Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: /jXAX3bhqe7fj0jmefO+eILJojfaDGe62pNgdN09jnQ=
Subject key identifier: 41:0B:32:8B:F2:3F:37:C6:3D:99:4C:69:A6:B0:12:F8:7A:FE:18:B8
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019FFA5B980A819EBE8A2970290DBA88BA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1A02
Signing time: Thu 13 Aug 2026 09:02:14 +0000
Manifest this update: Thu 13 Aug 2026 09:02:14 +0000
Manifest next update: Fri 14 Aug 2026 09:02:14 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: ZCnGBJLX87dXKQdTSFbVvG91lQUwS+GnR+69OsF1CiU=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5b:98:0a:81:9e:be:8a:29:70:29:0d:ba:88:ba:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Aug 13 09:02:14 2026 GMT
Not After : Aug 14 09:02:14 2026 GMT
Subject: CN=410b328bf23f37c63d994c69a6b012f87afe18b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:61:52:d9:ce:3c:25:3c:a5:6d:cf:94:39:
95:55:15:3d:85:d7:65:80:9c:77:df:ff:80:5e:24:
a5:4d:12:2e:09:28:12:b3:9c:48:8d:a5:eb:22:ef:
e2:66:fb:83:75:cf:22:2c:1d:3b:ca:21:54:80:98:
2a:3b:1f:46:04:b0:ef:81:a7:96:02:9a:a5:bb:63:
5f:47:81:dd:9b:2c:ba:a0:81:73:65:6c:84:47:67:
d4:fd:dc:30:1f:38:ac:fd:a2:85:5d:69:03:43:81:
46:55:ab:33:93:34:f8:a2:5a:af:dc:fb:21:22:86:
10:fa:ab:60:d3:d8:ed:a9:34:56:5e:c3:c4:03:bb:
0a:94:f0:4b:b4:f6:e8:ae:26:db:ce:0c:38:dd:29:
34:99:69:c0:00:82:d0:63:cd:ce:e8:2b:e2:66:bd:
36:57:18:8e:20:7e:ae:56:d7:00:f9:f5:e5:fa:f6:
a5:53:f2:d5:e5:d1:90:71:0c:5c:f9:04:75:87:90:
e1:78:1c:e6:2d:61:88:ae:70:d8:6d:99:a0:3f:dd:
b2:d8:c7:e1:b4:cd:52:f6:76:82:41:b1:38:f3:19:
bb:a9:9e:8f:b5:09:c3:6a:75:eb:b0:6a:54:bc:10:
52:31:10:c9:2b:0d:fb:63:fb:0c:f8:0f:dc:ba:27:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:32:8B:F2:3F:37:C6:3D:99:4C:69:A6:B0:12:F8:7A:FE:18:B8
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:24:ac:8b:dc:76:41:f4:6c:fd:e0:d6:ac:a9:37:3c:d5:
37:95:98:d9:33:75:80:65:7a:d7:1e:bf:19:3f:4b:b3:66:aa:
8e:25:2f:75:8b:f0:1c:f9:f5:0a:f2:40:a4:e3:d5:eb:2f:e0:
bf:bf:9c:bc:36:c5:d0:e9:be:2d:ee:8b:8b:41:65:44:25:24:
27:98:52:84:af:3f:24:81:96:fd:f6:1d:7f:ac:ab:3a:91:32:
a5:cb:d2:33:bd:7e:6f:a8:89:66:b1:5f:a2:bd:1a:f6:66:66:
1f:d2:e5:f5:52:95:91:5a:ae:b2:07:5a:68:ff:ca:14:3b:30:
66:fb:d5:3f:7b:5d:28:db:eb:19:8e:51:7c:f2:c2:7e:41:20:
0d:57:9b:8c:11:c1:8d:01:f5:30:39:b5:58:b6:c5:44:6e:e7:
a1:49:ca:7d:af:90:09:bd:28:78:f9:cd:0b:1d:b5:cd:db:79:
7f:e8:21:6a:eb:08:49:5e:86:32:15:bf:a8:3b:b1:37:0e:03:
07:8f:3e:96:08:27:40:19:28:86:e8:1d:a2:b7:8a:a0:3c:e2:
8a:b8:6b:76:89:ed:39:4f:de:7e:92:f9:bf:7f:c8:c2:5f:cc:
af:a2:0d:b9:4a:5a:6f:b5:ba:9c:d8:f3:c6:31:c4:c8:0a:ce:
ee:f6:cc:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6W5gKgZ6+iilwKQ26iLoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjYwODEzMDkwMjE0WhcNMjYwODE0MDkwMjE0WjAzMTEwLwYDVQQD
Eyg0MTBiMzI4YmYyM2YzN2M2M2Q5OTRjNjlhNmIwMTJmODdhZmUxOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWBhUtnOPCU8pW3PlDmVVRU9hddl
gJx33/+AXiSlTRIuCSgSs5xIjaXrIu/iZvuDdc8iLB07yiFUgJgqOx9GBLDvgaeW
Apqlu2NfR4Hdmyy6oIFzZWyER2fU/dwwHzis/aKFXWkDQ4FGVaszkzT4olqv3Psh
IoYQ+qtg09jtqTRWXsPEA7sKlPBLtPboribbzgw43Sk0mWnAAILQY83O6CviZr02
VxiOIH6uVtcA+fXl+valU/LV5dGQcQxc+QR1h5DheBzmLWGIrnDYbZmgP92y2Mfh
tM1S9naCQbE48xm7qZ6PtQnDanXrsGpUvBBSMRDJKw37Y/sM+A/cuidNjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEELMovyPzfGPZlMaaawEvh6/hi4MB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9QkrIvc
dkH0bP3g1qypNzzVN5WY2TN1gGV61x6/GT9Ls2aqjiUvdYvwHPn1CvJApOPV6y/g
v7+cvDbF0Om+Le6Li0FlRCUkJ5hShK8/JIGW/fYdf6yrOpEypcvSM71+b6iJZrFf
or0a9mZmH9Ll9VKVkVqusgdaaP/KFDswZvvVP3tdKNvrGY5RfPLCfkEgDVebjBHB
jQH1MDm1WLbFRG7noUnKfa+QCb0oePnNCx21zdt5f+ghausISV6GMhW/qDuxNw4D
B48+lggnQBkohugdoreKoDziirhrdontOU/efpL5v3/Iwl/Mr6INuUpab7W6nNjz
xjHEyArO7vbMbg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 17:30:23 2026 by rpki-client