Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
File: ilqFDZoDAtO1zC3firM8qrfM5KY.mft (raw, json)
Hash identifier: TEz+4x6/LAIx77X+IPjNVVHCMb3LHI1ftp7XHRT0gdk=
Subject key identifier: DF:08:EC:6F:39:99:C6:CC:54:EF:43:9F:BC:CF:23:E7:96:59:0C:1D
Authority key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
Certificate issuer: /CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Certificate serial: 019D38D3D4E4880CE2E52B885A651CFE0425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
Manifest number: 0103
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: ilqFDZoDAtO1zC3firM8qrfM5KY.crl (hash: a/8eZCibUKJuxr/Mi24ikqJeYEmTNPaBVO5ug9Jth1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d4:e4:88:0c:e2:e5:2b:88:5a:65:1c:fe:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=df08ec6f3999c6cc54ef439fbccf23e796590c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:ef:ca:1a:89:70:d0:6b:32:87:17:13:56:
b3:6f:f0:55:9d:37:a7:e1:32:9e:65:f1:a8:eb:1c:
a5:21:32:c4:cf:e4:f8:c8:c4:55:8b:c2:ab:a9:19:
d3:06:62:f4:4f:0b:e7:6f:7f:5d:75:7f:83:e4:84:
bc:37:b4:b5:57:30:05:64:20:ab:cf:75:9b:d4:48:
2e:58:7f:2b:4d:32:18:e6:2a:c6:e2:3f:1f:93:e9:
48:8f:9e:13:55:a6:d3:4a:2f:8b:22:7b:c1:69:4d:
45:89:25:d0:d5:c1:59:22:f6:35:99:54:4c:04:b2:
0b:23:16:a3:d3:f5:56:03:3d:9c:3f:de:7c:88:81:
0f:8b:59:ea:86:7c:39:30:82:b3:94:2e:38:53:f1:
9b:9c:c2:4b:b8:39:6d:ef:ac:e3:12:86:c6:f7:72:
84:0c:1a:a5:be:9a:54:1a:c2:45:d5:56:fb:45:c5:
96:1b:5d:76:60:a0:9e:03:b7:c2:03:0c:ce:99:38:
6c:df:c8:8c:fc:15:de:9c:10:24:56:8e:bf:0a:3b:
6f:67:9b:95:e5:a6:47:d2:d5:28:e3:d5:65:42:42:
31:0a:6b:ae:2b:27:30:91:03:dd:20:77:66:96:bf:
04:e5:41:db:2f:71:6a:26:ae:38:58:b0:e0:53:70:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:EC:6F:39:99:C6:CC:54:EF:43:9F:BC:CF:23:E7:96:59:0C:1D
X509v3 Authority Key Identifier:
keyid:8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:5c:c4:94:6c:9a:87:e5:69:50:8d:68:b9:ab:03:21:92:
46:f8:78:19:35:54:cd:fa:46:f7:11:07:c5:b9:26:a0:61:2f:
90:90:1c:51:f7:60:f7:8e:30:6a:0a:d8:0e:33:2c:58:ec:0f:
0c:17:5a:ca:76:40:01:a8:bc:fe:d2:37:80:0c:43:bd:98:1b:
27:a2:26:5d:77:a9:73:d1:d5:f3:ce:3c:34:68:a5:da:bb:eb:
c2:4f:91:16:2e:9e:14:3b:ec:f7:a6:82:b5:7c:95:71:80:26:
86:84:90:b6:d5:5c:86:7c:de:28:ca:b6:f5:2c:91:74:a9:6a:
e0:31:a8:15:b7:90:22:80:41:a0:02:96:8a:36:f6:32:48:30:
13:b5:2f:07:fc:69:f0:0a:7b:ae:50:f3:ec:7b:b4:f5:24:b0:
a9:cc:43:e5:13:3a:33:fe:f8:ed:62:b7:e9:ce:2f:ed:84:48:
e8:8a:0a:f5:a0:04:5d:1f:70:c4:2a:49:15:b4:d4:2c:a7:98:
b3:02:1e:9a:5c:1c:3f:70:72:69:af:1f:b2:2a:1f:3b:5a:e3:
7a:37:c0:b5:14:c1:5b:c4:f1:64:e3:e2:b9:54:14:c0:e6:31:
5b:e0:1d:b7:f8:8d:cf:dc:07:fe:55:46:73:f2:97:17:58:0d:
60:b3:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client