Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: RNJcIn2t9pegGNf/CeKoR3BPcIZMIey1ln/8x/FePeI=
Subject key identifier: 2A:A0:21:8D:76:B7:D0:D3:68:BE:0F:34:12:F6:1E:6F:4F:9D:AE:B5
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 01A0FC0FBDFB955E0BB8CAF5DB0D12408B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0789
Signing time: Fri 02 Oct 2026 10:01:25 +0000
Manifest this update: Fri 02 Oct 2026 10:01:25 +0000
Manifest next update: Sat 03 Oct 2026 10:01:25 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: Q1xF1IZoPcwdva1FCFEZXtqik7TCGl8VROvkGfDH5Vs=)
2: oMG6eFlW3TWb4IPEiHtaBvrTrd0.roa (hash: aj4kc+qI+NMwreXFfxOIle+v6Tq05n/0VxwaETeuQY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:0f:bd:fb:95:5e:0b:b8:ca:f5:db:0d:12:40:8b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Oct 2 10:01:25 2026 GMT
Not After : Oct 3 10:01:25 2026 GMT
Subject: CN=2aa0218d76b7d0d368be0f3412f61e6f4f9daeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:fb:86:71:7b:f9:3d:de:04:2a:a1:cb:cf:
ba:72:17:61:ae:85:94:2e:2d:83:6d:28:52:cb:25:
1d:65:c1:8a:22:c2:21:f3:0e:9e:a7:79:f2:6a:fb:
69:20:c8:20:00:f6:f6:e3:0c:50:00:3a:0e:17:44:
1a:d5:95:44:07:ea:83:ca:a3:74:24:7e:5a:1b:cd:
02:b8:5a:33:75:fc:9e:bc:a7:20:e3:49:5a:fe:3a:
8e:4b:a0:7e:9e:c0:19:8d:5f:5c:59:e8:13:c0:d7:
f0:31:e1:3f:cf:2e:90:5a:c0:34:a0:8a:cd:fa:e0:
c6:8d:c3:17:af:f4:b5:f6:7c:68:0f:94:97:e0:4b:
5b:e5:97:08:9c:ef:4d:4d:0e:fe:11:21:02:cd:21:
b0:ad:81:a1:50:df:6a:59:c5:24:6c:11:ea:f0:c4:
8e:f7:f3:fa:1f:6e:0a:15:2c:08:00:a1:6e:ef:3f:
18:e9:ad:d8:12:f3:17:b4:ea:33:57:d5:fd:69:14:
66:b5:60:ee:03:64:37:80:16:bf:0b:ae:5a:32:51:
60:dc:78:7b:c1:46:e4:0a:63:a8:cd:23:bf:79:f7:
fc:aa:74:f6:e9:85:a3:03:dd:f6:1c:87:e5:4e:52:
69:12:78:07:ff:97:b8:d1:cf:7b:85:18:fb:33:89:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:21:8D:76:B7:D0:D3:68:BE:0F:34:12:F6:1E:6F:4F:9D:AE:B5
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:03:42:ca:1d:00:70:df:49:da:55:b6:af:73:6e:93:03:14:
c4:e2:76:d6:1f:fe:bb:bd:23:49:fa:e6:ad:14:d6:12:58:98:
38:e2:07:aa:cd:a8:2e:10:76:a5:6a:0f:06:23:31:4f:ec:50:
23:4e:c2:67:25:63:ad:cd:2f:68:93:78:37:c9:12:b6:44:86:
10:7a:b2:20:36:26:37:8f:b2:06:8f:89:a9:8f:55:0d:9d:27:
c6:c8:04:fa:e8:df:80:5a:95:6d:bf:c0:77:0b:0d:c9:94:4b:
f1:0f:3e:84:7a:5f:a8:e7:73:db:d2:47:a8:34:89:90:8e:f6:
a1:cf:08:63:3a:37:4b:0f:a4:3f:92:31:f4:99:d4:e8:22:68:
b9:93:b6:31:8f:ba:02:be:ec:c4:3d:bf:89:75:65:18:c4:4f:
e1:dd:60:cb:14:38:a2:20:36:02:b5:1d:b6:9b:dd:de:73:5a:
38:fd:54:81:1b:26:a8:1c:4f:55:e4:97:67:f1:51:0b:96:ee:
8a:7c:77:ae:6d:21:cd:d8:71:4a:32:14:65:5e:e2:7f:05:2d:
17:e9:c5:ab:1b:17:ce:71:fa:bb:ac:dd:8c:c7:f8:29:af:a0:
9e:ea:9f:78:f4:84:72:c9:29:cd:ff:c1:0b:f7:f7:cc:32:87:
e8:83:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:01:57 2026 by rpki-client