Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: bXVUfpO2oCakGyAFT8KD6o07gMnSWuk05yoxdGAB2A8=
Subject key identifier: 3D:27:B9:1C:9C:95:7C:7C:8E:A3:F1:29:02:2A:9E:F7:7E:61:84:3C
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 01A17F61B0216918E470FFD4476328395BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 0462
Signing time: Tue 27 Oct 2026 22:01:10 +0000
Manifest this update: Tue 27 Oct 2026 22:01:10 +0000
Manifest next update: Wed 28 Oct 2026 22:01:10 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: qgoTDIXDCjGKsgV42qWlYnP7VLtFTUjnEbA/HKDTNlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:b0:21:69:18:e4:70:ff:d4:47:63:28:39:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Oct 27 22:01:10 2026 GMT
Not After : Oct 28 22:01:10 2026 GMT
Subject: CN=3d27b91c9c957c7c8ea3f129022a9ef77e61843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:76:26:7f:d2:c1:49:f0:aa:66:f9:06:1d:
6d:7c:b1:2a:d4:69:97:63:56:00:89:2f:2d:67:47:
74:d7:85:19:58:6e:11:34:f3:f7:2c:c1:ab:9f:1a:
65:ff:29:3d:a4:e1:ec:69:2e:e5:f5:d6:06:6d:51:
e6:48:4b:a9:fe:7a:76:49:dd:5d:d1:7f:ee:81:81:
97:dd:7c:0e:65:2d:d9:4d:98:5a:60:15:e2:cd:cf:
df:b9:ef:db:0d:11:b6:c5:c3:87:1d:f7:a8:0c:5b:
6b:1a:b0:6e:14:db:ac:42:f8:95:00:99:1b:e3:fa:
c3:2f:eb:fb:35:0c:de:f2:7e:54:77:e1:00:39:5a:
52:61:47:82:d9:9d:d0:0a:94:61:14:75:21:b4:e5:
0e:23:f4:7b:29:88:39:b1:7b:8f:06:f1:be:c6:72:
de:d0:bc:f9:9f:8f:0f:6e:84:0c:0a:bd:0f:92:02:
97:36:1f:fc:d1:53:65:91:1e:15:4c:d5:96:cd:db:
44:3f:b4:66:64:12:38:81:17:d5:d5:a7:61:45:2f:
65:39:62:c2:fa:3a:2a:94:9a:a6:59:88:3b:0a:cc:
4d:ec:d7:d1:66:01:b3:2c:ce:e9:44:67:c1:c4:b7:
d5:50:f1:26:c1:f2:d9:a4:18:92:ae:d6:af:d2:bf:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:B9:1C:9C:95:7C:7C:8E:A3:F1:29:02:2A:9E:F7:7E:61:84:3C
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:22:9f:36:fa:b8:d0:1e:08:40:35:af:ca:c6:47:f8:69:9c:
75:f2:67:20:c4:e0:51:79:ae:0f:0d:68:70:ae:6b:e6:57:67:
72:a7:3f:78:d3:02:da:3f:88:e2:7c:39:89:02:b9:74:bc:e2:
97:59:5e:81:f6:4e:3d:60:cf:b2:a9:41:2a:da:18:e1:d8:b4:
1c:bf:91:cd:53:e0:f7:fb:39:91:33:48:d7:68:f8:8e:70:f9:
87:4e:8c:d6:8a:45:51:31:31:38:85:bb:1f:54:cb:df:dc:11:
2a:f2:42:81:a4:ce:99:fd:1b:68:07:c2:d4:b2:e8:50:60:1f:
76:a8:46:be:ba:70:11:9b:cf:5b:f9:b9:4c:f4:d0:c2:da:81:
e5:87:6c:22:dd:fa:49:dc:3f:ab:4c:eb:9e:5e:53:bd:1a:89:
f9:b2:5e:f2:16:d1:9b:c2:18:78:e0:e6:8c:71:26:8c:41:4d:
a3:ed:5b:20:ca:00:8e:dc:4e:59:48:46:73:a0:30:15:9d:c8:
50:e1:e7:c5:25:ce:d9:26:ca:40:90:d7:ba:ae:3a:23:19:60:
a4:1b:90:02:01:1a:a3:06:a4:24:67:ff:52:af:1a:91:ce:97:
dd:27:3d:e8:93:d7:2c:8d:45:36:d8:ae:e2:8d:1b:78:fa:fa:
c0:d7:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:14 2026 by rpki-client