Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: mTQ92AbrOaWZnyv47hfO8b2oX5BITBKFqTN/4Q8Q2AE=
Subject key identifier: 99:EC:2D:26:52:B2:58:1D:29:60:B4:A9:93:A9:2E:1E:5B:78:90:C0
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01A14873533B71A2FF3E86FB4E92B411FA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 06:01:19 +0000
Manifest this update: Sat 17 Oct 2026 06:01:19 +0000
Manifest next update: Sun 18 Oct 2026 06:01:19 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: NAvO8zKmrfQQqf3mhO4Xkp8Poo5ZnolU6fGeNv3HwVc=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:53:3b:71:a2:ff:3e:86:fb:4e:92:b4:11:fa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Oct 17 06:01:19 2026 GMT
Not After : Oct 18 06:01:19 2026 GMT
Subject: CN=99ec2d2652b2581d2960b4a993a92e1e5b7890c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:ed:0e:f9:d5:e2:e0:cb:27:ea:67:8f:10:
2b:e8:6f:1c:fa:53:e0:e5:4c:73:35:9f:05:08:0f:
34:97:1a:21:96:b0:88:bc:dc:77:fd:a5:94:b3:90:
4c:0e:43:64:fe:28:07:6a:98:9c:20:f4:82:4d:0f:
c5:3e:e1:45:b6:15:6b:74:4c:2a:41:dc:35:8a:fa:
b6:05:1b:06:67:86:e0:03:03:5c:4c:e2:98:ea:d0:
0d:ef:ee:53:70:63:fe:08:b7:db:92:cb:ec:6b:b1:
f1:38:b3:db:47:18:89:a5:28:f4:b6:89:ef:12:49:
a0:dc:e7:9f:69:f5:f4:95:e5:92:d5:7f:87:53:a0:
29:c0:3f:5a:9c:5d:79:4a:60:40:fb:39:c1:56:cb:
39:c1:9c:7d:be:06:6f:96:7d:23:2e:81:e8:7e:a1:
2b:66:67:d0:3e:81:2f:15:bd:97:8a:ad:df:5a:a1:
4d:d4:25:e7:f3:b6:61:f3:5a:0e:d3:e6:14:86:de:
f5:bf:62:05:81:32:ce:f7:2b:24:a9:a4:68:43:8e:
a4:77:5f:cc:d8:78:75:9f:c8:7f:8b:d2:af:34:d4:
89:9f:2f:23:a6:9c:bd:c5:9a:5c:5d:92:c5:7f:30:
c2:b5:50:79:ad:91:76:53:d1:53:58:7c:f0:b4:d3:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:2D:26:52:B2:58:1D:29:60:B4:A9:93:A9:2E:1E:5B:78:90:C0
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4c:45:ac:53:ae:a4:f8:0b:10:fb:e8:91:52:6a:b9:80:2f:
f3:08:5d:da:89:28:f1:8e:b2:43:b8:65:40:05:42:75:e1:49:
50:20:77:e6:25:86:54:08:3c:47:62:31:7b:d1:38:59:04:ba:
c1:7f:e3:e6:cd:32:6d:bd:aa:69:cd:0f:6e:8d:a1:aa:b6:75:
9f:83:70:cf:6b:96:53:d6:15:fe:99:c5:d0:da:85:ae:c4:43:
f6:14:53:37:ab:1d:55:fd:70:f7:d2:b4:c9:dd:ba:4f:a5:8c:
ef:b0:cf:ec:63:1a:9e:b7:eb:6f:55:a4:6c:2f:eb:13:e4:02:
be:f6:84:73:c2:8c:1b:73:8a:53:d8:ce:eb:78:a3:6f:9c:e5:
35:66:0a:bb:90:23:c5:6b:be:c5:e9:13:b3:8d:4e:12:bc:79:
56:59:c4:c6:52:66:f1:4b:c4:0b:5e:68:d1:54:df:29:be:6f:
73:df:14:7d:77:41:6e:21:bf:5b:23:4e:f2:a6:97:81:c4:ca:
dc:ff:93:eb:14:3e:de:27:c7:d8:8b:97:51:74:28:42:80:7b:
d4:40:8b:9a:5c:eb:75:fd:1f:f7:d1:dd:f3:37:cd:95:47:93:
66:f5:af:ea:33:74:74:db:2d:ae:d4:25:4d:f3:4b:47:e1:44:
68:44:af:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIc1M7caL/Pob7TpK0EfpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjYxMDE3MDYwMTE5WhcNMjYxMDE4MDYwMTE5WjAzMTEwLwYDVQQD
Eyg5OWVjMmQyNjUyYjI1ODFkMjk2MGI0YTk5M2E5MmUxZTViNzg5MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKftDvnV4uDLJ+pnjxAr6G8c+lPg
5UxzNZ8FCA80lxohlrCIvNx3/aWUs5BMDkNk/igHapicIPSCTQ/FPuFFthVrdEwq
Qdw1ivq2BRsGZ4bgAwNcTOKY6tAN7+5TcGP+CLfbksvsa7HxOLPbRxiJpSj0tonv
Ekmg3OefafX0leWS1X+HU6ApwD9anF15SmBA+znBVss5wZx9vgZvln0jLoHofqEr
ZmfQPoEvFb2Xiq3fWqFN1CXn87Zh81oO0+YUht71v2IFgTLO9yskqaRoQ46kd1/M
2Hh1n8h/i9KvNNSJny8jppy9xZpcXZLFfzDCtVB5rZF2U9FTWHzwtNPxZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnsLSZSslgdKWC0qZOpLh5beJDAMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkExFrFOu
pPgLEPvokVJquYAv8whd2oko8Y6yQ7hlQAVCdeFJUCB35iWGVAg8R2Ixe9E4WQS6
wX/j5s0ybb2qac0Pbo2hqrZ1n4Nwz2uWU9YV/pnF0NqFrsRD9hRTN6sdVf1w99K0
yd26T6WM77DP7GManrfrb1WkbC/rE+QCvvaEc8KMG3OKU9jO63ijb5zlNWYKu5Aj
xWu+xekTs41OErx5VlnExlJm8UvEC15o0VTfKb5vc98UfXdBbiG/WyNO8qaXgcTK
3P+T6xQ+3ifH2IuXUXQoQoB71ECLmlzrdf0f99Hd8zfNlUeTZvWv6jN0dNstrtQl
TfNLR+FEaESvSA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:59:42 2026 by rpki-client