Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: /BLkEInuuUbrVK0dJXmeRZuE3S5DeJmlUdWUQy5GuAg=
Subject key identifier: 8E:F6:52:19:0F:CD:2B:9C:26:88:FA:96:4D:C8:B9:E4:5B:AA:B3:2C
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01A14C18DE007E57FF001FD387DAC7841831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 08F6
Signing time: Sat 17 Oct 2026 23:01:00 +0000
Manifest this update: Sat 17 Oct 2026 23:01:00 +0000
Manifest next update: Sun 18 Oct 2026 23:01:00 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: xyUimEaoK9tNyG4kEcslcgNiPpGuZYcLvUKvix9UL7Y=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:18:de:00:7e:57:ff:00:1f:d3:87:da:c7:84:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Oct 17 23:01:00 2026 GMT
Not After : Oct 18 23:01:00 2026 GMT
Subject: CN=8ef652190fcd2b9c2688fa964dc8b9e45baab32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:a6:af:ac:b3:1b:c1:23:60:8a:db:92:d2:
12:de:51:8f:05:e5:9a:c5:89:e1:99:8f:9f:75:91:
c8:e7:b0:e6:8b:b9:bf:bd:73:e9:96:ff:ad:30:7f:
82:ad:71:02:18:88:a0:52:c5:73:dd:25:59:73:f1:
cc:64:a5:de:9f:94:7a:15:f2:e5:78:c7:e2:6f:d2:
d8:a7:c2:80:7b:37:b8:3e:67:85:d0:f4:8d:a4:ed:
ee:35:8c:7e:9a:ec:ee:d9:5e:f7:40:d1:2f:ab:77:
03:f8:f9:ec:18:9d:d4:bb:7e:ff:95:d9:7d:d7:3f:
86:e4:fc:f8:7f:33:c5:85:d6:a8:ad:7b:46:c3:3f:
28:f1:e1:37:f3:2d:80:19:d3:a6:d5:c6:8e:9a:00:
c8:f4:ab:6a:10:ca:20:fe:99:f3:c3:a3:7c:34:b8:
36:ae:52:69:29:55:65:fc:89:71:bb:66:c5:89:a6:
ac:39:dd:7b:e5:78:8b:45:bf:ce:f6:69:a2:9b:d2:
16:0d:d0:77:42:8c:e2:bd:bb:32:79:15:9e:d3:a0:
29:b5:20:9b:0f:11:58:94:16:b8:9e:df:5c:57:c6:
27:8f:04:22:09:51:ec:7f:87:78:17:1b:c5:fc:b0:
6e:3a:25:c7:de:d0:79:48:d5:03:fb:dc:82:04:37:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:52:19:0F:CD:2B:9C:26:88:FA:96:4D:C8:B9:E4:5B:AA:B3:2C
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:7c:06:bc:c6:87:79:1d:29:85:c5:ea:b4:27:68:f9:48:
b8:05:30:63:35:0a:f0:21:f8:07:88:15:1c:eb:b6:9b:a0:f2:
7e:29:0c:57:71:3c:b6:e1:68:5a:6f:ef:58:78:4d:74:e3:28:
51:66:99:6b:1d:cd:c6:26:57:64:6b:03:97:15:03:4f:b0:49:
1d:ad:88:9f:0d:24:81:94:3f:22:33:15:f1:3c:97:20:a0:2f:
1d:85:eb:a5:37:41:03:93:b2:2c:43:c3:83:b8:7d:5f:54:99:
1e:43:23:e5:af:f1:55:ae:18:05:7b:0c:8d:a8:56:37:53:95:
6b:5f:a1:08:3d:12:df:cb:b8:7f:7c:ac:9d:05:d4:8b:1e:ca:
94:b0:60:41:fc:a6:89:6f:7a:6d:72:6b:03:4f:0a:a5:b4:97:
d0:7f:f4:74:fc:6a:9b:51:e2:8b:8a:bd:62:2b:ee:34:cb:bd:
7d:bd:15:fe:69:87:61:1b:6d:d8:c4:31:22:e3:3b:8d:5c:b0:
0a:b6:ef:df:65:34:5e:c1:b4:0f:a2:57:4b:5b:15:9b:b2:c0:
01:ed:36:d7:4e:3e:ab:34:dd:aa:97:9d:f5:1b:2a:07:9a:47:
e6:ea:a8:c0:51:ff:61:70:82:b7:02:f3:df:08:46:26:94:3f:
8f:81:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:11:24 2026 by rpki-client