Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: RWc23XTYJf0OdVUAkkK8Vc/GyM+zvm/7Mp96W8Vx9ic=
Subject key identifier: 8B:2C:27:BF:40:57:D0:93:0C:FB:D0:B4:91:F6:C7:6D:4B:3F:5D:E1
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01A17DE0CC1257048726BE74897CA6E32059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 180B
Signing time: Tue 27 Oct 2026 15:00:46 +0000
Manifest this update: Tue 27 Oct 2026 15:00:46 +0000
Manifest next update: Wed 28 Oct 2026 15:00:46 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: THiO/F9ioi6Ucy2btWWhG19ASYr4muUqTT9kUwxJU6s=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e0:cc:12:57:04:87:26:be:74:89:7c:a6:e3:20:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Oct 27 15:00:46 2026 GMT
Not After : Oct 28 15:00:46 2026 GMT
Subject: CN=8b2c27bf4057d0930cfbd0b491f6c76d4b3f5de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:ee:36:33:12:6d:ca:1f:22:e4:22:82:63:
6e:08:a5:da:f1:c5:b4:8f:a5:9b:9a:0f:98:3f:d4:
b1:2a:63:68:5d:01:64:ba:66:41:85:72:e7:2f:2f:
e4:5e:b8:e4:3c:aa:07:04:80:c2:36:f1:84:89:c1:
f2:de:69:52:f4:6a:e8:76:5f:c2:33:ad:8d:4d:d7:
4f:26:da:01:95:e2:4e:ff:e3:5b:88:49:86:73:ed:
e2:c1:36:8f:39:6f:99:37:09:6d:d6:2e:c0:87:ec:
43:6e:e4:00:7e:ad:76:c1:fb:f1:cb:86:ff:18:11:
e5:c6:1f:4a:fe:78:e8:ea:02:5b:c4:0c:4f:03:16:
1c:de:9d:f6:0a:c0:7b:9c:c6:82:8d:82:bf:53:f7:
b2:72:73:07:d6:86:27:06:d0:b2:bb:7f:b9:41:51:
fb:fa:97:49:bc:9f:36:f3:b0:e1:bd:26:60:bf:42:
24:16:9c:45:68:7d:14:62:91:d2:38:f6:c5:10:08:
6a:3f:d9:c9:21:b2:ab:6f:4b:a6:d0:a8:1f:a4:46:
2d:7a:3d:6a:dd:84:26:4e:e0:15:19:8a:6e:61:f5:
ff:b5:68:84:63:5d:b2:9e:bb:b7:38:0a:c6:a0:17:
c7:c4:ae:07:4f:f6:1e:45:2b:3e:77:81:f6:4f:81:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:27:BF:40:57:D0:93:0C:FB:D0:B4:91:F6:C7:6D:4B:3F:5D:E1
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0e:98:ff:58:b6:2d:c2:4a:7f:21:cb:a5:47:35:52:a9:ec:
2f:45:3b:27:7f:6f:d5:fd:09:21:4f:91:22:c9:3f:64:00:bf:
3b:82:ff:12:61:ab:96:30:a2:97:b2:64:29:93:4e:a7:f9:82:
6b:cd:f2:3e:30:50:9d:dc:ef:d9:6f:95:01:b7:c1:92:23:31:
06:e7:77:9b:f8:a9:a6:e4:f5:d7:ae:56:d2:e5:49:5d:31:98:
2b:cf:75:e8:5b:d5:04:f1:a2:b1:bb:89:f9:36:45:e7:cc:2d:
0f:da:70:7d:b1:62:0c:ac:4f:7a:32:a8:fb:f3:1a:0f:81:8d:
54:fb:81:6c:f6:46:19:21:1e:be:0b:31:ae:1d:a2:85:d5:48:
aa:12:d2:d3:a4:84:de:ca:e1:9c:b7:56:72:50:53:4a:a3:76:
19:bd:5e:cb:54:36:d3:37:95:1b:d1:ce:b3:a1:17:b5:ef:dc:
86:f8:fb:63:30:09:3f:ab:f1:4e:0e:a5:74:2a:b0:c2:06:f8:
17:02:a4:e0:6c:1e:92:99:a7:4e:9c:4b:e5:eb:0f:8a:60:21:
cb:43:51:f2:7e:14:23:2c:e8:8d:97:11:29:1d:2b:bb:af:3f:
66:96:9a:b5:e1:4a:b4:3a:36:62:e4:68:cc:b4:c6:17:56:ac:
1b:1a:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:09:54 2026 by rpki-client