Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: FIqnfhRrhY+OuMC6dpfkIIANTfoZkXbM3FozEoOmW9c=
Subject key identifier: 49:9F:42:E9:1B:82:33:29:98:1F:02:65:55:9D:14:19:33:BB:FB:8F
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019D9DE3F1102AAFF78B8682291CA34D7DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 18C9
Signing time: Sat 18 Apr 2026 00:00:54 +0000
Manifest this update: Sat 18 Apr 2026 00:00:54 +0000
Manifest next update: Sun 19 Apr 2026 00:00:54 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: Xvm3G/RAIBB8dZ1dZYORaUlV0Ib/D8puqpfKGwl5KS0=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:f1:10:2a:af:f7:8b:86:82:29:1c:a3:4d:7d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Apr 18 00:00:54 2026 GMT
Not After : Apr 19 00:00:54 2026 GMT
Subject: CN=499f42e91b823329981f0265559d141933bbfb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:c0:ad:df:cd:31:13:30:f9:a2:13:22:b4:
5f:70:df:f6:67:de:e6:8c:f0:3f:b1:61:9c:07:fe:
31:37:7a:0b:42:e6:40:10:b3:1d:7a:a8:68:66:a2:
fa:ef:4b:56:fb:7b:6d:a0:76:8a:7d:55:7a:b1:d1:
89:b6:f5:8c:70:5e:ac:2c:5d:fc:b4:2e:46:44:96:
27:7e:1a:e5:be:cc:27:63:eb:1a:f1:9d:d9:79:b9:
2f:e7:e7:79:20:44:a4:21:cf:56:d5:1c:4c:af:e5:
8d:0e:ef:e5:1e:d8:79:51:79:8f:b5:62:a6:f6:ee:
33:75:50:42:87:70:41:c6:10:e6:a0:72:70:b2:7d:
b4:c5:ba:10:68:71:7d:47:ba:68:fe:7c:f4:d5:17:
b4:b6:a9:f8:2e:f8:09:ac:78:6f:0f:0a:67:db:85:
cf:d9:fe:08:91:e5:3c:84:6c:f3:96:a3:23:55:f6:
94:05:a2:7f:fd:4d:48:36:58:5a:0b:e6:9f:1c:0a:
ff:c3:30:90:49:19:9c:d0:ac:c6:f1:73:22:9d:2a:
e9:55:45:e6:43:47:51:6f:e1:b9:b8:82:79:9e:8f:
94:d9:1d:ce:7c:4f:f6:b9:24:01:54:6b:96:df:13:
83:68:e4:02:fd:df:47:76:ed:1f:6f:61:69:c5:f9:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:42:E9:1B:82:33:29:98:1F:02:65:55:9D:14:19:33:BB:FB:8F
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:a4:f9:3e:8b:12:52:d9:77:fe:c5:e6:a8:40:47:a5:f5:
e5:6d:ed:f9:e0:72:2d:47:d7:51:40:63:dd:bd:91:e9:de:44:
c3:8a:1d:d0:d4:05:83:e4:05:a7:7f:17:07:8a:32:c3:c5:88:
27:a4:f3:aa:85:de:77:c0:87:0a:0e:76:cf:00:bf:97:4c:51:
5e:72:84:d5:35:61:b2:fd:bd:b6:3b:67:15:93:de:66:3e:06:
4b:b1:e0:4f:92:30:88:4e:a6:bd:ea:31:52:b5:4f:7d:b0:30:
dc:f6:5e:e9:ee:30:1b:f6:fa:aa:12:d4:5b:49:7e:ca:21:b4:
d8:79:e0:40:46:1a:03:0b:41:f5:02:6b:41:45:f4:03:bb:20:
0b:e9:7b:d3:74:6d:9d:a9:ca:c6:08:53:c7:f6:7e:e3:7a:a6:
49:92:a3:42:2f:58:04:a0:0b:54:7b:75:e4:9e:bb:6f:86:50:
92:ca:49:9f:79:90:2f:20:97:d0:7c:85:a3:23:ea:a5:c2:43:
99:47:ca:ba:9d:4c:c7:76:d9:6f:37:e1:70:06:04:49:c8:91:
21:3c:9a:63:ec:8c:40:54:bd:9c:51:9d:fb:17:90:5a:92:8f:
0b:4f:4a:40:12:de:c2:20:7a:c3:35:c0:dc:57:66:9e:e8:7c:
3d:11:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:17:23 2026 by rpki-client