Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: 0e0KWvKfnHtL3e08V5rvaxSG/k7tHzWXpvs3WSIBxsE=
Subject key identifier: EA:D4:26:DC:12:52:2E:41:2B:79:33:1D:B2:4E:15:08:A1:88:26:02
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019DD019BC6FA40207448AC2AF3E45AF9742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 18:00:40 +0000
Manifest this update: Mon 27 Apr 2026 18:00:40 +0000
Manifest next update: Tue 28 Apr 2026 18:00:40 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: DjlMWX3wdEn6tuxo5x1tzX8qDn19AbrrAnmDWZhwqIc=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:bc:6f:a4:02:07:44:8a:c2:af:3e:45:af:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Apr 27 18:00:40 2026 GMT
Not After : Apr 28 18:00:40 2026 GMT
Subject: CN=ead426dc12522e412b79331db24e1508a1882602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:6b:c4:30:a2:b7:29:a7:ba:12:3d:6b:20:
18:4f:07:2d:df:fe:e2:51:66:17:fa:61:ed:2c:4f:
3b:a0:74:4d:c9:d2:97:61:85:c8:81:cb:53:98:08:
2f:4a:aa:18:34:40:e1:6e:56:b1:48:35:3d:af:ba:
af:70:cb:98:0d:59:eb:f5:07:64:bd:a3:e7:77:d9:
56:6b:18:a9:45:a7:16:34:67:a7:d5:bb:b3:d4:32:
f0:2a:4e:5d:9f:65:9b:7a:a6:02:ae:28:d7:80:4b:
0c:be:d8:a5:6f:8c:1a:61:09:71:cf:42:f7:45:cc:
15:e4:38:2d:e4:dd:4c:ba:9a:3f:29:8c:30:01:27:
a3:7e:97:73:72:89:68:d5:8a:4c:6e:82:53:2c:72:
b0:8f:eb:f5:ec:38:af:02:7b:e8:15:2a:2a:1a:77:
95:24:36:98:52:f9:82:e9:b6:b4:1c:fc:26:a2:cb:
43:9c:f3:da:bf:88:d6:60:7a:e8:d8:38:5b:7c:ed:
fd:d2:2b:9c:33:9d:32:ba:7f:bf:01:53:82:99:72:
9f:2f:fa:64:b0:a2:11:bd:86:29:cc:de:c5:07:0b:
f1:62:54:8e:82:3a:fd:43:e8:6e:e6:61:21:08:85:
f1:f4:1f:cd:64:d6:0b:b3:fa:c9:36:9f:ff:fb:a0:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:26:DC:12:52:2E:41:2B:79:33:1D:B2:4E:15:08:A1:88:26:02
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e0:17:95:59:0b:24:d1:17:b5:a9:e9:81:71:f3:ce:e8:1d:
f1:21:de:74:77:54:46:e6:93:ba:26:87:a6:9f:da:d3:43:f2:
8b:0a:47:8c:4c:da:61:4c:22:c8:bd:28:fd:ae:27:2b:48:01:
7d:2a:dd:80:9c:d9:bd:d8:6d:57:e4:25:4f:59:f3:98:81:c3:
c8:5b:7b:c9:ce:35:db:88:15:bc:7a:3b:9a:18:09:e6:7f:4a:
58:e1:b4:c7:44:a8:94:f2:5e:c5:24:1c:9d:2d:ea:94:4b:98:
56:9c:e2:5c:89:35:64:5b:bb:a5:bb:62:ff:82:86:d8:2d:a7:
95:bd:e2:fc:e6:ad:e4:13:ce:61:15:19:b2:52:3f:42:57:67:
1c:5c:0b:be:a4:30:21:d4:65:28:a1:70:b4:6c:f4:bb:11:25:
b3:5f:35:a5:df:58:8b:6d:07:c0:76:2a:b8:20:f5:74:c4:5c:
fc:fc:dc:af:f2:22:2c:49:23:af:f4:b7:ff:91:15:2c:69:d2:
a9:72:10:24:74:a4:e9:51:a6:a7:12:72:84:23:9b:10:91:2f:
e0:0b:c7:30:64:ad:dc:5e:e0:2e:3e:e8:39:80:89:27:e6:ff:
f7:50:86:4a:e7:af:f8:27:9b:ba:97:a4:e5:bf:39:e6:29:0a:
ad:80:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:06:18 2026 by rpki-client