Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: BlkckjxAgyGMfqnl61MvS0fBWWkPvRnirEE7SjzGtI8=
Subject key identifier: 84:81:40:4A:6A:80:F4:46:F0:87:5D:09:74:E4:64:0E:2B:B4:0B:6E
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019CAC7DBBD050FD31432DC2F2342DA96059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: xhN37535HZiqbZBuLu3iC/8nsyWlbwbVfCGeWaSqcGo=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:bb:d0:50:fd:31:43:2d:c2:f2:34:2d:a9:60:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=8481404a6a80f446f0875d0974e4640e2bb40b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:e0:8e:da:1c:ed:03:b4:49:6b:53:0a:8b:
59:67:92:56:73:bf:54:ec:22:0b:c8:07:86:b0:9d:
47:cf:7b:1d:0c:d0:1d:95:62:ea:07:88:00:82:37:
c0:94:c6:bb:44:fa:52:c3:e3:99:0a:3c:24:43:7b:
3f:66:40:a6:18:eb:a4:b6:33:f1:3a:aa:30:24:72:
b9:29:41:0f:3c:94:71:7e:a2:11:69:6a:5d:b3:da:
57:1a:7b:20:ef:ee:1a:b8:e7:11:8c:cf:6f:d6:62:
ba:f9:c0:e2:22:57:ef:09:9b:eb:09:c8:c6:c3:4f:
8d:b6:96:a5:5f:e0:d3:33:1e:14:32:c8:9a:be:88:
c0:66:cf:22:ed:01:80:72:e7:9d:fb:b8:a4:21:47:
34:2e:43:29:af:ed:50:05:19:f8:be:12:dd:aa:aa:
1f:fc:f6:31:58:20:a0:4f:fc:b2:ad:ae:6b:18:1d:
d5:fd:4e:5f:58:a7:fd:5d:bf:ca:37:4b:cb:97:2e:
b0:38:a7:7a:05:ba:5c:0d:22:e2:a4:63:3b:cc:06:
a1:0e:5c:fd:97:f2:19:a6:39:31:07:e0:25:5c:6e:
16:72:fa:9f:75:06:b8:c4:45:4d:8d:3f:2e:9d:26:
50:e8:24:f2:6a:d3:52:44:33:54:f7:06:9d:c5:6d:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:40:4A:6A:80:F4:46:F0:87:5D:09:74:E4:64:0E:2B:B4:0B:6E
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:54:41:1f:f9:55:70:00:fd:43:9a:a9:f7:be:a8:00:0d:
70:59:3b:05:5b:31:74:17:8e:81:0b:c3:bf:cb:50:1c:7f:88:
ae:3d:c1:59:22:8f:ec:00:1f:28:71:88:53:cc:ce:4d:09:7e:
56:c3:ff:10:78:b3:6c:e6:92:08:a5:ea:40:73:14:53:12:66:
eb:9d:81:ce:d5:8c:f9:3c:d7:f7:64:4a:7f:b8:73:78:f0:44:
d9:16:77:61:4e:63:60:3f:a5:10:6f:c4:a4:97:41:dc:c5:14:
6c:76:74:f6:bd:4e:d6:b5:bf:b4:f1:6d:76:5a:97:3b:5b:2f:
99:3f:fa:81:bf:48:5f:8d:42:ed:79:32:70:22:d4:cd:a6:0d:
71:a2:9b:9a:50:01:bd:37:d8:3e:09:0e:ee:b4:ca:37:1a:e3:
c6:4a:ef:6e:29:1b:e5:50:66:8c:1a:9f:e6:93:73:00:2b:07:
60:81:85:80:52:36:1e:f4:cb:33:30:de:09:e5:03:8c:a2:0d:
01:76:4b:03:04:6c:1b:5a:83:65:01:01:e1:60:3e:d9:6d:cc:
c5:73:e8:d0:8f:37:b8:09:df:dd:d7:49:e2:1b:19:98:f9:31:
99:c6:a6:39:32:64:00:f9:50:a6:c6:e5:a9:5b:4a:f2:5e:db:
8c:c8:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:07 2026 by rpki-client