Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: iQCWkrySQQ00qWjyIUgBZXwcWlcWaeg6PjoKrvzhmVg=
Subject key identifier: AD:3B:F4:DF:29:53:B7:E5:62:8C:ED:BB:A8:5B:7F:95:71:6F:80:C8
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 019FAC75ECBA5A1130A0C45C5C0FCC20E704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 171A
Signing time: Wed 29 Jul 2026 06:00:37 +0000
Manifest this update: Wed 29 Jul 2026 06:00:37 +0000
Manifest next update: Thu 30 Jul 2026 06:00:37 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: 7PVnd7+EG9VPt3cG23pS0RKC1uIfLSYfN0R22SZEwBI=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ec:ba:5a:11:30:a0:c4:5c:5c:0f:cc:20:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jul 29 06:00:37 2026 GMT
Not After : Jul 30 06:00:37 2026 GMT
Subject: CN=ad3bf4df2953b7e5628cedbba85b7f95716f80c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:02:df:b0:41:e9:e7:72:70:65:eb:cb:05:
1c:01:dc:1b:f2:19:6b:74:a2:f9:8f:57:c7:cb:21:
b9:48:9a:4f:cc:37:3f:b1:66:d6:80:93:3a:ea:cb:
c9:88:ff:c6:03:e4:71:c5:09:9c:72:9c:92:54:36:
68:a5:ca:b5:41:18:2f:73:14:26:96:22:3f:ee:ae:
38:86:d1:ec:fe:e8:3c:d1:47:2a:08:2c:81:16:c9:
f2:37:10:17:b5:f1:c7:bc:45:b8:2a:90:55:b3:20:
ce:a5:d1:09:e9:cf:94:b8:8b:4d:9e:22:3b:ac:b8:
c4:c9:d9:f3:a9:94:5e:14:c3:00:9b:87:c7:56:01:
6e:b1:9c:63:dd:af:41:c6:1d:90:02:42:a9:16:f9:
1d:9f:4f:80:1d:62:70:34:fa:9a:7a:d1:b8:d2:b1:
7f:0f:0b:24:36:92:bc:2a:8c:e9:97:fc:f5:65:18:
c8:b7:08:79:7c:c7:78:81:37:e0:0e:9b:c3:6a:62:
4c:4c:e4:2f:2d:57:db:a8:3c:39:dc:14:c8:dd:c9:
1b:99:5c:81:d7:95:6b:7a:72:79:1e:e2:c2:34:13:
aa:97:7d:6f:c2:a9:a9:52:83:f9:ea:6e:e0:2a:a1:
79:17:6b:54:d3:81:f2:13:93:86:49:38:00:f5:0f:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:F4:DF:29:53:B7:E5:62:8C:ED:BB:A8:5B:7F:95:71:6F:80:C8
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:cb:d4:8b:8f:c4:1d:83:f9:90:98:a6:a3:1e:e3:08:32:
6c:68:28:1a:27:b0:c8:64:2a:71:05:49:ae:08:d3:97:15:e0:
44:86:11:df:0f:69:24:e8:2f:81:21:41:80:ab:03:f2:f1:0a:
74:d1:5a:9e:c6:da:20:ba:50:ec:c2:b9:c4:d2:05:80:9b:24:
38:f5:5c:c2:54:e3:b1:28:da:c3:ef:a1:cd:3d:a4:d4:7b:5d:
f7:c3:63:19:37:2d:f2:2d:8f:23:91:03:c6:f3:70:fa:27:64:
13:9a:a8:e7:e7:2f:22:4c:3f:21:03:a2:7f:1c:6f:d0:7d:4a:
e9:70:21:43:62:b3:45:85:cb:de:c3:45:3e:64:11:90:05:f3:
e2:24:cb:aa:fd:38:fb:3d:18:c7:25:7e:75:72:67:16:a4:f8:
bd:b8:a9:13:bf:6e:46:85:21:64:e7:d8:e8:45:67:cf:c5:80:
a9:a8:25:cd:49:33:61:5a:8f:e9:1d:8a:ec:87:00:e0:a1:5c:
7e:2b:34:70:b1:62:30:0f:dd:8c:81:4d:54:a6:60:4b:9f:3c:
ab:49:ea:a5:9a:9d:05:01:e2:c2:96:b5:41:2e:1a:dc:97:63:
5c:7b:90:3f:01:41:5f:82:1c:99:47:08:5b:fe:49:0c:e5:ef:
d7:7d:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:36 2026 by rpki-client