Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 3HnBvgzqra76/x6BKZTWI7fOqvPj9cXLPA398hrBeqQ=
Subject key identifier: CD:94:79:97:15:BD:5D:89:D3:F8:9D:EB:BA:5E:9C:72:D4:F2:B1:5B
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01A056D545C203403DF23D3794AE9DB522B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0877
Signing time: Mon 31 Aug 2026 08:00:12 +0000
Manifest this update: Mon 31 Aug 2026 08:00:12 +0000
Manifest next update: Tue 01 Sep 2026 08:00:12 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: 6HBuTJ1SXpMT0Dl+Jw8KYTPtKiPWfzU4e8Pyy36ZACc=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:d5:45:c2:03:40:3d:f2:3d:37:94:ae:9d:b5:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Aug 31 08:00:12 2026 GMT
Not After : Sep 1 08:00:12 2026 GMT
Subject: CN=cd94799715bd5d89d3f89debba5e9c72d4f2b15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:7d:cf:77:b5:e1:a4:26:d8:8f:f9:c4:27:
92:2b:22:e5:e6:60:90:cd:de:02:7e:a0:fc:bd:64:
4b:e5:9e:09:4b:a3:6e:51:a1:9f:98:1e:96:42:9b:
e1:ae:17:e0:89:1e:5e:5a:26:b5:ec:56:76:b7:53:
08:02:c9:cb:6b:41:20:bf:37:f5:8c:73:a4:b2:70:
75:2c:22:32:17:08:5e:0f:99:2d:ff:40:a1:18:a3:
68:0c:6b:0d:ff:5d:42:97:b1:bc:ba:aa:c0:67:9a:
b7:fc:91:30:fe:7b:90:9e:82:a4:e9:3e:c0:94:40:
a3:dc:cb:7f:c0:59:22:11:8a:78:7c:62:81:34:82:
f2:51:ff:18:d9:ba:09:2b:f3:20:76:8e:65:ce:34:
30:2c:67:df:54:d5:66:5f:69:5f:99:80:35:30:f2:
91:a8:d3:34:6f:5e:b5:05:4b:cf:4b:d8:2a:9d:f9:
cd:8b:5f:11:81:5b:8d:37:86:27:1d:3a:0f:0e:16:
7e:7b:79:74:ea:89:42:7f:66:74:45:d7:9d:a3:e8:
ba:9d:33:64:25:0b:de:31:de:f2:f0:f7:cd:a4:97:
d3:b9:35:5a:46:0b:34:d3:2d:96:b4:e2:cb:c8:21:
98:a0:72:d5:c7:d1:28:a5:88:44:b3:3f:5f:95:05:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:79:97:15:BD:5D:89:D3:F8:9D:EB:BA:5E:9C:72:D4:F2:B1:5B
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9b:ab:aa:57:f3:16:bd:43:c1:27:0d:ad:6c:44:ee:41:84:
9e:ac:aa:3b:5d:e3:6e:8d:76:e8:5f:50:bc:e2:93:1a:13:66:
c3:92:5d:8f:93:b5:95:5c:e8:13:b2:a9:26:50:65:f2:52:40:
57:0d:26:2e:be:61:e0:55:62:c6:51:a4:a7:07:ce:e8:a3:f6:
49:26:7f:97:26:86:30:f7:d7:9c:9e:fc:90:6d:2d:01:70:31:
6c:91:20:8f:05:b3:f7:0a:99:b9:68:0d:93:53:2d:e8:c8:3d:
eb:42:89:ca:e4:19:f0:a3:55:7a:76:4d:cb:6a:41:a2:cc:01:
74:e1:c2:f0:b0:d4:71:68:07:71:3a:71:e0:11:be:c1:42:d3:
71:3f:bd:87:9d:b5:8c:82:71:e9:5c:c2:ed:16:bb:87:e4:7a:
ef:08:30:00:92:8d:4e:a5:ba:e8:f4:1c:c1:47:7d:da:01:82:
76:78:a9:69:35:2f:2a:ec:25:ec:87:a3:96:d6:ce:9a:6c:2d:
07:7b:b0:8b:3d:76:9f:5f:c4:dc:d5:93:9b:a6:42:70:4e:19:
44:fb:68:7b:ad:99:c7:62:c2:30:dd:3e:08:93:ba:6c:4a:93:
4a:00:0e:a9:df:09:03:30:b6:73:12:42:7c:c9:00:a7:39:18:
71:52:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:40 2026 by rpki-client