Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: xus6AE0rNxY1aagK9CNLMNf/AGrRVPXW77+PIDqflpM=
Subject key identifier: B9:CE:D9:09:A6:46:42:7A:1D:93:C6:B0:D0:85:B7:09:0F:A7:5A:48
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01A06FBA0DA1111343BAAA64313D27BDC946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 04:00:59 +0000
Manifest this update: Sat 05 Sep 2026 04:00:59 +0000
Manifest next update: Sun 06 Sep 2026 04:00:59 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 089Ie6MQjvgvpiidO584S4KfjHSHK1E08b0DLZ5FJjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:0d:a1:11:13:43:ba:aa:64:31:3d:27:bd:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Sep 5 04:00:59 2026 GMT
Not After : Sep 6 04:00:59 2026 GMT
Subject: CN=b9ced909a646427a1d93c6b0d085b7090fa75a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:79:09:fb:c1:74:13:8d:dc:c9:48:d0:1c:
3e:f7:ae:2a:5f:a7:ef:ac:38:d4:46:84:02:19:84:
86:7d:4f:09:98:ca:6d:1e:f6:d3:fe:ed:10:db:85:
fb:34:d6:3a:0e:21:d3:54:3d:cc:fa:8f:0e:9f:68:
1d:0f:30:ad:b8:09:12:05:b9:0b:8c:6d:16:06:68:
01:7c:9b:26:44:2b:7e:69:d3:9e:e9:5b:1d:d9:db:
f2:51:da:a5:9b:dc:7d:c3:27:1c:e6:78:93:99:b2:
f7:00:3e:9e:29:62:c8:51:1f:f0:ed:ae:1d:25:11:
b2:82:0f:c3:d6:4c:90:52:31:89:db:5d:77:b7:3e:
fe:59:b3:50:ae:28:ea:60:d3:7f:63:ab:68:ab:87:
17:6a:96:5c:2d:8a:a2:33:ef:9d:b7:f5:64:e0:68:
10:32:f3:b2:35:a0:05:8c:29:4f:c1:7a:9f:ba:b2:
d2:9c:18:1b:a4:cf:76:ee:e0:b3:f2:6a:7c:0b:7d:
b3:ab:23:2c:cc:1a:97:61:0b:b1:62:05:59:66:0c:
2b:5c:31:39:bb:96:02:41:92:f1:bf:7d:45:f9:4a:
06:69:71:ea:d3:d9:2e:00:33:bd:ee:2a:7c:9c:28:
2e:a7:aa:09:0e:b4:69:ec:ef:e4:f7:9f:2d:cc:21:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:D9:09:A6:46:42:7A:1D:93:C6:B0:D0:85:B7:09:0F:A7:5A:48
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e6:5e:22:2f:5d:06:3e:3b:a9:9a:dd:2c:df:29:c0:2c:26:
e8:10:c8:c6:87:74:a3:68:18:8b:bb:ce:87:da:c8:5a:98:2c:
e2:a7:6a:2c:46:24:1f:af:4c:93:25:b8:2c:cc:8d:54:aa:4a:
98:f9:88:60:84:3f:e5:41:e9:5d:11:45:34:10:d1:af:41:db:
8a:7f:f0:86:c6:44:cd:7e:93:6a:d4:d2:26:73:54:02:f7:08:
bb:b0:aa:62:13:23:46:cf:74:ab:ec:69:2e:81:40:cb:0a:ad:
f5:8c:a1:22:83:03:9e:3b:56:8f:49:c0:34:57:9b:ce:f5:4e:
00:74:6b:fa:14:96:9e:9b:50:33:73:45:93:43:7f:76:84:94:
cf:b2:53:16:24:65:99:9c:cd:58:74:5f:a0:bf:be:41:33:1b:
8c:5a:a1:81:04:e2:4f:78:d5:d7:b1:2f:a0:61:53:11:45:14:
fc:13:20:51:98:f8:b5:da:7d:02:b3:cd:6a:97:16:33:46:41:
6e:ab:a0:e4:39:c7:9d:f0:58:8a:5a:01:67:47:f4:e5:85:82:
0a:d4:43:ca:1e:80:6f:cc:75:63:70:a7:81:d0:d4:f8:40:c0:
f6:b7:ff:07:87:6e:47:81:1a:e6:e3:25:dd:b8:25:0c:f1:25:
ef:cf:32:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvug2hERNDuqpkMT0nvclGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm
MzJmNDgwHhcNMjYwOTA1MDQwMDU5WhcNMjYwOTA2MDQwMDU5WjAzMTEwLwYDVQQD
EyhiOWNlZDkwOWE2NDY0MjdhMWQ5M2M2YjBkMDg1YjcwOTBmYTc1YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg55CfvBdBON3MlI0Bw+964qX6fv
rDjURoQCGYSGfU8JmMptHvbT/u0Q24X7NNY6DiHTVD3M+o8On2gdDzCtuAkSBbkL
jG0WBmgBfJsmRCt+adOe6Vsd2dvyUdqlm9x9wycc5niTmbL3AD6eKWLIUR/w7a4d
JRGygg/D1kyQUjGJ2113tz7+WbNQrijqYNN/Y6toq4cXapZcLYqiM++dt/Vk4GgQ
MvOyNaAFjClPwXqfurLSnBgbpM927uCz8mp8C32zqyMszBqXYQuxYgVZZgwrXDE5
u5YCQZLxv31F+UoGaXHq09kuADO97ip8nCgup6oJDrRp7O/k958tzCGuUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnO2QmmRkJ6HZPGsNCFtwkPp1pIMB8GA1UdIwQY
MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt
OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx
LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeZeIi9d
Bj47qZrdLN8pwCwm6BDIxod0o2gYi7vOh9rIWpgs4qdqLEYkH69MkyW4LMyNVKpK
mPmIYIQ/5UHpXRFFNBDRr0Hbin/whsZEzX6TatTSJnNUAvcIu7CqYhMjRs90q+xp
LoFAywqt9YyhIoMDnjtWj0nANFebzvVOAHRr+hSWnptQM3NFk0N/doSUz7JTFiRl
mZzNWHRfoL++QTMbjFqhgQTiT3jV17EvoGFTEUUU/BMgUZj4tdp9ArPNapcWM0ZB
bqug5DnHnfBYiloBZ0f05YWCCtRDyh6Ab8x1Y3CngdDU+EDA9rf/B4duR4Ea5uMl
3bglDPEl788y/w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:47 2026 by rpki-client