Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft
File: iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft (raw, json)
Hash identifier: t9yp5Um4J2Lsj0yaRn7/qmJhYYd97xD7X8vDtG5LFLI=
Subject key identifier: 23:48:E7:B8:F7:80:A8:DA:92:46:BC:4D:28:26:47:D9:ED:06:5C:17
Authority key identifier: 88:C3:FB:37:2E:D0:AC:C4:49:C4:2C:82:09:94:EE:96:CF:9D:9D:BE
Certificate issuer: /CN=88c3fb372ed0acc449c42c820994ee96cf9d9dbe
Certificate serial: 01A1C7447BA91E936C045579655E4D86F4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft
Manifest number: 61
Signing time: Tue 10 Nov 2026 21:01:56 +0000
Manifest this update: Tue 10 Nov 2026 21:01:56 +0000
Manifest next update: Wed 11 Nov 2026 21:01:56 +0000
Files and hashes: 1: iMP7Ny7QrMRJxCyCCZTuls-dnb4.crl (hash: 4bjedkAZbin0Td8dWEy7asUa76w6TNbP5zWm/61Xs3Y=)
2: sRnBSAYEX93NlYosZGi0uCLXAJw.roa (hash: c4n05IDKWg5BA6+5bhXnSqqXfpc/RLH7YbTBEH9x7GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:44:7b:a9:1e:93:6c:04:55:79:65:5e:4d:86:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c3fb372ed0acc449c42c820994ee96cf9d9dbe
Validity
Not Before: Nov 10 21:01:56 2026 GMT
Not After : Nov 11 21:01:56 2026 GMT
Subject: CN=2348e7b8f780a8da9246bc4d282647d9ed065c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:14:7b:ba:61:01:e8:63:74:1f:23:e9:2b:
d4:b7:fb:8b:c0:60:aa:24:b2:f3:4b:f6:9f:94:9b:
1e:24:ee:ad:4b:cd:5b:ac:7b:0a:35:c5:2c:d6:f9:
99:aa:15:f7:e2:27:33:57:a9:27:35:3b:d4:c0:2a:
09:e1:4d:33:39:43:8f:4e:65:f1:ab:57:3c:db:c7:
23:f5:41:7d:f3:70:e5:69:94:0e:ab:58:82:ef:5e:
83:22:ca:2f:b3:05:6d:17:f4:65:68:d8:79:1b:6c:
89:92:1d:c2:93:cd:d2:9c:5f:db:79:40:b5:76:21:
7e:7f:69:80:48:66:c9:66:e0:c6:ec:8a:d0:8b:0f:
05:d6:66:aa:dc:7a:cc:b5:8e:a7:2c:87:fa:7a:28:
b3:b3:a6:a0:b0:a8:5a:a3:35:77:47:e5:ac:38:e9:
f6:da:82:78:64:a1:fb:1e:82:30:f9:e8:15:bb:98:
59:43:76:75:dc:c9:f8:74:3c:7d:be:bf:34:1b:8a:
75:4c:82:11:66:f5:26:7a:cd:e4:cf:81:47:55:5d:
dc:d3:d9:ec:f3:11:5b:4f:d5:48:a2:5b:39:0f:6c:
cb:5f:46:b6:3d:61:33:23:94:2e:b0:dc:00:bf:c3:
fa:71:c0:24:ef:49:e9:b2:71:e2:60:6c:12:e4:41:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:E7:B8:F7:80:A8:DA:92:46:BC:4D:28:26:47:D9:ED:06:5C:17
X509v3 Authority Key Identifier:
keyid:88:C3:FB:37:2E:D0:AC:C4:49:C4:2C:82:09:94:EE:96:CF:9D:9D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ab:89:47:99:a0:17:38:0b:9f:24:7b:0a:29:52:96:07:6a:
4e:1d:58:12:07:73:41:31:15:18:68:11:47:66:e2:3e:5e:e1:
25:3f:1f:ec:27:c0:a4:b0:79:4b:f5:32:e0:14:b1:f6:d8:8b:
79:82:39:9c:e8:37:b7:d6:5d:2a:d9:95:c3:b8:e2:96:d5:60:
cc:2c:d9:75:da:3d:34:3c:d9:8a:8e:81:1b:18:1e:96:2b:a8:
b1:b2:14:0c:8d:83:43:e2:33:f8:e0:4d:13:bb:e6:d7:d1:44:
03:44:41:eb:69:a0:f0:38:da:e3:8e:ed:b8:a5:2d:4b:02:92:
b2:3e:9b:e5:31:8d:6b:f5:fa:95:43:21:6e:17:5e:b4:d1:0c:
2d:96:09:29:0a:77:9b:e7:af:f5:02:cb:fd:02:3a:6f:20:4a:
e4:2b:28:b6:a6:b1:c3:6b:2f:a6:98:90:4c:95:d0:f4:c5:80:
98:03:f7:2f:fd:a4:e3:97:1a:69:7f:7d:aa:7b:3b:4f:34:d0:
93:66:c5:f1:03:b8:28:97:52:0e:c6:ae:c5:b0:c6:6b:37:9b:
d3:35:2c:2c:ee:e5:cc:d3:d1:9d:00:e0:fa:35:39:d4:bc:ca:
83:a9:00:cf:cc:53:69:0a:0b:43:f9:61:0a:00:3f:3e:ab:e3:
58:a3:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:18:30 2026 by rpki-client