Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: FAH3n9ELbZoWFDPXwlhRXaVCgFI3Rk6Cz1m1PGbBO1Q=
Subject key identifier: 30:79:80:63:2E:70:89:D9:AA:D8:97:CF:A3:61:A8:70:16:D2:58:DA
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019EFC4BB7D360A6A8643D35E401A0E728E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 08AD
Signing time: Thu 25 Jun 2026 01:01:21 +0000
Manifest this update: Thu 25 Jun 2026 01:01:21 +0000
Manifest next update: Fri 26 Jun 2026 01:01:21 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: 9fgDUjrjNIsOty72tuOfM7XtM64NqQjC3ffWjEmpSDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:b7:d3:60:a6:a8:64:3d:35:e4:01:a0:e7:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Jun 25 01:01:21 2026 GMT
Not After : Jun 26 01:01:21 2026 GMT
Subject: CN=307980632e7089d9aad897cfa361a87016d258da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:21:c5:c8:a9:93:50:99:fd:1a:1c:22:79:
fd:0d:66:98:ed:51:06:f8:81:34:cb:4f:5f:a0:d6:
c6:6e:10:72:24:3f:22:d7:a5:a2:bf:56:a6:90:1c:
87:8a:ad:6c:81:b7:77:ed:76:f6:81:27:88:23:75:
db:cb:bc:54:a8:df:2a:e7:4b:07:c0:be:eb:96:36:
16:12:a4:37:e7:8e:74:11:7e:e9:3a:c7:d0:dc:eb:
10:d1:98:79:c1:0f:dd:27:d6:b8:73:a3:18:12:ef:
90:1e:6d:c5:0e:db:f1:85:16:ef:0a:18:8d:d2:7a:
7e:b3:54:74:a6:43:8b:2a:14:7b:6b:01:c7:68:62:
2d:f7:1c:c6:3e:aa:1d:be:5b:13:5d:33:e9:3d:17:
09:e4:42:68:ea:e7:40:d1:c2:f8:d7:57:fe:2d:1a:
47:37:43:f9:c0:40:85:c0:85:f4:15:b6:e0:c3:f1:
26:34:1c:09:73:43:74:a6:6d:96:dc:03:e2:2b:2e:
55:0b:4d:93:79:80:5c:2c:18:dc:38:8e:d9:05:c9:
96:f5:d9:aa:13:fe:82:d6:7f:45:21:be:cc:62:52:
82:8c:cc:81:18:bd:3c:24:5f:f3:86:a2:55:01:40:
09:20:81:36:0c:06:c6:04:e3:9b:24:3a:73:d6:bf:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:80:63:2E:70:89:D9:AA:D8:97:CF:A3:61:A8:70:16:D2:58:DA
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:9a:79:c1:4b:29:0c:92:3f:54:81:23:a6:a6:71:75:fd:
2a:fe:d5:f9:43:82:51:b6:39:9e:d1:71:0e:35:cd:74:27:0a:
81:74:62:cf:f2:f2:7b:55:49:04:ab:b9:d6:26:e1:53:d5:23:
ac:87:5a:ca:70:1e:1d:0d:a5:94:e0:40:92:e6:65:62:29:94:
36:d3:9b:ef:b4:9c:02:80:64:af:07:35:f4:63:a6:da:f9:8a:
0d:50:e7:be:90:4e:d6:6d:4b:28:0a:08:20:89:d9:8d:f2:56:
a7:85:92:e2:d8:72:98:e3:dc:22:9b:82:61:6b:20:e8:7a:db:
42:ee:8b:f7:54:32:36:40:1e:c7:13:af:66:15:1f:2f:49:3b:
75:6c:ed:ab:45:8d:23:79:8e:fe:0c:41:7a:c1:2f:a9:d3:9d:
cf:7a:90:0a:3c:24:6f:0d:49:1d:d6:3d:21:43:ca:41:72:bb:
ad:fa:0d:c0:d3:db:24:6b:14:63:0c:cf:89:8e:41:66:81:93:
bc:42:c0:90:c0:0b:49:5a:db:75:f3:2f:c6:e1:10:ac:0b:ad:
e9:9b:5f:78:4f:6e:13:91:23:79:45:a1:fa:71:ed:d9:9a:c3:
20:99:cc:10:cf:c0:e2:8d:c6:de:9c:1d:d1:cd:2b:7d:1b:55:
d9:ed:e8:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78S7fTYKaoZD015AGg5yjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjYwNjI1MDEwMTIxWhcNMjYwNjI2MDEwMTIxWjAzMTEwLwYDVQQD
EygzMDc5ODA2MzJlNzA4OWQ5YWFkODk3Y2ZhMzYxYTg3MDE2ZDI1OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA4hxcipk1CZ/RocInn9DWaY7VEG
+IE0y09foNbGbhByJD8i16Wiv1amkByHiq1sgbd37Xb2gSeII3Xby7xUqN8q50sH
wL7rljYWEqQ35450EX7pOsfQ3OsQ0Zh5wQ/dJ9a4c6MYEu+QHm3FDtvxhRbvChiN
0np+s1R0pkOLKhR7awHHaGIt9xzGPqodvlsTXTPpPRcJ5EJo6udA0cL411f+LRpH
N0P5wECFwIX0Fbbgw/EmNBwJc0N0pm2W3APiKy5VC02TeYBcLBjcOI7ZBcmW9dmq
E/6C1n9FIb7MYlKCjMyBGL08JF/zhqJVAUAJIIE2DAbGBOObJDpz1r8bCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB5gGMucInZqtiXz6NhqHAW0ljaMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV2aecFL
KQySP1SBI6amcXX9Kv7V+UOCUbY5ntFxDjXNdCcKgXRiz/Lye1VJBKu51ibhU9Uj
rIdaynAeHQ2llOBAkuZlYimUNtOb77ScAoBkrwc19GOm2vmKDVDnvpBO1m1LKAoI
IInZjfJWp4WS4thymOPcIpuCYWsg6HrbQu6L91QyNkAexxOvZhUfL0k7dWztq0WN
I3mO/gxBesEvqdOdz3qQCjwkbw1JHdY9IUPKQXK7rfoNwNPbJGsUYwzPiY5BZoGT
vELAkMALSVrbdfMvxuEQrAut6ZtfeE9uE5EjeUWh+nHt2ZrDIJnMEM/A4o3G3pwd
0c0rfRtV2e3omg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:10:26 2026 by rpki-client