Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: s/4S4735JHJsv9fjR7wLO7oE/uqyMVrpVxMtaZWRaNs=
Subject key identifier: 61:CC:93:8F:AA:3E:C7:49:DC:F7:2F:21:8B:61:27:D6:7E:E0:8F:EE
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019D3A5369F6D8B98DB92DB41FA44A1EDBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 022C
Signing time: Sun 29 Mar 2026 16:00:38 +0000
Manifest this update: Sun 29 Mar 2026 16:00:38 +0000
Manifest next update: Mon 30 Mar 2026 16:00:38 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: etTEsxvc+GIfpXgk0qrffhFMkHiC3c1wBaqJHyjuQZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:69:f6:d8:b9:8d:b9:2d:b4:1f:a4:4a:1e:db:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Mar 29 16:00:38 2026 GMT
Not After : Mar 30 16:00:38 2026 GMT
Subject: CN=61cc938faa3ec749dcf72f218b6127d67ee08fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:25:bb:27:06:3e:35:fa:e1:45:68:fa:ec:
e2:de:d8:db:2e:3b:d6:b6:9b:12:45:93:7c:25:b5:
4a:80:a2:29:4e:60:2f:9b:27:c8:4f:4d:5a:36:7d:
b1:88:f9:6b:24:9d:fc:f1:5f:5a:f7:79:c3:e2:ab:
2f:10:da:59:93:e7:6e:cb:c4:4f:0f:09:a7:86:43:
29:42:01:76:c7:5a:04:b9:6e:70:e4:dd:5b:0d:8f:
bc:07:d0:90:24:64:26:e2:e5:a6:39:9b:10:6f:45:
31:cf:90:b4:a2:f3:cb:7d:89:f8:fa:1f:b4:69:ec:
06:ef:fe:76:4c:e5:52:2a:d6:4a:1e:64:d6:ca:74:
da:c9:06:d5:e4:6e:67:6d:3d:f1:9f:a1:3e:a3:bf:
e8:ae:1c:2c:fb:ac:0c:9b:6c:76:ff:4a:00:4f:c0:
b6:24:8b:81:10:be:fe:6a:33:65:bf:22:c2:22:8a:
80:47:5f:3e:b7:f5:6b:7f:b3:7d:9d:a1:ce:52:a4:
39:3f:de:14:83:77:e3:2f:b3:69:ee:c8:db:5a:7d:
8b:6f:43:56:13:68:29:f7:6f:37:15:c7:8c:a8:28:
48:00:11:d7:6b:07:72:69:95:d0:ff:58:0a:89:68:
47:d2:29:d6:6f:91:54:c0:00:97:d3:9c:2f:29:07:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:93:8F:AA:3E:C7:49:DC:F7:2F:21:8B:61:27:D6:7E:E0:8F:EE
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:5f:d0:83:27:bd:39:c7:e3:d1:82:47:a3:0d:97:ca:9e:76:
04:07:b0:bb:14:4d:6f:c1:ff:24:0e:e5:c8:47:5b:45:7f:88:
04:59:9d:3a:d6:3b:6c:c0:47:af:25:fa:95:40:a7:42:54:28:
21:2d:d5:ae:28:7a:af:67:79:a5:14:ea:cd:96:8e:20:49:4a:
84:9f:27:8d:c2:bb:9d:24:47:bf:20:b0:15:ea:62:99:2b:d2:
7f:a1:bc:c6:61:46:e4:be:0b:a6:73:f4:e5:9a:52:1f:58:15:
77:98:8e:d7:06:f8:d8:87:d2:e4:8c:53:cb:5f:c9:d7:eb:5d:
cc:71:88:16:75:0e:aa:0a:f9:3d:dc:92:9e:9c:97:24:71:ea:
a4:b0:39:db:f1:78:e1:93:52:35:02:d9:bc:b1:91:91:a0:ed:
24:b3:3a:17:ee:0f:02:64:a9:3e:b9:e0:19:26:ee:c9:b2:5a:
ab:a6:a6:5a:02:03:81:90:d5:44:8d:1f:92:f5:e5:80:55:ee:
e1:1c:e9:2d:c5:54:08:c8:23:52:e7:a2:36:e5:a8:de:fb:77:
88:62:22:5e:d8:96:78:17:45:0b:1a:64:13:34:ed:c3:45:ce:
99:30:f4:a8:b2:8f:cb:5b:aa:06:ad:af:b1:32:60:05:d7:d0:
37:3a:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:40 2026 by rpki-client