Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: VKlbD2cWDgqtwMX3ItY9IDA4HAe4x6apN9MMSKWF9fA=
Subject key identifier: 30:4A:6E:75:5C:FB:B1:F9:74:B9:76:E8:1E:A9:98:42:BF:D8:C9:74
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019D37527B24AEF755ACA7BA3B35A1C46821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 08BF
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: yLigIC5O079adFbr+sLmH6hz+dq8ElgUli5XZv1z8CM=)
2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7b:24:ae:f7:55:ac:a7:ba:3b:35:a1:c4:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=304a6e755cfbb1f974b976e81ea99842bfd8c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:bd:52:cc:75:97:d2:6e:40:00:c5:09:79:
bd:8a:8c:5e:91:3a:78:44:f4:bc:84:5a:28:ca:c5:
23:d1:06:4b:e7:b5:7f:02:18:55:90:31:67:ba:99:
99:16:5c:2b:de:0b:24:a9:64:9f:5d:e1:c6:55:78:
09:b8:35:07:76:80:65:85:51:94:8d:56:b2:b6:7e:
fe:74:2e:d9:02:d9:05:27:94:2b:65:6b:30:19:3b:
b5:f1:4c:ef:58:3a:88:f2:3f:18:c3:ee:8a:38:c1:
26:6b:f9:0f:09:b8:d4:dd:e9:5d:6b:bc:c9:bc:55:
45:eb:06:7d:29:fd:fa:a6:d5:6d:b0:1d:a8:20:a3:
e3:15:f3:86:e9:14:1c:54:13:4e:cd:86:d0:79:51:
ba:29:94:c7:7f:0f:b4:ee:54:25:f9:0d:b9:c7:b7:
54:d9:ce:5a:84:c1:51:02:d3:dd:33:93:8b:48:47:
99:06:bd:a8:6a:6e:dd:6a:0d:05:5d:90:5b:9c:ca:
c9:64:fd:8a:e9:cd:3d:1f:ca:e9:a4:9f:de:45:90:
04:74:20:52:7e:91:da:4f:fc:07:e0:68:cc:d4:07:
fd:20:ae:02:6c:50:db:c9:9f:64:ee:8e:72:dc:4d:
0a:30:6c:51:d6:f0:c1:82:0b:2c:92:f6:93:06:07:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4A:6E:75:5C:FB:B1:F9:74:B9:76:E8:1E:A9:98:42:BF:D8:C9:74
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:f4:c4:8b:a6:ea:3e:6a:74:4b:82:a1:3e:a9:ac:d3:6c:
75:86:e5:09:13:1f:fc:92:72:7b:54:b3:24:64:29:53:e4:b7:
d0:19:35:fd:35:91:73:d0:cb:c9:04:4a:7c:81:fc:00:85:8f:
1c:31:b7:19:a2:b3:90:e9:3c:cb:6a:33:6a:75:a3:78:ba:57:
53:af:d9:da:f2:57:5e:a7:b7:51:76:44:1b:d3:b9:e4:ba:47:
a2:ac:2e:71:2d:c1:d5:c1:1f:0b:63:15:87:0f:b3:4c:bc:ba:
fa:ec:9c:d7:4a:1a:9c:30:21:9b:b1:cd:03:82:92:df:fc:7f:
a8:92:1a:fb:3b:15:0c:ba:3c:78:6d:a1:0f:8a:3f:a1:ae:8c:
54:3e:29:ac:e5:44:01:1b:50:a2:dd:f2:41:c9:db:38:20:11:
10:93:54:ca:f6:53:1b:44:c8:fd:dc:7c:e2:4a:20:70:ff:d0:
23:09:d0:ef:57:9c:7b:0b:70:6c:44:12:c6:23:45:dd:88:ae:
0d:d5:7a:53:78:e6:b0:27:d0:ea:9a:d5:f5:ff:f3:d2:db:92:
93:c3:ee:e4:cf:f9:07:5b:11:90:b2:fb:6c:86:4c:fc:2c:15:
30:49:35:73:85:9c:fc:b7:4f:5f:b2:d7:5d:63:94:4a:ad:80:
93:54:12:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UnskrvdVrKe6OzWhxGghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0
ODViZTEwHhcNMjYwMzI5MDIwMDQ1WhcNMjYwMzMwMDIwMDQ1WjAzMTEwLwYDVQQD
EygzMDRhNmU3NTVjZmJiMWY5NzRiOTc2ZTgxZWE5OTg0MmJmZDhjOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8+9Usx1l9JuQADFCXm9ioxekTp4
RPS8hFooysUj0QZL57V/AhhVkDFnupmZFlwr3gskqWSfXeHGVXgJuDUHdoBlhVGU
jVaytn7+dC7ZAtkFJ5QrZWswGTu18UzvWDqI8j8Yw+6KOMEma/kPCbjU3elda7zJ
vFVF6wZ9Kf36ptVtsB2oIKPjFfOG6RQcVBNOzYbQeVG6KZTHfw+07lQl+Q25x7dU
2c5ahMFRAtPdM5OLSEeZBr2oam7dag0FXZBbnMrJZP2K6c09H8rppJ/eRZAEdCBS
fpHaT/wH4GjM1Af9IK4CbFDbyZ9k7o5y3E0KMGxR1vDBggsskvaTBgeE5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBKbnVc+7H5dLl26B6pmEK/2Ml0MB8GA1UdIwQY
MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt
MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm
LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa/0xIum
6j5qdEuCoT6prNNsdYblCRMf/JJye1SzJGQpU+S30Bk1/TWRc9DLyQRKfIH8AIWP
HDG3GaKzkOk8y2ozanWjeLpXU6/Z2vJXXqe3UXZEG9O55LpHoqwucS3B1cEfC2MV
hw+zTLy6+uyc10oanDAhm7HNA4KS3/x/qJIa+zsVDLo8eG2hD4o/oa6MVD4prOVE
ARtQot3yQcnbOCAREJNUyvZTG0TI/dx84kogcP/QIwnQ71ecewtwbEQSxiNF3Yiu
DdV6U3jmsCfQ6prV9f/z0tuSk8Pu5M/5B1sRkLL7bIZM/CwVMEk1c4Wc/LdPX7LX
XWOUSq2Ak1QS/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:55 2026 by rpki-client