Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: oqLXAOnEfE5XcipGXsV+S/zlpSvgzd8rhydVZNzX34k=
Subject key identifier: DD:F0:86:64:68:93:73:5D:13:00:83:00:4E:6A:44:59:B3:37:CE:2A
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 019FA2CDF762146515EFEC5B33080FFAEF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 1715
Signing time: Mon 27 Jul 2026 09:00:34 +0000
Manifest this update: Mon 27 Jul 2026 09:00:34 +0000
Manifest next update: Tue 28 Jul 2026 09:00:34 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: 2uSgC3nFQw2ZrNVyxF6iO3EZr7pczBWki5gycz/fbAk=)
2: ImTLWt2g0cY7V35wRVv87mBniEg.roa (hash: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs=)
3: xsbeeqBrYcrCh1XkX_yalGrpwlg.roa (hash: C6xVrKshvFw2VHF914TCAq+YdHSq0Ozgs9as5bzKGhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:f7:62:14:65:15:ef:ec:5b:33:08:0f:fa:ef:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jul 27 09:00:34 2026 GMT
Not After : Jul 28 09:00:34 2026 GMT
Subject: CN=ddf086646893735d130083004e6a4459b337ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:8f:55:ac:6b:a7:59:ea:43:80:aa:cf:d0:
32:04:8d:f6:95:56:ef:d2:c2:04:94:a6:e3:ca:23:
2d:99:16:5f:bd:4e:be:49:a4:dd:17:30:30:66:e0:
70:57:36:4f:1a:a8:f4:c8:fb:23:dd:aa:84:e9:59:
c3:a8:ba:98:a0:8e:6a:c5:33:1d:eb:11:b0:9d:b2:
de:02:ab:69:f0:0c:d2:79:1b:69:80:c5:ac:38:b0:
b7:f9:69:a4:b0:ae:a7:43:cf:9c:55:83:65:1d:b4:
c4:45:bb:b0:87:e9:62:1f:ee:a4:10:26:ed:e0:ae:
68:21:a1:ce:f4:ac:0b:64:c6:27:51:4b:46:e4:20:
80:75:1a:89:9c:e7:34:f9:ce:3a:87:e8:7a:7a:12:
a0:a0:6e:7c:64:04:a9:52:a4:8b:27:75:5c:1b:a0:
52:03:39:8b:68:7f:48:73:4a:ad:4f:81:cd:0c:7a:
05:c8:c0:69:66:92:de:21:83:4c:aa:f5:bb:70:e5:
0c:cb:10:0c:77:5b:7a:5a:db:a6:34:0e:47:8c:29:
13:67:2b:85:b7:db:28:f8:ec:4e:2e:ad:27:63:0a:
0e:84:fd:99:9b:48:54:3c:05:fe:f2:99:b4:ea:d1:
d5:59:9e:b9:65:f0:34:fa:2d:b8:8b:db:b6:7c:a9:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:86:64:68:93:73:5D:13:00:83:00:4E:6A:44:59:B3:37:CE:2A
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d1:e9:70:58:cd:0f:39:3d:b6:13:b0:00:f3:6d:12:cd:7a:
c4:83:50:f6:e4:8e:43:57:0c:22:e3:c0:ec:2b:00:ae:f3:23:
22:cb:35:18:6d:23:6b:43:78:1a:3a:8f:fb:5a:7e:8e:d6:86:
8e:ab:01:45:44:ba:aa:00:32:69:55:c6:d6:f8:cb:d0:9e:10:
b0:d2:2d:bb:c6:be:6b:85:5a:cd:76:71:d5:64:17:35:8e:fc:
d0:ed:ff:a5:26:7e:a3:4f:d1:d3:37:d4:28:54:9a:65:c4:0a:
06:44:5a:bc:02:d1:d5:3e:be:3e:fb:36:2a:67:a1:ff:ec:c4:
df:39:42:3c:fe:36:3d:f2:07:47:54:c1:eb:3b:0b:f0:a6:73:
f8:de:6d:49:81:39:79:ab:17:07:bf:99:f2:21:ff:44:3e:75:
de:7f:1d:46:ed:44:28:05:65:2f:cb:bb:68:a5:c7:de:a8:13:
74:8b:43:6e:7c:6a:22:48:8d:39:3d:16:61:d4:3d:33:4e:61:
fe:2e:17:f9:c7:d0:8f:b5:ac:c2:39:55:42:0b:53:34:dd:36:
62:3a:7a:14:f9:6a:f4:f1:99:c1:2d:0a:1e:75:c1:7d:79:52:
31:cf:ee:36:5d:17:9e:c5:e0:b4:e6:91:6b:b4:3a:e8:21:62:
77:1a:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:32:56 2026 by rpki-client