Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: dZtivv+lnU9LOZXDLQnQdII/yFa8yLHdvmvYhSXsmqI=
Subject key identifier: 26:A4:B9:A4:17:E6:3C:D5:F8:C7:C2:E2:C3:EF:EA:CB:56:4C:11:FE
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 01A0C40E7486F63D4C519D0BC164A4FB8D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 13:01:16 +0000
Manifest this update: Mon 21 Sep 2026 13:01:16 +0000
Manifest next update: Tue 22 Sep 2026 13:01:16 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: ZAdPvZqTEuD3xIH+Q5bssjtMwkrrPKqp0I6rU0+OZ3A=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:74:86:f6:3d:4c:51:9d:0b:c1:64:a4:fb:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Sep 21 13:01:16 2026 GMT
Not After : Sep 22 13:01:16 2026 GMT
Subject: CN=26a4b9a417e63cd5f8c7c2e2c3efeacb564c11fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:1a:01:1b:15:56:45:4a:87:40:50:fd:65:
1f:74:bd:96:12:69:6f:e6:8f:7e:2a:b4:f8:aa:b3:
5f:0a:5c:d2:8f:2d:66:1f:c0:ae:fa:0e:87:f0:52:
f6:fc:69:8d:18:85:97:ce:95:55:d9:3d:59:fb:98:
fe:67:8c:dc:f1:c3:8c:30:97:ba:19:7b:4c:c2:1e:
e4:54:7e:2c:36:dc:2a:8d:c6:05:3a:f2:62:8f:bc:
0b:75:d0:93:f9:e6:eb:a2:71:60:53:79:40:a8:64:
d9:20:05:ed:35:b5:7e:39:18:07:89:41:f2:57:15:
38:87:c0:c4:ea:b1:40:10:56:9f:ef:5f:a5:9b:7a:
40:74:36:de:33:9d:8e:0f:e3:1d:6f:c1:1d:cd:44:
a7:ee:40:e2:26:e8:05:5c:12:2d:f4:20:c5:43:d6:
ce:89:4d:43:8d:70:ec:41:0a:b5:1b:83:24:6b:8e:
7a:0a:0f:2b:4a:01:7b:31:f2:b7:5d:d1:1b:dd:a3:
f2:68:eb:b9:2c:d5:aa:68:c5:ba:8b:ff:f0:74:1a:
6a:4d:7d:04:c0:56:4f:9a:45:5d:ea:83:a2:77:23:
51:ee:a4:ea:f7:b0:93:06:66:21:2b:13:9b:b4:cf:
2b:6a:43:90:ae:41:92:54:33:48:c0:f0:b0:d6:4e:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:B9:A4:17:E6:3C:D5:F8:C7:C2:E2:C3:EF:EA:CB:56:4C:11:FE
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1c:99:80:f5:da:a4:b9:eb:95:99:3f:1b:ec:e8:0a:d0:33:
e0:76:1e:64:7f:27:c2:76:a0:ab:bc:be:63:5a:19:37:55:3b:
79:59:94:d9:40:3b:df:e0:f0:7e:ca:c7:61:6b:b9:af:aa:42:
53:a3:99:b5:4f:5e:fe:d9:c7:2f:82:1a:d5:70:62:ed:99:f9:
29:e6:e7:09:47:42:82:68:11:b8:71:39:03:8c:60:45:9b:42:
fe:9e:61:50:92:a7:0e:01:4f:d4:95:38:be:e3:a8:87:e2:4d:
56:fa:51:47:ca:02:05:33:ff:e0:b1:a6:6b:46:27:f8:81:92:
7b:97:b8:09:3d:32:7b:16:ef:c0:23:d5:55:e2:17:b8:cf:6f:
99:e8:0c:7e:63:cb:3b:59:2d:6c:80:a8:10:7c:54:c5:97:01:
84:dd:aa:37:75:df:86:0e:1a:e6:14:04:86:f3:a3:33:c0:0a:
39:02:01:0d:2f:77:7a:64:ef:1b:e5:f5:5a:3a:95:bf:72:23:
e8:d0:57:eb:bf:61:db:30:5a:7f:2c:2d:2e:2d:69:65:12:56:
e2:df:f2:ab:d2:d1:c9:d2:8e:fa:f2:b1:fa:5d:a8:01:6e:18:
d3:d4:2a:41:ab:b4:a9:f7:dc:a7:31:34:f0:4a:f6:ee:74:1f:
a0:3a:dd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDnSG9j1MUZ0LwWSk+40YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODlhNWRkZDMwMDJlODAwOTk5YjVjMTg2N2Y3ODY3ODFi
YWYxM2QwHhcNMjYwOTIxMTMwMTE2WhcNMjYwOTIyMTMwMTE2WjAzMTEwLwYDVQQD
EygyNmE0YjlhNDE3ZTYzY2Q1ZjhjN2MyZTJjM2VmZWFjYjU2NGMxMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6MaARsVVkVKh0BQ/WUfdL2WEmlv
5o9+KrT4qrNfClzSjy1mH8Cu+g6H8FL2/GmNGIWXzpVV2T1Z+5j+Z4zc8cOMMJe6
GXtMwh7kVH4sNtwqjcYFOvJij7wLddCT+ebronFgU3lAqGTZIAXtNbV+ORgHiUHy
VxU4h8DE6rFAEFaf71+lm3pAdDbeM52OD+Mdb8EdzUSn7kDiJugFXBIt9CDFQ9bO
iU1DjXDsQQq1G4Mka456Cg8rSgF7MfK3XdEb3aPyaOu5LNWqaMW6i//wdBpqTX0E
wFZPmkVd6oOidyNR7qTq97CTBmYhKxObtM8rakOQrkGSVDNIwPCw1k5AZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCakuaQX5jzV+MfC4sPv6stWTBH+MB8GA1UdIwQY
MBaAFNSJpd3TAC6ACZm1wYZ/eGeBuvE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmIt
NTI1OWVlZGNhMDdjLzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmItNTI1OWVlZGNhMDdj
LzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhyZgPXa
pLnrlZk/G+zoCtAz4HYeZH8nwnagq7y+Y1oZN1U7eVmU2UA73+DwfsrHYWu5r6pC
U6OZtU9e/tnHL4Ia1XBi7Zn5KebnCUdCgmgRuHE5A4xgRZtC/p5hUJKnDgFP1JU4
vuOoh+JNVvpRR8oCBTP/4LGma0Yn+IGSe5e4CT0yexbvwCPVVeIXuM9vmegMfmPL
O1ktbICoEHxUxZcBhN2qN3Xfhg4a5hQEhvOjM8AKOQIBDS93emTvG+X1WjqVv3Ij
6NBX679h2zBafywtLi1pZRJW4t/yq9LRydKO+vKx+l2oAW4Y09QqQau0qffcpzE0
8Er27nQfoDrdgQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:56:14 2026 by rpki-client