Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: 1d6IPjhvAs2KCLi0fxEWJoo9Mne/RlmHk0MOy+zUTnE=
Subject key identifier: 32:79:CC:CA:9F:B1:2A:20:30:DB:A6:55:AA:E9:3A:CA:A9:82:B3:A1
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01A0DE3C0747F41F8A1AA97424285052D55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 15:01:10 +0000
Manifest this update: Sat 26 Sep 2026 15:01:10 +0000
Manifest next update: Sun 27 Sep 2026 15:01:10 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 7/l3AchUs6bTSfOhoeFGjlOfeh3muQ+21Jewzn0wnHo=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:07:47:f4:1f:8a:1a:a9:74:24:28:50:52:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Sep 26 15:01:10 2026 GMT
Not After : Sep 27 15:01:10 2026 GMT
Subject: CN=3279ccca9fb12a2030dba655aae93acaa982b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:56:57:c3:85:a8:b3:11:bc:09:16:1d:49:
8f:b5:ef:9f:11:b5:f9:d6:52:b6:54:9d:4e:da:8d:
23:50:68:74:6a:8a:58:c1:aa:c0:92:6e:b7:78:e9:
62:df:6c:05:8f:4b:f3:1c:df:76:9b:f2:b8:76:b9:
4c:29:bb:87:09:59:55:af:c9:8c:2b:86:35:b5:e2:
d8:e4:78:d3:ef:a7:5f:f5:33:fc:7d:9f:e1:05:25:
38:c5:41:7b:a0:0d:a2:97:bb:e5:cc:03:24:be:cb:
a2:01:c1:b1:af:80:d1:4c:bc:3f:22:1e:2c:21:f8:
7e:f5:ca:21:10:42:ed:40:62:54:30:2a:d2:0e:c3:
ce:20:0e:ee:e4:83:b8:4a:37:1d:83:41:53:d9:cc:
23:68:97:51:d2:1b:9a:57:4c:75:4d:21:87:11:22:
88:d9:ae:1e:61:6e:1e:2d:87:fc:12:7a:63:a3:f4:
9c:a2:e3:83:23:1e:0b:1f:98:8c:b3:6d:f7:cb:f8:
48:25:59:1e:b4:aa:cf:d2:1a:1a:ac:4c:a5:ba:10:
c6:cf:84:2b:ff:25:4c:6e:f1:40:13:64:8e:73:83:
27:b7:7f:12:c6:13:04:e0:dd:aa:19:18:ab:25:5d:
08:f5:dd:77:c2:02:7e:1c:15:92:aa:4f:6a:b9:5c:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:CC:CA:9F:B1:2A:20:30:DB:A6:55:AA:E9:3A:CA:A9:82:B3:A1
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:78:91:ae:a5:d8:06:5b:f9:87:47:d1:45:36:c5:75:a4:39:
5f:ee:39:7f:14:97:54:90:4a:d5:c9:b9:b5:ce:ef:11:b1:a6:
fd:5e:63:12:4d:c0:1f:f7:87:a1:44:9c:c1:ea:73:c2:de:11:
36:4e:a8:56:06:98:9b:bf:82:3f:cf:83:f1:0f:33:a4:a0:2f:
6f:f9:f0:6e:06:55:70:dc:4f:75:50:d6:17:8d:43:a4:be:f3:
ba:cd:ef:a6:9d:ac:9e:9b:e1:27:82:10:0e:36:d3:bf:30:ae:
c0:1c:f5:e4:35:c7:73:c0:d0:0e:7b:2b:e2:81:44:bd:3d:90:
b2:1b:f4:87:32:5a:29:72:54:08:fc:83:b0:25:fe:e8:bb:9b:
52:28:8e:5e:33:1f:36:99:41:34:7d:60:1d:9b:1d:24:93:d5:
0b:ee:6f:a8:c7:16:25:1e:9c:a1:9d:d3:8f:d7:d7:b3:d2:02:
3f:45:5e:39:8e:58:9d:c6:7b:b8:28:b1:a9:50:1b:ba:3b:ac:
d7:b0:18:fd:a1:6e:3d:b2:d2:5e:68:41:06:21:05:f6:06:0e:
f4:5a:a5:ea:a4:7d:8d:9e:d4:db:5f:26:79:c6:5d:06:cf:52:
b1:5b:18:19:0a:c1:bf:74:98:ab:10:77:19:16:0f:25:78:f5:
2f:6e:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:46:14 2026 by rpki-client