Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: JoLvjaQeGNX/7+8jO5D+kfTQv9oB7V0wH+M52VkqAcs=
Subject key identifier: 3F:A6:4B:68:95:40:A1:DC:8C:D1:F4:BD:40:45:45:4A:CF:00:DD:8D
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019D28BB31C7D2BD4328E94F70B980E9F4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 15BB
Signing time: Thu 26 Mar 2026 06:00:49 +0000
Manifest this update: Thu 26 Mar 2026 06:00:49 +0000
Manifest next update: Fri 27 Mar 2026 06:00:49 +0000
Files and hashes: 1: 8xt8DevzL-rg7wfVKxc8RMN1Als.roa (hash: ylbk4AOnelYjCsDvJ4Axlet8bBci4BQF/dtfQYZ149Q=)
2: IMotTLPla10plwqX_GResv1odqE.crl (hash: OgftrxVOiD404CSCsxgI5vAim1d18kiNx9ESFFS/wBo=)
3: jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa (hash: rcVg4MFo6BBLpVaNgO5+LIgDyJsxyuxnJwO/3OO9u5A=)
4: jW2Kd8f2Y-5PTueI923nik1n0Jw.roa (hash: /La4N20ywy5Sq3GPdObU0wHV90I37vBf0FTBSDxouTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:31:c7:d2:bd:43:28:e9:4f:70:b9:80:e9:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Mar 26 06:00:49 2026 GMT
Not After : Mar 27 06:00:49 2026 GMT
Subject: CN=3fa64b689540a1dc8cd1f4bd4045454acf00dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:aa:29:95:4a:9c:4f:e1:d8:14:4d:3a:5a:
bd:4c:7d:5c:c4:a2:c7:6a:87:d7:6d:ec:f4:b0:37:
44:90:c2:a7:79:42:d7:b2:95:a4:ce:64:0c:a4:fd:
e6:7d:d4:17:77:88:ef:4c:6a:ba:4d:a6:b3:02:89:
6e:63:ec:04:ea:eb:46:a1:57:5f:9b:ef:f5:cc:e7:
9a:c8:3c:d3:8f:63:0d:21:77:08:6a:13:88:f4:e6:
ab:99:9a:f3:64:70:27:ca:3e:b0:95:58:1a:14:a6:
dc:69:2e:c1:bc:fd:a0:32:88:2d:77:ec:83:86:73:
0c:54:7f:c3:f3:8d:07:91:c2:86:c9:b4:90:7f:18:
70:84:8d:de:3d:36:5c:75:82:2b:8a:cd:ff:4b:90:
a7:15:33:5f:aa:67:c4:64:7d:9f:5f:f4:58:69:9e:
f7:fd:b5:7a:e1:d5:16:60:0e:ab:d5:82:d6:fb:0a:
c3:e8:86:e6:25:1b:99:31:50:ef:c3:7b:ec:fe:1d:
7d:20:69:4e:be:fe:04:58:06:c8:c8:55:9e:1c:ca:
98:8a:f3:d9:50:a3:20:d9:28:ab:f7:5b:d5:26:8b:
8a:5a:57:1c:dc:d0:58:bf:c4:e8:bb:02:9d:bc:56:
95:10:0d:57:c4:c7:4a:2c:89:54:49:d4:1f:38:40:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:4B:68:95:40:A1:DC:8C:D1:F4:BD:40:45:45:4A:CF:00:DD:8D
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:d5:69:e2:d2:8c:42:53:69:1c:6f:95:87:04:37:22:e7:
63:ff:30:22:bf:de:0b:cc:7e:66:d6:f8:ce:c6:30:c7:fe:01:
6a:db:72:da:4e:32:2b:eb:0e:0a:04:85:46:bb:34:c0:5a:fb:
40:b2:e5:26:71:47:0c:9e:e3:ea:4b:50:af:4f:3b:6f:13:bd:
81:b4:86:74:9d:59:e2:52:a8:7e:ac:1e:bc:8b:c6:d5:20:09:
ec:b7:5e:35:c8:bc:51:93:82:03:9d:7b:2d:39:c4:c8:09:1c:
4f:5e:02:42:4d:e1:a1:b5:3b:79:3a:a9:aa:b3:50:0d:b4:ea:
f7:0c:f6:72:2f:94:70:20:ce:8a:54:41:74:34:18:62:86:57:
b5:0d:19:19:98:b8:a5:89:a5:4e:0b:15:de:fd:01:58:b5:0e:
75:40:57:5e:ec:6a:0d:a0:71:04:ae:91:86:7f:68:4d:90:9b:
23:1d:8d:0c:f2:30:9b:fd:80:44:2f:bb:fc:3c:74:03:2a:7c:
f4:04:69:40:09:82:09:60:ff:3d:6a:d6:31:d5:02:65:12:15:
23:e6:7e:9c:9e:f9:44:a6:a6:4c:f8:71:9b:1b:ec:48:be:f0:
dd:9c:ee:f3:d7:81:cc:a1:bf:ab:da:00:7b:85:2d:de:2d:86:
e7:d4:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:52 2026 by rpki-client