Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: ypbC21Gl7f9tW19m1ut7sDY7wl5e+G1KEtohiCqwRDU=
Subject key identifier: 14:B9:3A:D1:C9:3F:D2:3B:BC:F9:96:6B:FB:EB:99:6D:C1:D3:C5:4D
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 01A18909A1D28859FC66218241D4BF409D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 19:01:12 +0000
Manifest this update: Thu 29 Oct 2026 19:01:12 +0000
Manifest next update: Fri 30 Oct 2026 19:01:12 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: /pTcpe4+djLRLWwhq12VmqsOWH7qlAwt1dwv3V5zy88=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:a1:d2:88:59:fc:66:21:82:41:d4:bf:40:9d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Oct 29 19:01:12 2026 GMT
Not After : Oct 30 19:01:12 2026 GMT
Subject: CN=14b93ad1c93fd23bbcf9966bfbeb996dc1d3c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:9d:94:37:f0:87:27:ab:17:c3:47:c7:ac:
af:ac:e5:dd:59:ef:9f:62:49:04:20:c5:9c:b4:a4:
ea:cd:1b:83:81:bf:44:49:c8:ae:81:05:39:b7:62:
6b:56:ef:dd:ad:76:0c:4e:96:49:7c:c1:ef:fd:1a:
18:e5:38:db:31:69:0b:fc:fb:ed:d9:a0:8b:71:18:
51:63:49:06:56:ea:4e:e2:4e:c7:c3:a4:61:a7:ea:
43:68:00:05:75:fd:cf:48:be:39:99:8a:d1:f9:31:
1f:45:21:05:ce:15:33:03:66:a0:7b:25:cb:ed:7d:
e5:40:4b:0b:da:c5:e3:72:ca:05:4a:5c:96:9d:68:
9c:92:8f:83:98:23:b7:8b:80:db:f5:48:54:8e:21:
ca:61:f8:73:b2:65:7b:44:34:bb:bc:92:07:7b:5d:
89:f5:31:aa:55:a4:54:4e:1e:f3:3b:f8:b5:7d:70:
30:3a:2b:f2:5e:9f:bd:5a:80:0b:ea:1b:80:38:dd:
bc:37:91:c7:05:b7:4e:85:4f:ae:43:9d:65:f8:de:
e9:6e:d5:f8:05:6f:6e:9c:99:77:ec:86:cc:1d:12:
73:94:de:20:65:81:17:05:b8:ee:e2:88:69:b7:d7:
81:8b:ed:b8:be:a9:19:28:ce:c1:7a:0c:0a:02:96:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B9:3A:D1:C9:3F:D2:3B:BC:F9:96:6B:FB:EB:99:6D:C1:D3:C5:4D
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e6:e9:fb:18:9d:ae:6f:4c:5b:7e:73:a3:3e:8c:de:a6:a4:
16:db:51:bd:c2:b4:fd:55:a2:5c:50:87:94:16:67:4c:8d:67:
ee:af:ee:97:6d:49:89:c6:fe:74:f6:0e:ca:a4:79:34:91:04:
40:15:23:be:50:f3:d1:c2:1d:e5:bc:a2:2b:71:7f:4d:d4:46:
4a:c3:82:22:51:bb:49:15:de:5c:be:b2:b3:f3:6b:ad:83:b1:
bc:88:af:48:1b:4d:36:8e:d4:88:43:74:15:fd:e1:30:c0:ae:
ed:fa:4a:e7:59:2a:f4:ca:3c:47:9e:42:e7:60:d4:b3:be:d8:
92:80:60:bb:0f:f9:b6:d4:28:cb:92:e9:39:df:1a:a2:f6:6f:
87:bf:ac:b4:3f:4f:68:a9:a7:16:2e:71:6e:6a:5c:2b:46:22:
94:3a:b7:a8:7f:d1:ea:16:91:2f:36:1e:20:82:a1:a0:eb:25:
40:4a:b3:d5:35:f0:81:90:50:b2:5e:e4:42:15:48:60:f4:4b:
30:37:e8:55:80:91:d4:b5:79:b9:3f:89:15:04:b3:95:6b:7b:
1d:c2:5e:e0:d4:94:ed:f2:49:0e:d9:40:8e:97:86:18:55:02:
33:3c:fc:65:de:c9:a4:c2:ec:e6:42:45:41:ff:11:74:91:35:
cd:bf:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:22 2026 by rpki-client