Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: otbiFXhzl1yqgZ0gtemo32CsdBX7dVf+gjV7NB1Dx1U=
Subject key identifier: AA:B2:78:47:2F:63:DC:3B:42:33:83:2B:7D:85:B1:7B:76:63:DA:73
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 01A1833E1109BE9F94E75F1201B895037154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 0464
Signing time: Wed 28 Oct 2026 16:00:45 +0000
Manifest this update: Wed 28 Oct 2026 16:00:45 +0000
Manifest next update: Thu 29 Oct 2026 16:00:45 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: nDmA9cbtbruA1uRLGc6LG9UgMvMI137X1GR3bnDn0nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:11:09:be:9f:94:e7:5f:12:01:b8:95:03:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Oct 28 16:00:45 2026 GMT
Not After : Oct 29 16:00:45 2026 GMT
Subject: CN=aab278472f63dc3b4233832b7d85b17b7663da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:da:cb:62:dd:19:31:c5:90:b2:41:a5:04:
a5:27:e6:b2:43:0e:c1:68:9e:29:e7:00:c4:29:95:
ee:ce:6f:59:9b:86:de:73:13:08:5e:32:d6:25:e8:
e2:87:28:23:55:d3:0e:5f:9a:90:2c:c5:4c:c5:0e:
c0:66:9b:1d:f8:0b:3b:4d:6c:06:8f:b2:a1:ef:a8:
c7:02:a5:75:7f:d5:53:93:bf:c2:c2:37:b3:63:45:
e5:a7:4a:d5:c4:10:ed:89:54:ad:9f:c3:f6:fc:1d:
4c:61:55:3d:e0:6c:7f:e0:30:bd:26:d9:d6:d8:48:
bc:4c:59:e1:7b:d6:88:fd:30:1f:49:68:17:9a:44:
1e:9e:f3:25:e5:a8:c5:35:11:37:31:fa:5a:0a:97:
e6:f8:68:55:50:f6:b4:d4:bd:ba:44:5a:53:b3:a9:
c5:97:a6:38:c4:8c:3e:e8:86:6b:89:02:e3:de:71:
b3:51:57:1c:fa:2e:20:2d:6c:e9:05:21:b9:37:b3:
5f:32:ec:64:d2:0e:2a:a0:51:cc:97:88:6a:8c:a4:
06:8d:b0:37:d0:ff:57:24:30:22:36:b2:4a:9b:cd:
be:03:a6:da:2c:2f:a7:99:31:0f:22:f3:58:8a:2b:
db:ee:41:18:da:17:ce:be:6f:8f:27:cf:48:35:25:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:78:47:2F:63:DC:3B:42:33:83:2B:7D:85:B1:7B:76:63:DA:73
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:2b:ae:99:9e:ff:a8:e5:d1:aa:20:68:69:15:7e:84:e1:
6b:04:16:8c:54:d7:f9:9f:ba:73:b0:5f:5f:cb:9c:cc:28:b2:
a8:c0:f9:32:8c:1c:e6:bc:a0:6d:dc:34:ba:4b:e5:5d:e3:a6:
d7:a5:70:29:ec:4d:6f:bb:dd:95:d8:7b:8e:86:fa:a2:d7:34:
75:94:f3:78:07:54:e8:98:76:b2:c5:1a:4d:cc:b4:8d:5f:1e:
51:eb:87:0a:8b:18:38:20:88:22:0b:b1:46:1c:74:de:e9:d2:
71:01:84:57:f2:61:9b:e3:17:c9:3a:bc:1b:55:3f:c6:c7:66:
92:e9:89:68:69:b7:90:b8:fb:21:7b:6f:b4:7f:75:20:e0:0d:
a4:1c:91:34:70:c0:70:f0:03:d6:54:5d:a1:a7:5d:0a:40:94:
35:6a:c8:96:d0:92:d1:d1:0a:db:21:b7:0c:70:9b:cd:fe:2a:
c0:7b:b8:6d:05:20:3c:7c:32:cf:55:d4:59:5c:56:a2:3c:0d:
06:2c:ed:19:2e:a7:23:50:1a:fb:a7:35:eb:7b:d7:53:79:32:
3d:f0:2f:a4:b0:d8:9f:ad:96:2c:ea:9c:91:8f:3a:bc:b6:e2:
72:48:ff:68:aa:fa:01:36:30:7a:bc:42:ad:0d:2f:f7:54:35:
2d:91:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:42 2026 by rpki-client