Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: /Xys/ObfJkirOv4S7Ye56BF9O03VEEbqnaEX5sVDd74=
Subject key identifier: 18:AE:E2:98:60:3F:70:4A:F1:0D:23:0B:9F:66:56:A9:B4:8D:0B:36
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01A183E2D24DDE578CF5F71EAE3AE9110877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 19:00:42 +0000
Manifest this update: Wed 28 Oct 2026 19:00:42 +0000
Manifest next update: Thu 29 Oct 2026 19:00:42 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: tWNRVOybqj5JTpihpWYzXF4jCXKYwkc9Lfx7D1joNWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e2:d2:4d:de:57:8c:f5:f7:1e:ae:3a:e9:11:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Oct 28 19:00:42 2026 GMT
Not After : Oct 29 19:00:42 2026 GMT
Subject: CN=18aee298603f704af10d230b9f6656a9b48d0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:9c:83:b1:d2:af:57:36:ba:26:9b:02:5e:
b0:d9:c3:58:b5:89:86:6e:fc:6b:7f:14:91:bc:6d:
13:e6:80:98:a1:0e:07:21:58:d2:89:ea:fe:d6:86:
38:83:5b:cd:30:e5:79:00:d2:28:c7:4c:48:b9:82:
e9:b4:2a:e1:36:28:78:b6:15:f4:37:a6:36:0f:d0:
6f:cd:13:f5:4e:b9:25:2e:cf:9d:35:b3:6a:7b:c0:
7e:c0:ef:90:56:39:f3:c9:4d:74:79:bd:4d:25:fa:
76:c4:06:8e:89:f5:9a:01:89:d7:d0:90:f8:d5:1c:
48:80:ad:59:d1:d9:c1:f8:13:d0:a2:05:23:a4:68:
ff:be:0b:a9:7d:b6:c0:7c:e3:28:31:e9:43:8b:2f:
27:b5:27:df:dd:ec:4e:0b:ab:1d:4c:4b:70:fd:5b:
15:3c:bc:59:a3:8a:4f:77:35:df:4a:2d:76:09:46:
0a:90:47:96:f0:3b:6d:27:c5:91:6f:c1:8f:f2:71:
7e:2d:93:37:54:c0:0b:bc:0e:bb:c0:f5:53:ee:c7:
53:72:dc:b7:d0:5e:9f:05:df:90:32:d8:f6:f8:63:
3e:13:49:d4:0b:6b:bc:25:87:55:9a:9e:dc:51:be:
dd:0e:65:84:bc:19:e5:d9:ef:4a:2b:c6:5d:02:89:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:E2:98:60:3F:70:4A:F1:0D:23:0B:9F:66:56:A9:B4:8D:0B:36
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:c0:cf:65:64:b7:70:ea:2e:d0:bd:ac:2b:f7:fc:7a:9e:
d7:cf:18:ba:cd:5c:ad:5c:a9:bd:17:e2:04:90:b5:cc:fc:67:
2d:0c:e6:ff:c1:b5:ac:a4:d5:d0:9b:34:40:5e:a1:cb:96:db:
50:bb:58:62:f1:53:62:b4:2e:d6:79:24:ea:9c:12:9d:25:79:
d3:e2:4f:e4:9b:93:49:96:19:0b:6c:fa:1b:e6:b3:8d:6d:d6:
78:26:24:2c:e4:9b:97:36:ad:6a:fa:52:89:06:51:d8:37:4f:
01:e1:c0:95:72:70:b5:7e:c5:52:aa:4d:57:e2:0b:b8:ac:58:
75:98:3b:02:f7:b7:84:10:85:61:33:76:53:0c:74:bd:10:bc:
ef:fe:48:e8:45:41:cf:bf:9d:ff:9d:91:b0:31:1b:e6:a1:a8:
c7:13:3f:b8:76:a8:d1:ef:43:ed:8d:c7:d3:66:e8:fa:26:34:
62:60:e3:85:07:81:0c:4c:86:72:86:54:64:36:f3:ab:ef:2f:
37:b5:c4:67:99:e9:47:14:d9:28:e8:67:90:98:4f:2f:f4:4d:
27:9c:e4:72:d5:df:27:7c:85:31:98:69:70:5f:8d:22:f2:94:
da:5c:cb:6d:ed:7a:1d:3f:12:a9:3b:dd:df:30:fd:69:3f:4f:
52:2a:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:59 2026 by rpki-client