Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: 0aTAjkxP5Tug2PKGDzafQFmTTeg+3YsjesK7k/tYrrk=
Subject key identifier: E1:84:4D:8E:24:06:60:6B:96:58:B7:33:05:DD:35:FE:7F:DA:AA:88
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019D382E65F888C0F7DDC5FE5F02027294A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 15C3
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: 8xt8DevzL-rg7wfVKxc8RMN1Als.roa (hash: ylbk4AOnelYjCsDvJ4Axlet8bBci4BQF/dtfQYZ149Q=)
2: IMotTLPla10plwqX_GResv1odqE.crl (hash: HmWYn+iRPnwgVCzuUkeDuekMzV4Ty2PsaSqK0pmp7Vc=)
3: jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa (hash: rcVg4MFo6BBLpVaNgO5+LIgDyJsxyuxnJwO/3OO9u5A=)
4: jW2Kd8f2Y-5PTueI923nik1n0Jw.roa (hash: /La4N20ywy5Sq3GPdObU0wHV90I37vBf0FTBSDxouTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:65:f8:88:c0:f7:dd:c5:fe:5f:02:02:72:94:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=e1844d8e2406606b9658b73305dd35fe7fdaaa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:0b:ce:d0:36:48:38:de:2c:fd:0b:97:50:
97:b3:ea:e1:a2:09:8b:ac:9a:1b:8e:22:65:90:de:
bc:9f:d9:0b:3c:52:e9:bc:7f:77:f6:45:3e:43:90:
3f:29:0c:b8:62:39:00:49:40:5d:39:ed:5e:c1:1c:
f0:fa:aa:ab:27:02:0d:a4:24:9f:35:f8:d4:ff:68:
f5:df:bf:2c:ae:d0:d0:10:5f:04:a6:7e:0a:53:8d:
ed:64:c2:f4:1b:4a:18:7c:6c:8a:9d:24:37:71:44:
ee:08:bb:47:79:f0:1e:47:55:7d:3e:49:1c:0f:b8:
b0:b2:c9:0e:ec:20:dc:d2:84:ef:76:76:e9:b7:0e:
95:24:7a:ab:d7:a7:26:b4:b1:74:b4:a6:bb:07:1c:
0e:aa:c8:b6:5c:56:99:17:87:cb:76:42:fb:16:e2:
17:c3:aa:7d:84:31:0d:14:49:94:71:82:fb:cf:a6:
fe:39:87:ab:4d:db:70:5d:71:6d:e8:84:27:15:80:
30:00:d8:72:e9:e0:c3:7f:91:3c:ae:ff:f7:ed:96:
43:bd:19:12:72:a1:70:76:57:4c:d6:d8:ce:dd:95:
4d:1c:5b:95:9f:31:d5:9a:f1:45:e5:ce:2b:05:1d:
f1:96:77:95:8c:d2:53:aa:f5:6f:01:12:db:fa:30:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:4D:8E:24:06:60:6B:96:58:B7:33:05:DD:35:FE:7F:DA:AA:88
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:31:01:a5:a7:d0:52:80:34:4a:41:a0:f1:d2:46:7b:48:
7c:53:87:fd:e2:68:8c:23:f3:f1:55:c2:7d:24:53:95:ef:95:
93:2b:c2:ae:a5:f9:cb:d8:4a:56:dc:df:c9:c5:6b:61:44:64:
6b:7c:c6:7b:50:87:a3:12:ce:93:01:a1:a6:cd:25:29:9a:b3:
90:75:ce:71:70:59:e1:95:56:6e:be:d2:49:c4:cd:18:cb:7f:
f2:29:c0:30:ed:02:22:1f:41:cc:65:a2:56:d4:8d:82:4a:99:
45:6f:ab:23:cc:be:d8:0e:92:65:f3:1c:20:b1:8a:8e:04:4c:
55:0f:88:27:ac:7d:8a:62:39:f7:9c:fd:f4:e2:bd:f0:22:d4:
d1:46:ed:c4:07:80:9a:c6:5d:52:90:69:da:20:e3:5b:df:00:
6f:f9:4d:6d:dd:91:7f:ce:f4:8c:2a:be:17:7d:23:81:88:d3:
e7:a7:3d:5d:9c:b7:65:8d:c1:66:76:84:83:df:63:06:0e:84:
26:a1:c5:77:d0:ea:44:3d:1b:d5:46:81:5d:d5:3e:f6:fe:d2:
fa:6f:64:85:5b:3e:99:62:75:44:1c:be:5b:fe:22:b1:3d:e8:
78:a5:a2:f2:a6:a1:92:d0:78:d1:01:83:6a:39:92:57:7e:64:
fd:76:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:00 2026 by rpki-client