Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: 0vHmIMkbwoAAOLpdMltEQCsvRO1fPiu51qrdctOjQcQ=
Subject key identifier: D2:F4:62:37:5D:59:69:1F:9F:31:40:38:70:03:F7:A8:A9:A4:FF:C1
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 019CAC104C6DAF01AA0D54D754763B8D4617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:15 +0000
Manifest this update: Mon 02 Mar 2026 01:01:15 +0000
Manifest next update: Tue 03 Mar 2026 01:01:15 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: I3OTou4CMxo28P946IK9ifACFNBdQlfp/ERZJAWcdVM=)
2: kE5VlmslAvRcrZ42pGQyAHfoqrE.roa (hash: AmEozEHyDw1oYPPxW0JA4Yammx0So33uCTb4ELzWUD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4c:6d:af:01:aa:0d:54:d7:54:76:3b:8d:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Mar 2 01:01:15 2026 GMT
Not After : Mar 3 01:01:15 2026 GMT
Subject: CN=d2f462375d59691f9f3140387003f7a8a9a4ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:7c:dc:67:fb:d4:0b:f8:22:7b:3c:35:4b:
21:2f:1f:27:ae:17:b8:13:15:13:80:98:c5:80:d5:
53:47:49:14:4d:5f:64:93:41:32:28:e4:ec:b5:95:
15:70:b0:61:9f:be:4f:3d:9f:5f:9b:36:1f:68:e2:
21:12:40:a5:08:50:6f:30:a7:ea:2f:28:fa:75:aa:
36:ee:f2:ce:22:f9:ce:8e:5f:8a:01:e5:64:f1:38:
71:a6:43:61:ef:b9:15:4c:b9:38:78:be:e9:82:d1:
63:cd:5a:35:0b:87:e7:2f:7d:d0:82:43:b9:2f:f1:
1e:b2:09:6c:5f:50:f0:5f:89:96:f8:7c:c0:1a:99:
91:b3:8d:54:6b:03:19:5e:9b:76:f5:26:f7:55:07:
d7:a2:17:fc:52:5e:51:ac:35:f2:e2:29:27:37:60:
37:c1:6e:2d:e3:bb:f1:8c:84:13:cd:b1:6b:02:db:
8e:cb:9f:bb:d8:af:d7:72:7c:cf:dc:43:b0:1f:72:
7f:80:d2:ba:f6:38:6c:be:a1:f5:63:52:ef:8d:ff:
a5:df:c8:a4:0b:23:75:f0:62:87:99:a2:d6:27:40:
7d:5c:7b:f5:33:41:cc:aa:a7:a3:2e:69:9b:cc:22:
f8:a9:d3:de:9e:7f:01:b5:ae:d7:ae:11:03:13:da:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:62:37:5D:59:69:1F:9F:31:40:38:70:03:F7:A8:A9:A4:FF:C1
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:92:06:98:0c:f1:9a:61:59:0a:75:19:c2:0c:2d:1c:34:
77:2d:59:7f:b7:c2:09:13:f3:74:da:e5:ad:ca:bf:fd:86:9d:
35:9c:f7:13:3f:ec:a0:9e:1a:88:5f:0e:dd:37:32:23:eb:67:
f9:a9:53:31:73:dd:06:b6:a1:f2:a6:5a:78:e0:71:82:7b:ab:
21:99:f8:d1:eb:f0:d7:d9:50:22:90:a0:83:ea:a3:e8:6e:8b:
72:02:93:7b:e9:24:b2:33:65:d0:a8:86:22:56:66:0c:da:a4:
e2:2f:f7:a6:84:63:d1:3b:d9:84:6b:9f:58:27:07:b3:c8:cb:
96:f6:eb:e6:3c:22:8e:20:29:ae:18:af:c8:1f:5d:52:5f:71:
b3:16:ca:b6:4d:3c:1a:4b:3a:85:47:af:b0:33:e6:39:1e:99:
7e:fb:aa:fd:fc:9f:ae:ab:47:13:46:fa:f6:73:66:73:6b:09:
68:2c:46:31:57:bb:03:8c:77:88:59:a2:04:8f:80:8a:1c:6d:
df:79:1e:88:ad:5e:f2:4c:ea:f1:16:0e:7d:30:c2:16:a4:52:
c1:12:76:cb:be:eb:17:1c:04:13:35:ca:db:0d:a7:2d:95:b4:
f9:2f:2b:60:46:2f:f5:fb:ba:53:aa:83:ec:6b:29:55:f7:e5:
fe:8d:20:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:27 2026 by rpki-client