Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: QxMaULx7HAVVC95BKEecqbxKYalrhQSBQP+6EwBeYk0=
Subject key identifier: DC:BF:6C:7B:D2:7B:21:FB:68:BE:94:07:66:06:95:14:35:58:8B:AD
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 01A12A31AFCDF925E8BB9335DD5907473A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 09CE
Signing time: Sun 11 Oct 2026 09:01:01 +0000
Manifest this update: Sun 11 Oct 2026 09:01:01 +0000
Manifest next update: Mon 12 Oct 2026 09:01:01 +0000
Files and hashes: 1: NDzhVbz3oeZ11q9_LylV2ZPngdM.asa (hash: DgFN6Xf/HdcvFRuAAAFfHYivxEVG4xC2XmK5Ds7rm28=)
2: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
3: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: ugyb6/YFuiLSBeIXjsa0tUL4RqGJnFDwwDhDZUjwxzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:af:cd:f9:25:e8:bb:93:35:dd:59:07:47:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Oct 11 09:01:01 2026 GMT
Not After : Oct 12 09:01:01 2026 GMT
Subject: CN=dcbf6c7bd27b21fb68be94076606951435588bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:2c:e7:f1:b2:a6:55:1e:aa:63:29:ef:12:
59:47:c5:fa:4f:cb:9a:77:37:8d:5e:21:f8:83:39:
dc:69:3f:4a:95:34:f2:85:3c:53:e2:c8:4e:8e:3b:
1a:6b:3c:9a:41:cc:c7:fe:64:b7:92:c9:bf:0a:e3:
3c:0f:08:59:3d:2d:ff:19:8f:d1:52:04:27:91:c4:
da:c6:cd:10:45:e1:ab:48:b9:4b:bb:ba:a1:b2:f1:
83:04:95:50:54:63:cc:2d:df:96:1a:eb:a2:58:67:
5d:07:64:5b:bb:eb:4b:f6:c3:3f:11:5d:d8:2d:d5:
8b:67:b9:00:98:7f:df:e9:87:a8:09:6b:45:67:a1:
0b:b6:23:78:19:e9:d9:d8:95:87:70:72:6b:58:2c:
bc:11:03:af:06:68:f5:e7:f6:44:c8:68:38:d3:54:
e5:d8:f0:c8:57:d4:89:0f:4c:20:eb:46:c4:0c:a8:
9f:b4:38:ec:7c:49:29:d9:b6:4e:14:fa:84:98:ee:
e9:23:0b:8e:41:38:82:bd:c6:19:1c:e9:ef:e3:7e:
de:9e:30:c8:4e:75:00:f8:1d:6d:3c:24:69:5e:f7:
b1:07:71:29:eb:d7:05:67:34:2c:98:f9:3c:54:6d:
9e:b0:e7:f8:c5:da:33:6a:e6:bb:63:df:49:fa:cf:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:6C:7B:D2:7B:21:FB:68:BE:94:07:66:06:95:14:35:58:8B:AD
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:88:9e:f7:00:3e:5a:ce:2a:6a:5d:b7:fe:ca:10:db:fe:
56:bf:51:e3:7f:fa:d8:19:55:fa:66:35:7d:88:5d:75:8a:6f:
49:13:b2:74:c8:5d:a9:46:ce:ac:a2:50:df:6b:de:47:2d:bb:
b2:8a:14:f8:f9:9e:33:7a:2e:2c:ca:54:50:64:29:71:bb:93:
25:d1:5a:ea:12:1e:2f:01:9d:05:5b:db:c5:02:81:01:9a:af:
5a:c4:79:e0:ab:ea:aa:69:65:5c:12:12:15:d0:79:71:7e:d1:
68:c5:d0:23:13:a2:08:25:65:66:6b:14:4a:ba:39:d8:be:af:
1e:20:4f:ec:60:8e:e1:cb:8f:37:f4:3d:72:90:c0:b3:4d:9a:
2f:f0:31:c0:92:e5:6e:17:17:cf:f5:f2:e7:26:78:d0:92:f3:
97:45:c8:3c:c3:5a:7d:35:8c:ed:6c:47:1c:9a:26:d4:28:73:
84:b7:22:e3:70:72:5c:26:dd:d8:21:27:f8:b4:81:d5:ec:73:
a2:91:e2:52:fa:6d:81:0e:65:83:c7:fe:46:7b:fe:49:8c:ba:
dc:f7:35:2e:89:f3:0e:21:d1:6f:db:e8:5e:4f:c4:f3:54:f4:
e8:f4:30:8e:ee:16:db:46:71:28:bf:95:59:cd:de:03:52:68:
99:ed:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:20 2026 by rpki-client