Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: LV6Zux9xLc0W+Q/9JpcRxOarws8vDUKbsuUMVmQZuRE=
Subject key identifier: 59:D1:10:E8:D9:38:3D:EB:F0:E6:84:D9:1A:2B:9E:28:43:52:2A:BC
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 01A18676B01A36CC0AE72EEA07B2AF0D77DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 199F
Signing time: Thu 29 Oct 2026 07:01:27 +0000
Manifest this update: Thu 29 Oct 2026 07:01:27 +0000
Manifest next update: Fri 30 Oct 2026 07:01:27 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: 2B5Ph8tmojbdeSzOCZuLQvr8R8GozO/Xbgcnfql3jGU=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:b0:1a:36:cc:0a:e7:2e:ea:07:b2:af:0d:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Oct 29 07:01:27 2026 GMT
Not After : Oct 30 07:01:27 2026 GMT
Subject: CN=59d110e8d9383debf0e684d91a2b9e2843522abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:cc:d2:f7:42:8d:52:36:f9:cf:36:71:85:
06:ab:98:64:6a:12:09:26:ef:66:d9:35:57:ad:13:
06:e3:b4:93:5c:65:00:7c:f4:11:94:0d:78:1a:71:
0d:60:09:69:8d:cb:19:e3:13:3c:49:bd:f3:f2:67:
8c:2f:96:87:6d:24:9f:2c:96:0d:5c:91:fc:e2:8d:
f2:c1:bf:dc:c4:a5:39:f7:9f:b8:5b:5e:7d:5b:d1:
50:1e:b9:c0:dd:ae:25:f1:4e:ea:68:67:44:e8:48:
db:cb:a0:d8:54:9f:5e:95:d8:24:87:28:ab:f4:54:
7a:d1:8b:6e:c9:b4:ee:7e:47:e9:c3:90:f0:7c:92:
f0:91:44:6f:de:82:1a:a7:59:e9:49:46:00:3b:4d:
ac:14:29:d1:df:08:a9:26:da:bc:ea:dd:9a:41:fe:
12:58:e7:1a:c7:cb:44:ca:99:41:73:83:99:30:ad:
ce:32:1d:ea:f1:df:39:ec:54:1c:78:10:2f:a9:71:
44:c5:98:ce:24:9a:6e:fe:5e:07:ec:44:34:8e:df:
3b:1d:e3:51:5a:e5:bd:42:20:51:23:fd:cf:8e:dc:
c7:20:32:2a:bc:31:5f:b7:ec:57:c7:ac:92:f5:5b:
c3:0c:f5:1a:4c:15:af:e0:6c:67:e2:8b:23:da:c1:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:10:E8:D9:38:3D:EB:F0:E6:84:D9:1A:2B:9E:28:43:52:2A:BC
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b2:e4:6e:15:44:c5:4f:b7:29:b0:b7:5d:5d:77:04:6f:7f:
66:a4:75:b1:fe:91:dc:8e:0b:a1:5e:ac:5f:9c:3c:c3:79:30:
fc:b2:86:cf:38:d4:c9:a3:a6:23:50:4b:1c:b6:af:45:a1:e7:
11:ac:2a:d4:7b:36:6b:a9:61:66:67:6d:93:00:5d:6c:88:5a:
6c:b6:7d:2d:91:b3:a2:a0:ca:05:d0:6d:3d:4a:6f:6d:4f:94:
8b:c3:45:04:52:6e:11:10:f8:ea:8d:56:f1:47:34:bf:5e:6f:
13:ee:05:36:b8:0f:06:89:d9:0c:3e:e3:69:39:9b:b0:fb:70:
2f:56:bc:d6:04:fc:7f:43:fa:0e:4e:00:46:b5:eb:e9:e0:d4:
54:95:0d:10:0b:37:8a:94:8e:c4:6f:e8:fe:33:36:8d:ee:94:
ff:0d:e6:f4:54:3f:f7:b4:81:8c:8a:eb:22:6f:b3:1e:b5:32:
a2:e9:9d:73:b4:95:ed:68:9c:38:89:a7:92:ac:b2:92:c3:fe:
54:dd:90:ea:12:1c:25:09:72:5b:3d:ad:32:a6:83:c2:c7:83:
79:fd:ce:1a:79:51:7c:df:76:6a:a4:67:05:65:f0:44:eb:5e:
28:dc:41:1e:9a:91:27:59:23:7c:db:14:33:2d:7a:2c:ae:ee:
59:a9:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:15 2026 by rpki-client