Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: nLercZDYLSSYpMDbXlxJ6WHlgPYxw9x62IbctSOhzJ4=
Subject key identifier: EA:81:D6:CF:9B:39:D9:16:22:46:5D:3A:1E:B6:BB:AE:59:21:83:CF
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019E921417C9FDC41007E8F879887500AD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 02DE
Signing time: Thu 04 Jun 2026 10:00:50 +0000
Manifest this update: Thu 04 Jun 2026 10:00:50 +0000
Manifest next update: Fri 05 Jun 2026 10:00:50 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: 5pBIbW2JN8TYDjW3V4yede9eJfl4nc5wr2n6MOjWDEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:17:c9:fd:c4:10:07:e8:f8:79:88:75:00:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Jun 4 10:00:50 2026 GMT
Not After : Jun 5 10:00:50 2026 GMT
Subject: CN=ea81d6cf9b39d91622465d3a1eb6bbae592183cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:ac:26:a8:14:0a:e3:1e:f1:cc:4c:67:8d:
79:3f:57:0d:ee:68:ad:6a:64:cc:94:35:c3:d4:04:
97:d9:cf:44:fc:03:01:ef:5c:b1:72:0a:8c:dd:f5:
08:df:9d:a2:04:c5:53:28:80:05:7f:b3:ad:ff:82:
d0:6d:6b:8a:4b:6e:bc:39:c9:29:dc:f8:d4:3d:32:
ef:47:10:5b:08:6e:c2:2b:69:39:76:3a:39:34:96:
cc:9d:93:67:2a:e8:a1:52:d3:9a:1b:eb:ef:f0:48:
67:c4:97:46:e3:3e:93:49:99:66:8f:9c:0d:a5:99:
66:0e:55:3f:06:3c:72:2d:cc:be:3a:51:1b:cb:ab:
e0:c3:60:96:31:8a:43:a7:1c:6b:46:67:93:9c:88:
c6:26:32:2c:d2:b0:1d:8f:4d:7b:a2:f5:70:ed:be:
b4:9c:f9:ed:c7:ba:da:6b:32:d3:b8:c1:20:a1:bc:
2d:c1:22:ae:10:4f:15:e5:62:e6:c0:d3:1f:9c:95:
20:2f:1c:5f:20:01:93:60:6d:70:7a:c3:43:55:04:
0b:39:23:a7:25:29:a5:e6:8a:f7:67:22:dc:40:66:
7f:15:10:fd:af:3e:fc:58:3d:23:fb:b0:bd:f8:09:
21:dc:01:e5:a4:65:a7:3f:ea:99:74:f5:39:1f:f3:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:D6:CF:9B:39:D9:16:22:46:5D:3A:1E:B6:BB:AE:59:21:83:CF
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a6:1b:a2:fd:0d:8f:03:27:cf:54:cb:a8:58:6b:62:85:ca:
4c:fe:5b:b6:6a:25:4f:9b:2c:b0:3e:11:d3:12:6d:d0:fb:87:
b6:1f:7a:73:f4:1a:79:58:3b:51:c8:eb:d4:b3:73:51:06:58:
aa:b5:dd:48:3e:6c:d3:6a:a1:bd:1d:4c:ca:4e:fb:bf:c5:67:
6a:b4:84:11:9b:82:9a:d4:13:71:93:1e:ca:8a:d9:a1:f1:28:
df:1c:7e:b5:78:5c:5e:ee:1c:3b:f3:10:59:7b:c0:57:49:0c:
83:e2:57:07:ff:b6:84:2d:d4:4b:3c:13:c6:ba:be:24:45:66:
79:43:ee:3f:4d:ee:e0:af:d2:39:f1:1a:9b:4c:24:b2:fa:d4:
8d:ca:b4:9e:1c:e1:39:f2:1e:e7:04:f1:87:0f:28:e1:aa:06:
dd:4d:21:0c:6f:35:33:07:f1:34:49:2a:1e:34:98:da:38:00:
81:f2:91:c1:48:f0:49:5b:38:bc:3e:36:e0:2a:50:95:17:ed:
b0:54:c8:0c:87:d4:bd:97:f1:43:ae:77:98:0a:33:be:b3:f9:
e8:04:08:e1:ef:17:a8:d1:35:4b:65:df:c2:d8:a7:ee:23:c8:
1d:10:c6:99:fe:2e:3f:94:80:b7:db:0d:ac:a0:17:b8:04:66:
28:22:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:22 2026 by rpki-client