Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: PeAex9uZ+Tu6Ap0c6uapnNZdWn5ut1vEXlI/te/mXaw=
Subject key identifier: A9:2D:FF:72:7C:00:22:F3:8B:B6:84:AE:47:85:E4:6A:F4:B8:98:81
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 01A08A1ECF7CF54108CFA42DB8A452EDC7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 07:01:10 +0000
Manifest this update: Thu 10 Sep 2026 07:01:10 +0000
Manifest next update: Fri 11 Sep 2026 07:01:10 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: VECNd8NdOpMbHuJWpuTndi95l3eNnNHAL/Sksx6DQP0=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:cf:7c:f5:41:08:cf:a4:2d:b8:a4:52:ed:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Sep 10 07:01:10 2026 GMT
Not After : Sep 11 07:01:10 2026 GMT
Subject: CN=a92dff727c0022f38bb684ae4785e46af4b89881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:31:5a:b1:7b:41:c5:f0:6c:96:e0:f9:f8:
7f:00:28:51:15:b2:5a:d4:13:42:2c:00:86:b7:5a:
a0:36:4f:e4:8c:c1:c8:2a:db:06:75:74:fe:eb:e2:
cc:3d:cb:a9:36:95:ba:ac:fb:0e:fb:dc:08:be:12:
29:57:95:23:7a:e5:c9:a7:0b:c5:cc:62:b3:3d:5c:
14:f5:07:62:bf:e3:05:ff:cf:40:15:a0:6e:9d:39:
34:fc:3d:78:99:23:52:2d:ca:e6:71:c8:64:a4:3a:
b9:fb:f7:47:a6:77:f2:d0:a8:1e:ad:06:8a:a4:e2:
25:01:61:5b:ef:15:dc:84:b7:ea:82:83:25:f9:f0:
f9:c7:03:14:db:39:cf:f9:0e:3a:1a:64:09:90:a3:
e5:5d:68:d9:65:ca:4e:fb:cf:42:55:9c:e3:c8:9b:
45:39:6a:e0:06:35:40:d6:56:03:04:2d:6d:b8:d4:
30:a4:19:ce:c8:c5:45:95:67:21:03:2d:3a:ef:80:
68:96:3c:b9:de:2e:d0:63:41:5c:b4:aa:9b:8f:34:
73:95:aa:21:14:21:83:87:13:11:e7:dd:f8:af:77:
82:e0:61:62:e9:07:7f:fa:9f:7f:f7:eb:e2:76:24:
e2:40:e4:9c:ec:f0:2b:d4:9d:5e:53:8a:28:8d:48:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:FF:72:7C:00:22:F3:8B:B6:84:AE:47:85:E4:6A:F4:B8:98:81
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:e2:d0:c8:53:6e:d8:78:ed:f8:07:2b:01:37:32:35:c1:
5e:23:be:d0:f7:6a:2c:b7:91:b6:32:1d:63:fa:18:b9:f3:d3:
13:a9:c8:65:ad:e4:ac:b3:4a:09:a2:2b:e0:2c:bd:af:b5:a4:
bf:06:15:50:5e:0c:2d:28:fa:6e:3d:e7:ae:fd:94:4d:c6:89:
c3:cc:18:2d:17:4b:b9:82:79:af:a2:53:eb:7b:5f:0b:13:4e:
95:39:2e:3c:20:62:15:64:ac:f0:2d:bc:d7:c1:4c:90:b3:8e:
3d:98:d2:4d:cb:2a:38:c7:cf:3e:f1:d6:86:7b:8b:b1:1d:84:
01:3f:55:fa:53:d9:18:43:27:0b:9c:84:c2:54:c9:12:9e:a3:
86:bf:c4:b8:47:2e:a0:8d:6d:31:21:e9:51:5f:78:bc:0b:61:
40:9a:3c:c7:7e:3a:24:dc:f5:3e:5b:e6:44:a5:79:95:3d:31:
c7:da:37:1c:e6:f6:be:d3:25:ed:12:26:26:48:7a:9d:ef:7d:
2d:b4:ae:ed:0f:77:03:be:9d:60:ae:45:0a:ec:0c:a4:e9:1e:
54:ea:3a:cd:02:09:c3:8b:e8:42:72:a5:06:b3:e5:44:96:bd:
b6:03:51:8c:76:e3:a7:08:17:6e:a0:5c:d0:49:78:39:ee:eb:
05:18:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:08 2026 by rpki-client