Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: gAhCO2cfEVWRomXViYXmk1TPNrza7NOEiI+s2MUPKDc=
Subject key identifier: 74:FF:E9:D8:47:AF:29:5E:9A:87:04:1D:24:7A:61:35:E4:2E:15:78
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019D3940D69851E55CEE9625650C10F359DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 06DA
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: UJDhRL7ciMkupb/5jsGlPIhMVDqC4xN1VDacY/AVoYE=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d6:98:51:e5:5c:ee:96:25:65:0c:10:f3:59:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=74ffe9d847af295e9a87041d247a6135e42e1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:24:ab:6c:0b:1a:8e:b7:a8:22:99:60:09:
3b:43:ff:e0:d2:f1:22:a2:57:0f:e8:3b:8f:56:f0:
7b:97:7b:e9:27:79:cd:08:6d:47:2e:68:c4:6a:45:
1d:91:b4:a0:cb:b1:88:89:47:38:1e:12:ee:8a:a9:
04:9f:96:7b:31:5c:ea:f1:71:fc:20:2c:f0:9a:84:
e8:e8:ef:48:57:8b:20:ce:62:f2:dc:9f:2a:34:72:
31:4b:99:68:df:b4:af:a2:88:e6:50:91:85:58:58:
c8:8d:5a:76:db:ee:bc:cc:1d:02:b3:6e:c5:72:6b:
3d:5c:c0:67:bf:ff:a6:f7:9e:96:90:d0:b9:d7:c3:
04:9c:63:b7:77:13:71:4c:ac:03:4a:c2:df:75:6a:
e3:de:da:79:41:0b:16:1e:a0:6e:de:d2:74:91:90:
2b:83:14:29:2a:7d:fc:fd:fe:8c:d8:0b:92:bc:56:
e5:c0:a6:bb:a5:dd:6d:8e:8f:67:61:07:fa:71:9f:
ba:a4:b6:fc:63:e5:f7:12:7c:a6:37:26:2a:0f:68:
79:df:e8:ee:e4:dd:9d:bf:d4:5a:2c:96:85:66:f8:
78:69:d4:09:b9:4f:74:89:f2:c3:91:dc:4d:f3:d9:
eb:99:45:ce:ea:1f:e8:e8:d7:99:00:85:bd:a2:d5:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:E9:D8:47:AF:29:5E:9A:87:04:1D:24:7A:61:35:E4:2E:15:78
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:d0:b1:0a:96:cc:dd:f2:b0:9e:ff:9d:ec:1a:43:41:81:
a9:87:a3:7f:c2:08:bc:bc:cc:50:51:30:84:8c:e0:4f:e9:32:
9f:58:d9:b4:f3:80:05:fa:eb:5a:8f:c1:b2:10:4a:21:11:ae:
4e:74:e5:1c:79:91:0a:3b:97:01:58:7d:70:96:92:79:75:41:
8f:2e:0f:d2:65:53:5b:72:79:57:0c:2f:1b:63:1a:8c:37:37:
2f:23:cf:96:34:fc:6b:97:87:15:f3:c8:db:c5:0d:dc:eb:84:
dd:2c:3c:c8:6d:bb:2e:0f:4c:8c:3e:27:68:11:c9:39:83:da:
71:71:56:3c:4b:df:04:b8:95:07:b6:30:fa:4c:0a:2e:e5:25:
b0:aa:48:4e:af:1b:51:03:e8:55:80:a5:c5:95:32:bc:9c:4f:
d8:76:1a:30:59:9d:1a:25:4a:55:3d:37:bf:3a:6a:83:b4:e6:
ff:ac:2f:0d:3b:a6:13:1f:cb:9c:56:b7:20:92:cf:8e:81:bf:
6e:8f:0b:e2:62:2f:27:ba:3b:92:16:ce:79:60:4f:29:e3:23:
9b:ee:ac:bf:97:b4:27:77:8d:3b:7c:10:0f:d5:d4:23:fa:2c:
4f:a9:e9:bf:d4:d5:35:54:2b:75:a3:30:d7:5a:0d:f8:30:29:
02:ae:ec:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNaYUeVc7pYlZQwQ81ncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm
NGZhODkwHhcNMjYwMzI5MTEwMDQzWhcNMjYwMzMwMTEwMDQzWjAzMTEwLwYDVQQD
Eyg3NGZmZTlkODQ3YWYyOTVlOWE4NzA0MWQyNDdhNjEzNWU0MmUxNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrkkq2wLGo63qCKZYAk7Q//g0vEi
olcP6DuPVvB7l3vpJ3nNCG1HLmjEakUdkbSgy7GIiUc4HhLuiqkEn5Z7MVzq8XH8
ICzwmoTo6O9IV4sgzmLy3J8qNHIxS5lo37SvoojmUJGFWFjIjVp22+68zB0Cs27F
cms9XMBnv/+m956WkNC518MEnGO3dxNxTKwDSsLfdWrj3tp5QQsWHqBu3tJ0kZAr
gxQpKn38/f6M2AuSvFblwKa7pd1tjo9nYQf6cZ+6pLb8Y+X3EnymNyYqD2h53+ju
5N2dv9RaLJaFZvh4adQJuU90ifLDkdxN89nrmUXO6h/o6NeZAIW9otX3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT/6dhHrylemocEHSR6YTXkLhV4MB8GA1UdIwQY
MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt
MWQ4MmFiMTVjNDE1LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1
LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOzQsQqW
zN3ysJ7/newaQ0GBqYejf8IIvLzMUFEwhIzgT+kyn1jZtPOABfrrWo/BshBKIRGu
TnTlHHmRCjuXAVh9cJaSeXVBjy4P0mVTW3J5VwwvG2MajDc3LyPPljT8a5eHFfPI
28UN3OuE3Sw8yG27Lg9MjD4naBHJOYPacXFWPEvfBLiVB7Yw+kwKLuUlsKpITq8b
UQPoVYClxZUyvJxP2HYaMFmdGiVKVT03vzpqg7Tm/6wvDTumEx/LnFa3IJLPjoG/
bo8L4mIvJ7o7khbOeWBPKeMjm+6sv5e0J3eNO3wQD9XUI/osT6npv9TVNVQrdaMw
11oN+DApAq7sjg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:50:05 2026 by rpki-client