Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: hejQT6su/3rCZgrrLkzT05/B67nUTJayfyp2EZxK8LU=
Subject key identifier: 94:5A:03:63:8C:95:E5:D1:F5:5B:8B:A5:C2:08:F2:55:19:90:05:91
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019CE66D0C361C6CA4D2C902B28C8E1BD2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 09:00:32 +0000
Manifest this update: Fri 13 Mar 2026 09:00:32 +0000
Manifest next update: Sat 14 Mar 2026 09:00:32 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: BdKIbpWruVtHB3S0vaA+AlmH1rbBYGOEKxrD++L/n0c=)
2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:0c:36:1c:6c:a4:d2:c9:02:b2:8c:8e:1b:d2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Mar 13 09:00:32 2026 GMT
Not After : Mar 14 09:00:32 2026 GMT
Subject: CN=945a03638c95e5d1f55b8ba5c208f25519900591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:a6:f3:4c:10:5e:0c:10:d7:14:cf:48:23:
dd:f0:a7:39:38:66:6b:c8:85:43:57:fa:df:3a:e4:
1c:e2:7e:f3:18:75:ad:f3:e3:50:11:25:ed:ef:30:
ee:19:72:a0:fa:2a:ca:ae:cd:6c:22:c9:f5:ef:f1:
9f:e3:e2:af:31:13:2a:8a:a8:a9:bb:7e:c9:f2:7a:
41:45:0c:aa:7c:89:6b:9c:fb:a1:3e:6c:c2:f6:fb:
e8:c1:6d:a1:00:48:5d:ef:18:50:a1:a6:cb:7f:a7:
7d:76:6d:d8:eb:3c:c1:5d:b8:35:c0:31:8d:2c:d0:
37:6b:d9:5d:57:9d:fe:9e:af:fc:0f:00:93:c0:41:
93:33:fa:2b:68:87:ef:79:2b:b7:63:0b:d0:ee:89:
ee:5e:1f:eb:e0:b8:4c:6c:34:50:85:e2:47:c3:5a:
aa:b7:5d:af:e6:13:cf:18:77:1c:a4:f8:b9:c2:e5:
27:04:e2:42:ba:38:52:f6:0f:81:3e:20:37:ea:cd:
76:b4:d4:2d:6e:a8:bb:5a:0a:04:dc:3b:89:60:55:
70:57:9f:a5:b1:b9:cf:de:7a:36:ea:dd:1d:d8:0c:
47:8f:12:02:71:67:83:f2:62:51:b6:b5:c4:4b:75:
05:73:3c:80:3a:ca:40:90:01:90:9f:54:71:7b:0b:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:03:63:8C:95:E5:D1:F5:5B:8B:A5:C2:08:F2:55:19:90:05:91
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:c0:66:e1:3b:f6:10:b0:7c:e5:89:61:4a:df:62:93:a1:
50:2b:26:26:85:e7:f7:27:15:96:c8:42:ec:c6:50:49:61:15:
92:a5:1a:b5:2d:ad:eb:68:ce:6d:2d:36:c9:d6:9c:18:54:0e:
df:c3:7b:f0:0e:b3:72:6d:4d:ed:0a:5b:5e:d0:f8:74:63:f7:
60:5a:3e:da:5a:82:3f:f0:f0:74:e8:b1:a2:76:02:ea:53:4e:
cd:48:a3:ab:8a:ec:60:cf:87:25:86:15:a1:ef:ef:fb:26:4b:
d5:35:90:7c:60:78:48:ac:1a:a4:1a:db:6b:fa:03:a4:6e:9f:
d4:c9:bd:e3:76:98:a1:58:21:4f:db:4e:47:74:db:35:5b:03:
5e:4d:2c:bb:24:da:39:0e:6a:03:40:e4:6a:15:a6:3c:0e:ca:
8f:ca:b1:70:97:30:5c:0c:51:2e:0e:93:95:48:14:7c:1e:d9:
59:4d:ed:17:58:a9:3f:ff:5b:3f:b5:c5:09:f4:d5:5d:c2:60:
1e:25:24:bb:18:e1:0c:16:fa:2e:2d:d2:f0:7c:75:cd:cc:86:
f8:24:79:fd:6d:e3:13:19:a2:3b:7c:a7:ae:ae:db:79:b0:73:
80:12:fc:66:db:60:26:89:19:94:e3:65:3d:11:24:1e:77:b2:
46:0a:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:26:54 2026 by rpki-client