Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: KlZH2EPdS5wRXqIlBskZndtqX/BluPYFKAtsZTuMRoc=
Subject key identifier: FE:A7:7E:18:C8:CA:07:94:C9:30:E7:E7:BA:AC:A7:36:CB:85:DC:D4
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 019A7226269D3824D65DFDE556A3E7B4DF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 0A3F
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: x8UI7QEa0Wd1p2OV1oHQkHRBOwkatcS5czvhhuqIS1Q=)
2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:26:9d:38:24:d6:5d:fd:e5:56:a3:e7:b4:df:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=fea77e18c8ca0794c930e7e7baaca736cb85dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:ad:bb:8b:e1:7e:fe:27:51:cd:0a:12:0f:
d6:1c:d1:81:e9:e9:ed:27:e4:0d:7d:59:c8:75:78:
67:c3:d7:21:f0:86:35:3b:5a:01:7b:7e:39:bb:53:
3c:0a:eb:51:3d:c2:cd:e8:c7:74:eb:26:0c:24:9c:
86:19:bb:a9:29:67:b9:4b:82:94:c7:a3:fc:7d:9d:
2e:d2:78:a4:6e:f5:1e:be:f3:5f:35:bb:20:62:1d:
71:84:2d:7a:cd:29:af:72:aa:23:b0:86:03:b9:23:
48:a3:78:8e:da:7f:e6:c9:b1:98:bb:7c:79:e0:1a:
b8:01:6e:df:f1:fb:c2:83:44:06:4a:bf:65:a6:7c:
42:e0:e3:51:e1:41:d1:73:aa:07:9e:32:38:2b:99:
50:82:2d:fc:44:0a:fe:9b:f3:73:4b:88:54:24:4d:
52:03:90:79:8c:05:f6:22:0d:cb:6d:95:bc:e2:e8:
d5:c5:79:0b:81:59:91:6d:73:a1:9f:4f:47:66:13:
21:7d:b7:9b:f3:e4:8a:b6:b3:bd:be:3e:e6:b6:a8:
87:12:45:cd:f3:96:c4:58:8b:21:98:23:7b:bf:1f:
09:38:bc:a8:ff:a8:ba:54:ca:b3:35:62:77:99:f0:
c2:ce:9f:81:19:93:15:5d:c0:1c:e3:9a:f4:d2:3d:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:7E:18:C8:CA:07:94:C9:30:E7:E7:BA:AC:A7:36:CB:85:DC:D4
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:5d:21:f9:0e:a8:c0:8b:d4:6a:9a:ae:7c:c6:bb:05:c1:
93:e4:46:35:63:30:97:53:98:85:f5:65:d8:00:8c:6b:eb:d8:
12:58:b6:14:70:3d:d5:a5:8e:6d:8c:fb:77:2e:ae:92:08:a4:
9a:20:7a:86:c9:b1:c0:90:1e:5b:25:52:10:c6:76:18:92:75:
35:cf:93:5a:94:4d:bc:e1:4e:f4:d5:0e:d5:9f:be:9f:b5:bd:
43:75:6c:a5:38:2e:72:e0:f5:4a:aa:76:a7:1a:75:3f:0c:1e:
8d:67:b2:6e:75:8d:e1:ba:5a:b0:57:2b:2d:b0:29:40:89:16:
c9:9f:5e:ce:75:18:cc:ae:1a:e0:cb:51:69:77:50:34:ff:7d:
d0:38:38:67:d5:d4:e2:23:3c:ff:75:f1:35:b0:4e:70:dc:22:
ae:02:42:13:ce:f6:f6:e1:5a:16:4d:f6:c4:8c:cb:c0:da:2d:
c7:3d:5c:54:ad:5f:9b:3b:2a:66:37:a9:ae:48:91:89:02:2f:
65:f6:1e:ff:e9:20:63:2a:08:e9:79:db:4a:42:00:02:0e:c7:
0c:9f:98:90:42:51:a5:c4:f6:12:21:a3:74:7d:c2:90:ea:cf:
29:f6:25:c5:0c:d5:42:c1:4a:2a:41:b2:06:70:cb:bb:33:8e:
cf:3a:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:15 2025 by rpki-client