Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: tA2+4/pF1USDL7AjEtNFwmAULxYTVcDjkxJ3/ZdGjMM=
Subject key identifier: D2:06:80:30:55:A9:3B:0D:94:82:6F:43:25:34:06:1E:D9:1F:2E:E8
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01A121D37F6D0FB44A9B9EEAF1656AF66CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1A9B
Signing time: Fri 09 Oct 2026 18:01:11 +0000
Manifest this update: Fri 09 Oct 2026 18:01:11 +0000
Manifest next update: Sat 10 Oct 2026 18:01:11 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 4a/5XOsWy3SmuaUqltx4r0b6ZjzogOMJlcAAAVDIDhw=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:7f:6d:0f:b4:4a:9b:9e:ea:f1:65:6a:f6:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Oct 9 18:01:11 2026 GMT
Not After : Oct 10 18:01:11 2026 GMT
Subject: CN=d206803055a93b0d94826f432534061ed91f2ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:80:05:32:02:58:34:f8:f0:d8:04:2e:89:
9c:df:a4:04:9b:3e:f1:aa:46:01:a6:0e:a4:63:53:
df:19:64:f2:cb:1b:6d:cf:1e:b0:6f:a3:47:da:0c:
5d:6e:ae:0c:a7:ec:13:f1:41:db:42:a5:fc:51:a2:
bf:94:9e:0e:37:60:60:52:96:4b:87:02:10:1d:0b:
5d:60:c0:e0:35:f2:28:c3:87:cf:24:37:8d:0e:bc:
cc:24:22:3b:48:01:f3:e7:76:80:b5:31:a4:15:89:
01:da:df:fc:b3:7f:da:15:a2:dc:0e:8f:4b:e4:9b:
d0:e9:d2:5a:37:98:f6:a9:19:4a:fa:b3:c7:12:50:
ee:85:95:93:d9:62:41:c8:cd:54:be:8a:c6:72:60:
bd:1b:2d:56:f8:32:79:85:10:21:f6:e1:96:a5:8e:
b8:52:25:1f:8b:37:f1:15:d9:67:f1:ae:85:0b:9e:
c8:9a:bd:31:d5:2a:10:d8:21:5d:6d:8b:44:d7:2e:
2d:19:33:f8:d2:e2:70:83:d7:99:ac:79:21:22:cc:
cc:7e:de:b2:1c:0c:a0:84:9c:c3:2d:58:9b:11:91:
f7:f4:3f:59:38:cb:33:0d:47:c5:96:25:43:2a:c0:
60:96:11:d5:f1:3a:bf:29:aa:b4:10:d6:43:9d:16:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:80:30:55:A9:3B:0D:94:82:6F:43:25:34:06:1E:D9:1F:2E:E8
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ca:57:8d:0f:dd:f3:9b:76:bc:f5:b5:9c:f5:7e:39:a2:39:
c4:04:ff:18:47:35:c0:fa:cb:d1:31:67:f8:15:bd:50:b0:81:
5c:0b:6a:cb:f2:ee:3e:07:f7:b9:e0:4e:14:ce:e5:7f:14:45:
ec:66:fd:59:fb:61:6e:c7:c2:57:d3:ec:98:1e:4e:54:e8:ca:
78:ba:bd:89:58:36:e4:1b:66:1f:a1:1a:37:df:17:35:3b:c4:
09:b0:4a:8d:ec:d7:cd:30:db:7c:8f:9e:5f:3a:3d:7f:2c:44:
80:03:dd:e1:a6:ee:b2:38:f7:4d:e8:2e:c1:f3:11:07:b0:11:
4a:5c:c7:62:bc:0a:7e:ed:a8:08:e2:7a:98:d8:00:1d:be:a7:
79:d6:e0:e3:2f:24:46:59:31:e5:82:a9:39:5f:19:34:6f:ec:
04:da:08:4f:1f:7e:01:84:8f:62:68:b8:4c:79:45:c7:5f:6c:
59:35:8e:91:76:d0:8a:18:ea:30:af:8e:2b:a3:59:9e:7b:54:
c2:22:a1:99:d3:ea:72:26:53:83:c9:ce:ea:05:6b:9a:84:f4:
b0:0b:77:b6:8f:fe:c3:96:67:1e:d2:b6:15:88:ff:25:09:d8:
55:94:49:d0:c3:95:1a:87:65:6b:a8:7a:fb:73:a1:92:aa:21:
cd:78:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:52:28 2026 by rpki-client