Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: ppDxmYGYvKGs14n4R1TMUfxgnkVebat2i+i2JNnXauk=
Subject key identifier: 07:CB:20:7E:68:4D:7D:58:2A:4F:33:FA:6B:98:5B:E3:30:E3:34:B5
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 019D39AE7E3945C9D0F380858C45D102E900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 049A
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: WCMdZvIVvae4/NqLR8rND4IfZwizPhqm1VfyJ62+Xj0=)
2: r8t5jSQk5lFlDxv7c6ibzUYCg64.roa (hash: Wn/9Zc0Zbqrrz8vzDzG060ISIulF2mhJvZxaset/d+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7e:39:45:c9:d0:f3:80:85:8c:45:d1:02:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=07cb207e684d7d582a4f33fa6b985be330e334b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:05:01:1f:cd:ad:cf:e2:3f:8f:59:8b:5f:
be:48:36:7a:1c:9f:33:ec:ef:2c:27:7f:65:9c:be:
c2:7e:c1:f2:8f:cb:7d:32:74:6e:9d:c2:cc:8d:a6:
1e:fe:27:96:d7:d5:ca:0d:af:91:cd:db:a9:26:44:
43:74:c4:92:82:c2:ba:f5:bd:f4:7b:e9:1f:9c:8b:
b4:f4:67:6e:f9:6b:f9:b6:3b:6e:4c:9e:71:a8:95:
af:10:15:94:9f:20:b9:1f:41:70:0f:26:7f:33:aa:
1c:6c:f8:99:e5:96:86:86:75:4b:e6:33:b1:e9:08:
9e:d7:0c:d9:23:77:1c:81:f3:8f:76:a8:e2:80:0d:
d4:f1:30:bf:41:85:03:c4:3f:32:b0:58:8d:76:bd:
d2:24:bd:98:18:45:97:9a:b5:56:2a:19:61:03:da:
a5:33:a7:49:fe:fb:04:44:46:7c:57:e0:79:b1:2e:
3b:94:43:b3:9a:3a:f8:ca:47:b9:b0:9e:fd:5c:c0:
20:37:01:3b:27:bf:1d:b8:a4:d4:72:68:6f:08:b4:
7e:4f:2b:c5:a7:70:fe:66:f9:7f:06:e6:95:00:d5:
bd:88:6f:30:9d:4f:3c:83:57:44:d8:4a:43:48:17:
80:43:0b:44:40:6e:5b:91:d6:ce:e7:3f:6d:b3:a8:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:20:7E:68:4D:7D:58:2A:4F:33:FA:6B:98:5B:E3:30:E3:34:B5
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f1:97:59:92:e5:4d:ff:d7:39:50:f0:99:76:e8:7e:9e:4a:
cc:01:2e:70:65:62:33:6a:c2:80:ca:23:b4:c9:78:11:6e:5a:
0f:ab:e1:7b:c4:97:f7:8c:13:82:0f:55:a8:55:df:a9:ee:32:
fc:b1:ef:6a:07:b0:b2:ae:77:24:f5:19:ad:16:92:1d:c6:0c:
38:a6:69:15:b8:4b:c3:3e:de:87:c0:a9:f8:6c:12:b0:7a:0c:
1b:49:ec:51:5d:ed:2b:55:b2:3f:7b:42:47:b6:47:cc:da:52:
c7:b2:de:ff:92:d1:27:5a:63:aa:86:34:11:4a:30:84:a3:2e:
7e:52:78:f1:01:e4:43:f6:8b:ed:92:56:5b:ce:08:1b:97:c4:
46:57:1b:b3:50:4c:f9:9a:4e:82:5a:0e:68:b9:be:0e:49:1b:
0c:96:77:97:fa:4f:3f:31:45:42:4d:d3:3d:cc:36:a3:dd:8f:
0c:b7:86:be:ee:06:b3:f3:10:f6:ef:ca:8a:0d:a2:14:43:92:
1d:df:6d:a0:76:e7:4c:ac:c1:8f:31:0c:c0:dc:4c:ba:c9:de:
fd:4f:43:3d:1f:7d:3d:4b:33:63:46:e6:1d:7f:f0:0b:1a:42:
6d:32:13:91:7e:b0:11:42:10:c6:e7:b3:a1:ba:9e:2d:db:28:
0e:10:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:34 2026 by rpki-client