Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: wcFVD0xqvh+FGPMeZQmzr6lhDJXk2F5+ZVaif0COzCs=
Subject key identifier: 11:EE:C7:4B:D7:FA:B5:10:D6:62:1E:AE:03:FF:02:EA:49:91:6A:E0
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01A0D7CBD506171E0F07817F1442FD37FDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 17B5
Signing time: Fri 25 Sep 2026 09:00:54 +0000
Manifest this update: Fri 25 Sep 2026 09:00:54 +0000
Manifest next update: Sat 26 Sep 2026 09:00:54 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: n7+LlInsuvVzvQvNldIclFekBE1sBDVi27T75Xk6dwU=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d5:06:17:1e:0f:07:81:7f:14:42:fd:37:fd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Sep 25 09:00:54 2026 GMT
Not After : Sep 26 09:00:54 2026 GMT
Subject: CN=11eec74bd7fab510d6621eae03ff02ea49916ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:7b:94:a2:dc:cc:1a:56:f6:b7:14:07:90:
61:30:78:c0:c7:d2:97:c4:cd:d2:5c:bb:e5:d5:31:
7a:67:1a:39:dd:96:e7:06:cb:12:99:bc:e6:24:d9:
13:22:88:e6:6f:19:04:78:3d:54:47:30:5a:26:66:
db:27:cb:6c:26:0b:4f:8b:7a:69:af:5f:99:80:f7:
34:ff:b2:b5:08:63:b1:96:7a:3b:32:8d:32:be:9d:
23:91:3b:68:1b:d6:2e:4d:c1:4f:71:8d:61:74:eb:
d9:b7:48:40:be:6e:30:d1:27:64:5a:93:43:dd:f3:
06:69:f7:42:81:1d:26:37:7a:a5:6d:1e:ec:1f:82:
6a:bd:b4:2d:58:d2:5b:0c:3c:26:53:1c:56:06:3a:
2a:d4:c9:fb:fd:e1:3b:47:63:d3:b1:41:f4:d9:db:
86:5d:46:9e:cd:cd:ba:1d:94:82:e1:8c:24:0e:49:
5b:5e:9d:9f:7c:a7:dc:27:2f:94:44:fc:9b:94:31:
ef:5c:f2:0b:a3:aa:53:3f:18:bc:3a:54:c1:1e:80:
b8:24:4d:2b:c7:21:55:16:a3:c0:85:fa:f7:4d:06:
f5:67:91:20:6c:ce:a3:68:cf:f4:75:66:21:9a:69:
69:88:fd:ee:c8:8f:e5:c2:7b:e7:5e:97:e4:e6:c9:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:C7:4B:D7:FA:B5:10:D6:62:1E:AE:03:FF:02:EA:49:91:6A:E0
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:81:9d:36:a5:46:f9:c3:70:ef:98:cd:2f:05:dd:7f:60:
ba:45:79:f7:08:68:91:2a:48:65:be:56:dc:45:29:3c:a4:42:
01:77:43:b6:96:38:9c:ef:44:46:0f:4e:af:68:fe:a4:a0:ee:
e9:ab:01:c0:d3:5a:1b:b4:37:cb:b8:ee:25:a3:ce:43:43:3e:
71:fa:77:80:95:37:62:f7:d5:98:b9:4f:4a:83:4a:ae:e3:63:
4e:e0:9b:9d:e9:2e:8b:10:14:65:2a:1b:a7:72:21:15:a1:2e:
d0:c5:3e:64:6e:3f:52:06:11:05:67:8e:67:57:62:e1:89:5d:
03:3b:11:77:0e:cc:eb:ad:23:17:48:57:ce:18:25:f7:61:6d:
31:cb:a1:da:d1:76:d5:18:8d:0b:cc:6d:0b:72:27:bb:50:21:
d0:93:ef:4a:76:37:2b:b1:93:da:50:67:97:cf:d1:77:9b:a3:
aa:27:64:57:ac:6a:c7:8f:2a:2e:81:77:85:af:15:f2:2f:f4:
39:ae:72:b1:3e:ad:95:27:83:95:4f:f6:a7:7e:55:36:36:2c:
a8:7d:ac:6a:12:21:59:d1:db:da:40:88:fa:5f:cc:90:75:1a:
9a:ab:2c:3e:57:c5:85:4f:6b:b1:ba:de:ce:83:62:bb:9c:43:
79:c5:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:23:37 2026 by rpki-client