Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: S6/JE/5DSKw6e8/7wNbZHpr0grhZvjcjwaXLY7yAHF4=
Subject key identifier: FD:3E:E5:72:33:0F:C4:2F:C6:94:08:DE:B3:FF:9F:FD:57:06:6A:DB
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 01A0CFA3D6D5A72FB0DB6D53D692DF2F1B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 19:00:16 +0000
Manifest this update: Wed 23 Sep 2026 19:00:16 +0000
Manifest next update: Thu 24 Sep 2026 19:00:16 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: hXeiqPuXrvVTy7n+XEdLNOsWEx3souKJ56XP0MBi6SE=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:d6:d5:a7:2f:b0:db:6d:53:d6:92:df:2f:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Sep 23 19:00:16 2026 GMT
Not After : Sep 24 19:00:16 2026 GMT
Subject: CN=fd3ee572330fc42fc69408deb3ff9ffd57066adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:bb:80:5a:e5:37:65:b6:bf:a4:11:a6:0d:
a5:f5:91:eb:1d:18:91:31:5a:e0:5b:34:9b:d9:84:
44:c1:3f:67:0c:50:39:a9:43:96:3d:83:86:35:b1:
1f:a0:76:7d:a1:8d:ca:d3:95:9a:34:7a:93:24:53:
01:79:bb:54:38:5f:de:f9:e2:9e:25:ae:49:35:cd:
dc:9d:4e:f8:e7:4e:04:99:f8:a5:3c:b4:42:d6:b7:
47:82:49:30:57:a4:1c:20:52:ad:79:0b:65:a0:cb:
9a:2e:2b:c8:f5:97:e9:27:39:3e:08:f2:33:56:df:
7c:f6:30:26:cd:bd:ba:cf:0b:11:16:3e:05:3e:51:
12:df:47:43:37:25:35:3f:11:5e:05:7f:a0:02:a7:
a8:f6:26:02:0b:b9:34:7c:82:52:8b:8a:18:96:8b:
f5:e3:42:4c:fe:85:90:45:66:e5:3d:12:dc:69:d0:
b7:e8:84:79:0c:69:60:a6:2e:20:4b:ca:38:49:ff:
cb:e8:ac:66:7c:ef:2b:0d:54:f9:ef:3f:70:53:fe:
d3:71:14:25:34:26:22:dc:86:4a:7a:a1:f1:9c:ea:
89:6c:e3:85:64:e7:c3:54:ff:a4:df:d6:fd:05:64:
10:c1:61:4b:3c:c9:c6:40:3f:5c:56:6c:45:e3:04:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:E5:72:33:0F:C4:2F:C6:94:08:DE:B3:FF:9F:FD:57:06:6A:DB
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:05:db:14:9b:f6:27:78:73:0d:4d:79:7a:59:9c:b8:e3:
bc:d6:af:0f:43:05:6d:fb:11:af:3e:35:22:8a:d9:cd:1b:0e:
ee:19:39:e4:b6:9a:e6:9e:9d:71:71:03:7d:41:68:07:64:6a:
89:02:16:9f:2d:bd:37:fd:81:9d:3c:90:19:4e:bf:a9:0b:c6:
c2:05:93:f9:b6:68:9b:39:c5:5c:6e:05:76:7a:a6:26:62:d0:
fa:e0:69:4d:c2:91:df:90:da:e0:24:9b:02:3a:f5:30:c7:56:
16:46:17:58:6b:37:2e:8e:8d:95:cb:a3:3e:71:1b:ea:5f:1b:
95:08:a0:86:e9:8c:e9:60:ff:cf:16:4a:59:a9:d1:37:97:5b:
0e:a6:2e:eb:de:a8:74:d1:4c:27:29:1e:39:9a:82:a6:ea:30:
e2:eb:66:f2:34:51:cc:ba:f3:c3:5f:f7:2a:2d:79:ff:58:20:
d6:2b:0b:1c:9e:aa:e5:19:43:d3:20:33:7a:d0:cf:14:60:31:
fa:93:1d:bf:ac:03:8b:cc:5a:70:42:0b:ff:42:fb:e1:82:43:
5f:02:ac:aa:fe:ac:b6:72:53:4d:62:91:8c:0f:96:78:f7:11:
51:b4:88:14:fd:2a:56:91:b1:b1:96:9c:d6:5e:2c:ec:5c:0a:
09:55:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:51:12 2026 by rpki-client