Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: UfIaVIn7iP6oYDKE/uVfeJoCAmdlluYfAbjB79WrtwY=
Subject key identifier: F3:EF:38:6E:A5:FF:75:3E:E4:3A:F9:83:91:BC:B6:72:50:0F:3B:22
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019D389C0B554801568DA933E937AD72BBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: MDqHIAQqRJ21FDOKDqd47kwVawE.roa (hash: JM0qYFhlEjOgLC0YDCxZLuXg/pZxwWeXNOdGs2yHaFk=)
2: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: EPX4euFA/NhaaJrpcSHTs3K52zu3CXUcFJ/myMZpW6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0b:55:48:01:56:8d:a9:33:e9:37:ad:72:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=f3ef386ea5ff753ee43af98391bcb672500f3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:25:87:d8:07:cc:ee:37:07:b4:96:ab:e0:
48:77:a7:52:a7:f0:9b:0a:e7:e4:84:ae:6f:28:63:
a9:da:76:da:95:fc:d7:a5:5e:d9:4a:7f:1d:0e:fa:
b3:c2:2c:0b:67:32:5b:50:bb:46:c8:27:b9:8c:ad:
e4:95:3f:3b:f4:f5:78:85:1f:85:28:23:c7:d4:8d:
75:51:a5:87:9b:49:88:81:29:d0:9c:c2:ca:eb:76:
f0:9c:b7:8d:4a:05:55:39:4b:68:91:49:5c:78:ea:
5f:76:9d:c2:66:01:64:ff:33:53:9a:f6:b0:9f:6d:
03:0e:ec:57:53:ac:4d:13:42:92:1b:e8:bd:3c:af:
45:2a:e3:2a:b2:78:ad:9c:61:22:0a:0d:89:38:f7:
a4:c9:9e:69:f1:25:36:6b:be:31:d4:8d:8a:da:b1:
ac:23:2b:86:58:ae:49:69:c0:4e:65:45:cb:34:10:
0e:df:85:0a:49:d3:91:8d:71:bc:48:ba:fb:6e:34:
b0:62:db:2d:12:f8:c7:f0:16:4b:d6:f8:eb:cf:31:
be:f9:15:c4:5a:ec:c7:19:ac:3f:80:19:85:14:88:
0e:bf:3e:0a:37:3c:47:0f:52:f8:2a:08:57:14:0c:
c3:23:c6:03:c9:f9:41:b1:3b:6f:d2:31:b6:29:11:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:38:6E:A5:FF:75:3E:E4:3A:F9:83:91:BC:B6:72:50:0F:3B:22
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:14:1c:c7:cd:6b:2f:a1:e1:80:c0:00:6e:09:94:d3:bb:
ed:f6:d1:bc:af:ab:a0:38:98:37:f5:7a:cc:b2:aa:45:7e:8b:
70:9e:37:1b:d1:45:8d:81:1d:32:40:8e:0b:68:81:23:87:40:
e0:1e:5f:40:34:da:45:7d:17:bf:44:29:3f:1c:3f:23:26:65:
e6:36:69:d7:41:94:b1:86:61:e6:5c:61:d4:92:1a:59:cb:1f:
17:65:0e:a3:11:a6:2e:ea:7a:16:d6:15:2d:47:85:af:2a:8e:
66:43:b5:d7:9b:b7:3f:24:07:93:0a:39:64:b1:73:c3:06:6f:
04:22:dc:2a:30:52:3d:19:20:d9:2f:97:a3:d7:79:f4:e2:90:
b5:d4:45:45:19:50:a4:8c:ce:78:92:7e:7f:c3:01:d0:9d:90:
ac:b8:be:27:f1:22:96:e0:d8:41:9a:af:26:32:7d:d1:9a:61:
ea:2b:ad:28:cc:d3:3a:9c:53:95:5e:21:d4:59:fb:e4:b1:c0:
d8:16:13:a1:51:78:7d:6f:85:02:84:a1:2b:58:b4:1e:28:a8:
24:8d:51:8b:1c:dc:70:1b:2c:bd:3c:6b:18:69:70:fd:e6:ec:
df:6d:0c:92:93:da:e0:cf:41:c2:97:4f:48:07:e6:c5:7e:65:
c9:03:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:53 2026 by rpki-client