Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: twP8v0li4smBeGcs9BWCxjTL5hdE8p61PntngIg5Xws=
Subject key identifier: 04:ED:98:D2:F2:2B:30:59:AD:2A:1D:EA:3F:ED:B6:9C:6A:EA:CF:7A
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019F9022F41BCB3F468DC7F9188EA0C18CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 18:00:37 +0000
Manifest this update: Thu 23 Jul 2026 18:00:37 +0000
Manifest next update: Fri 24 Jul 2026 18:00:37 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: /uCIN7F4tn+N1nDLvocWhiTWFfkB1hNibMYVfZy0SZc=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f4:1b:cb:3f:46:8d:c7:f9:18:8e:a0:c1:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Jul 23 18:00:37 2026 GMT
Not After : Jul 24 18:00:37 2026 GMT
Subject: CN=04ed98d2f22b3059ad2a1dea3fedb69c6aeacf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:30:e6:14:e1:6c:d1:7f:92:a8:e5:90:18:
1f:10:1f:e7:24:02:af:0d:24:03:02:f9:73:6e:f4:
d6:55:26:ca:f9:b9:5c:fd:12:6c:50:ae:80:03:22:
3e:11:94:47:72:39:c9:de:d1:3b:b6:e5:42:97:ed:
b7:27:f5:5e:48:51:a4:50:6a:aa:44:d6:58:e6:2c:
26:ed:4b:84:95:7b:95:4d:0c:5f:ec:7a:b8:7e:c7:
4c:00:d4:48:d1:43:e9:e5:5e:0f:2e:fc:50:e2:eb:
86:d6:4d:e4:69:d5:a2:b0:5b:76:a3:16:9b:bf:be:
92:af:d5:cb:10:ae:da:09:59:8b:7a:62:3f:9b:bc:
ef:9e:93:f6:67:89:ae:d9:f4:4f:ed:68:6d:d9:28:
3b:01:71:a0:7f:6e:29:ab:67:a6:bd:41:1e:62:7c:
78:64:da:7d:62:ff:43:a5:f7:20:38:4c:45:6d:41:
f3:f5:32:6f:ad:aa:28:fa:b5:02:3f:46:1a:40:c2:
3d:32:18:06:dd:6f:7b:4a:08:db:b0:37:c2:97:1b:
89:73:48:c6:11:cc:5a:71:26:32:09:66:dc:41:ef:
ae:77:a9:8e:4f:c0:36:e6:91:f8:25:70:75:d9:c9:
3d:cf:65:3e:49:f9:e7:5f:9c:12:16:d4:cb:d4:02:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:98:D2:F2:2B:30:59:AD:2A:1D:EA:3F:ED:B6:9C:6A:EA:CF:7A
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:a7:b8:c3:57:cd:d6:ee:d5:51:c5:23:ef:af:df:36:b1:
2a:b5:9c:2c:66:bb:f2:77:a5:a7:65:b5:7c:5c:61:08:48:bb:
a0:23:26:72:90:1e:c3:f6:eb:d9:1c:99:f3:18:28:05:7a:c5:
b3:a4:5a:1e:52:dd:f7:a3:44:cc:0f:f9:41:c4:2f:58:2e:3e:
12:0a:b1:9c:d6:4e:28:34:db:f8:2f:7e:4e:ad:aa:16:c9:e6:
5a:c1:c3:e3:94:d3:3c:ef:aa:72:2f:35:f7:5b:c8:1c:07:c2:
03:b3:3b:dc:c2:67:44:05:01:07:7c:b8:3d:4e:56:cd:54:8c:
c9:47:9a:90:0d:98:f3:e9:6f:ee:24:63:73:6f:b7:ed:55:ee:
1e:d6:56:5d:b9:44:d2:01:7e:39:eb:64:f9:75:20:02:42:a8:
be:e1:e6:4c:70:ad:31:35:63:81:3c:4f:35:06:db:c8:1b:13:
b4:6d:6a:d3:ee:31:66:42:84:2d:ae:1f:49:b2:a2:dc:e3:51:
35:d0:7b:25:af:10:66:fc:d6:58:d2:91:cc:74:99:b4:ca:02:
95:2a:00:d6:5e:4e:0a:4d:74:c3:2b:49:75:71:47:a7:1a:30:
14:a6:b9:12:2b:28:01:56:de:41:90:ca:3c:7a:0b:d1:29:af:
b8:77:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:06 2026 by rpki-client