Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: PsuSyrYDeUUbSSDQCYzgMjf1VYidsDXF7MyC3hTObg0=
Subject key identifier: 8B:FC:32:D3:33:A7:69:45:91:3E:A5:55:4D:1A:14:7C:FA:FA:2F:82
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019CB136811CB3F6F388027460FF919A0103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 077D
Signing time: Tue 03 Mar 2026 01:01:04 +0000
Manifest this update: Tue 03 Mar 2026 01:01:04 +0000
Manifest next update: Wed 04 Mar 2026 01:01:04 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: dJgkFxq8mg4b7w221mx1ZNtNuKg3pIEYlDffQkN5rIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:81:1c:b3:f6:f3:88:02:74:60:ff:91:9a:01:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Mar 3 01:01:04 2026 GMT
Not After : Mar 4 01:01:04 2026 GMT
Subject: CN=8bfc32d333a76945913ea5554d1a147cfafa2f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:ef:bd:19:17:64:3e:de:40:32:30:11:fe:
58:60:79:68:53:63:f0:d0:11:ae:04:ba:09:50:b5:
ce:ca:e5:54:5f:9f:86:82:b7:63:da:02:12:63:b3:
77:a3:c3:7a:20:9f:7d:d4:91:bc:1d:ea:a8:4b:5a:
84:f9:90:0d:f7:88:ff:1b:e7:9a:39:21:4f:ec:c4:
91:8e:e6:2a:ac:e3:fc:c6:79:c9:ef:22:78:5d:d3:
86:73:66:52:30:20:08:45:76:de:4e:90:56:1b:c8:
25:19:ac:8d:3c:2c:2d:4f:14:dc:ba:6f:14:93:56:
78:e3:e0:15:40:cc:eb:cd:c8:fc:69:6b:d3:17:46:
a8:9c:62:e9:cc:a4:ef:c1:f3:72:05:d2:c0:b6:eb:
7e:f7:a6:55:e3:f7:1f:19:0f:a2:00:1a:1a:74:d2:
15:6a:83:d6:7c:20:e2:f8:67:f9:aa:44:a3:d7:ec:
d6:8e:88:d3:ba:00:b3:83:15:c2:27:87:be:49:70:
3b:9b:f7:be:0d:a1:b7:8f:f7:46:d9:db:a1:3a:68:
83:98:82:ff:78:09:8e:67:78:b7:58:53:22:54:d3:
04:f4:49:47:86:98:37:5b:93:db:77:f8:6c:67:c7:
53:9e:89:d8:8a:71:f2:cf:a6:71:cf:37:5a:2e:d7:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:32:D3:33:A7:69:45:91:3E:A5:55:4D:1A:14:7C:FA:FA:2F:82
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:4e:5d:96:aa:c1:2f:57:da:c3:4e:a6:10:03:d0:f0:c9:
b3:38:e2:97:c1:e7:a2:3a:99:ae:35:8d:a3:14:85:d9:e0:35:
ff:51:ab:0e:92:ce:09:53:92:33:e5:2f:b0:4e:81:6b:90:05:
90:b8:a2:68:fa:ea:03:ec:b6:3c:f9:70:af:79:8d:83:79:5c:
07:b5:23:23:6a:11:8e:e2:bc:12:eb:50:08:06:52:4e:32:78:
1f:be:a6:7e:46:86:bd:16:14:ed:0f:6f:32:9e:3d:11:9f:85:
06:35:75:43:02:bf:a2:72:ff:ac:80:94:85:e2:69:e4:b2:4a:
df:a9:b6:cb:0f:91:9e:51:61:3a:f1:ef:bb:84:ca:93:84:23:
a9:70:b7:65:89:6e:d4:3f:9c:8c:6a:b6:ba:27:68:4b:71:06:
c7:6f:60:e5:13:09:05:19:e4:ad:fa:5a:b0:71:9c:cd:75:34:
06:64:7d:71:77:a1:86:a3:2f:df:c6:e5:6e:e6:ee:3e:11:d1:
07:73:3f:11:cc:c0:c4:d6:a6:58:1d:0d:91:5e:64:41:a9:b5:
d4:32:fc:e2:d2:1a:a1:cb:49:b7:09:bc:44:d8:97:04:91:d6:
f4:a8:74:6f:19:98:79:26:f5:82:28:f7:64:28:77:71:ea:2b:
a9:40:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:31:27 2026 by rpki-client