
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: HytKxFUIy5vcFL27Tk6MxBmfOtGMlkKgZeFJg3Q0PF0=
Subject key identifier: FE:38:BD:6C:65:D4:3B:2C:01:8B:02:FE:F0:98:73:35:58:7C:E3:32
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 019D12D8E81457304B04340FF2A014F6998F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 02E7
Signing time: Sun 22 Mar 2026 00:01:38 +0000
Manifest this update: Sun 22 Mar 2026 00:01:38 +0000
Manifest next update: Mon 23 Mar 2026 00:01:38 +0000
Files and hashes: 1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: v1UGM3p2oK6zum7CDKxF/i0cUwab9OsagtZnBQyXQns=)
2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:d8:e8:14:57:30:4b:04:34:0f:f2:a0:14:f6:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Mar 22 00:01:38 2026 GMT
Not After : Mar 23 00:01:38 2026 GMT
Subject: CN=fe38bd6c65d43b2c018b02fef0987335587ce332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:a5:d7:d0:31:65:d6:16:4f:d3:de:b7:5d:
11:a5:35:6c:2e:ce:45:7f:1d:65:03:22:49:8b:be:
a3:96:d1:d2:35:ff:48:8c:e1:d4:21:f1:df:89:42:
d1:3f:3e:54:d5:7b:65:52:6d:84:f3:eb:ce:7d:e5:
bd:32:a8:76:1d:71:c0:70:25:0c:7e:17:71:70:30:
4f:65:54:29:12:93:6b:20:42:3b:2c:ed:7b:bd:9a:
3a:36:ba:40:36:11:c7:4f:3f:01:15:73:27:4e:41:
d6:cc:cd:77:3a:82:a2:bd:c2:0a:42:50:fe:4b:d0:
fe:ad:f1:92:dc:ca:7d:86:64:09:ff:ec:5e:06:46:
12:e1:80:74:d1:35:5e:78:9b:bf:57:f6:e9:22:61:
ef:b4:35:82:02:61:53:0e:b5:da:84:fc:49:21:1c:
50:3b:fe:3b:db:9f:c3:7a:cb:29:91:49:dd:88:de:
f8:da:9a:8f:ca:a1:56:8e:fd:d7:87:34:c4:f2:88:
13:e0:80:1f:16:55:15:9f:36:7e:fe:98:1b:66:ce:
54:d8:08:72:ef:1d:17:7c:87:eb:96:c7:2c:9a:34:
42:c4:a3:03:63:39:53:ed:0f:17:ad:85:0c:c2:56:
b5:6d:de:53:9a:5d:a0:db:3a:4c:d7:8f:e2:a6:22:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:BD:6C:65:D4:3B:2C:01:8B:02:FE:F0:98:73:35:58:7C:E3:32
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:74:4c:2f:d8:ab:b0:77:6e:79:f9:94:f9:a3:48:a2:67:
ca:63:69:aa:8a:58:25:d4:3c:33:cb:fe:02:47:0a:66:5e:7c:
ad:af:8a:ec:3c:c4:86:34:3c:55:ac:81:3e:80:a0:93:d1:2f:
6f:f1:e0:ce:a8:e4:af:03:4e:30:10:5f:56:61:72:e8:d6:26:
41:26:16:ce:e0:79:a5:a1:3e:2c:64:bb:e3:19:05:0a:00:f4:
e7:73:14:87:b9:33:9b:18:03:65:8d:49:33:c8:69:ad:14:b8:
00:c0:48:06:01:b1:11:8c:15:02:9b:da:53:b7:17:05:7f:24:
6c:e6:6c:10:fa:40:5f:3b:87:e2:10:f9:59:0f:d3:cf:56:2e:
8e:11:8f:ac:a7:e1:04:b6:62:6f:88:9b:17:8c:19:1b:09:81:
6b:cf:ab:26:1d:5e:0e:18:f8:df:f6:1b:1c:d3:04:87:08:a2:
dc:37:69:4d:df:d4:5c:08:aa:69:32:3e:4b:4e:d5:62:ed:67:
00:fe:ae:3a:20:f4:59:0e:77:a6:7f:65:2c:f3:a6:f2:86:fc:
f7:5b:5e:20:22:4e:d5:5c:4c:d7:36:1b:36:98:7e:72:1c:1b:
04:a0:5d:ff:ef:fd:98:87:44:3a:16:fc:ca:37:b0:63:97:12:
18:d4:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:37:24 2026 by rpki-client