4:de:b0:1b:09:54:4d:
a2:d6:2d:84:dc:6a:b7:42:c6:4c:8b:87:9b:13:d7:92:40:e2:
3c:e1:6c:27:b5:de:53:dd:4d:2a:68:3f:0a:66:ee:27:d3:b2:
0e:ff:b0:c7:0e:ca:de:35:1f:9d:51:15:c9:e6:83:1a:4f:4b:
2a:e2:77:c7:96:df:a7:b0:31:f7:ee:46:94:0c:66:5d:69:cc:
a4:65:cd:cf:b8:e4:96:82:52:e1:b9:83:29:49:1f:19:09:8c:
25:99:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:33 2026 by rpki-client