Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: Kcrjo1361rWUYe3hbsFfnUj1fqXj7c9qiWh1JAr3bXc=
Subject key identifier: 68:23:6F:F7:28:E5:66:E8:3B:D1:68:E5:C0:88:30:EF:04:54:55:77
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 019D39AF6F33E1883EFCA82B54C47F09BC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 1632
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: 3umndGzAD5rCZWRXYXf_uY9ZlGQ.roa (hash: +hSbfwDC34My2nrMGTb3S+msbWLWB8nIUFlFpyrQ6XM=)
2: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: VjSZq77A4GlWBxp0/znEucuYE97eNwkZ6alVd/uLKPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6f:33:e1:88:3e:fc:a8:2b:54:c4:7f:09:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=68236ff728e566e83bd168e5c08830ef04545577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:af:69:62:f3:a8:93:06:47:8a:82:ff:d9:
b2:49:10:64:ac:0c:4a:9d:6d:29:00:69:94:9f:92:
4c:17:66:20:39:88:a1:b1:c0:ea:af:ef:9f:2f:7d:
a0:83:35:fd:43:4e:57:66:f8:58:07:09:ae:3d:0c:
5f:1b:a1:ce:f5:c1:78:87:71:cf:b1:f6:55:ef:71:
3b:c2:f4:40:54:e9:45:73:2d:36:19:5d:1c:f6:32:
a4:2d:7d:ad:60:ba:5e:55:6b:be:ed:a7:28:95:90:
a5:07:1f:0a:7c:58:c3:a3:62:d7:58:26:2e:77:6d:
97:8b:44:a0:49:70:3a:58:19:14:07:5d:c0:5d:26:
ab:28:72:be:60:d9:9e:8c:e3:f7:3a:9c:46:4d:7a:
11:6a:53:e7:84:78:dd:02:1a:65:77:1f:2d:43:59:
99:56:43:37:4e:4b:f4:6d:4e:d5:c8:6d:4a:5e:19:
1e:1a:87:0d:1e:44:d5:57:ce:25:11:07:24:5b:a5:
b2:75:55:5b:9e:35:5c:83:ab:93:46:f2:c8:48:9a:
26:f1:af:12:6f:8a:b0:ca:4b:f3:6e:63:ef:a6:ac:
0a:f3:2b:02:6f:ed:6c:59:91:14:fd:de:20:9f:da:
ff:36:e0:62:4c:61:1e:aa:07:45:60:c9:ea:21:74:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:6F:F7:28:E5:66:E8:3B:D1:68:E5:C0:88:30:EF:04:54:55:77
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:83:e4:b6:7e:c3:6e:38:52:94:dd:af:56:5c:5c:10:e3:6b:
5d:eb:dd:ae:8e:41:d1:a8:d0:99:fb:9d:b9:6e:28:22:0a:38:
98:a5:39:b0:df:25:b3:42:37:c7:e6:f0:44:f9:f5:d8:e8:1b:
dd:58:0e:ee:d0:9d:a2:42:ec:e3:07:a8:52:37:3f:b4:04:85:
27:6a:6b:d4:ae:71:13:e3:89:fb:28:25:42:8f:bf:bc:da:35:
49:df:1e:91:f4:08:dd:b2:e5:88:7f:cd:9b:ac:b7:ff:40:58:
9f:83:2c:0c:56:8e:cd:24:e7:88:96:8e:c2:1f:02:5d:59:04:
6a:ce:b9:7c:5d:2b:b2:bf:ce:d0:3d:56:43:55:b9:a4:58:ee:
de:b5:57:b1:7c:bb:3f:76:68:7d:5d:ff:87:47:24:54:fd:a7:
29:12:ad:b0:60:b2:14:b8:51:cd:0b:b7:02:fb:97:00:af:a8:
ca:b2:36:f5:c0:a8:f4:28:4a:ec:3c:1a:d2:81:67:1d:85:12:
96:81:8f:5c:9e:b3:2a:64:6b:85:b9:60:bd:99:bf:85:ed:92:
51:12:a6:b0:03:83:84:c0:ee:99:30:9e:74:89:1a:4c:cc:2d:
3d:79:3a:da:e3:69:20:e5:1f:20:58:65:82:0a:f4:c1:0f:8e:
b2:63:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:05 2026 by rpki-client