Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: EXWwB4PKCfPX4zMLnwD1InUK+k5ZRvvGgb/x/0vtUKI=
Subject key identifier: 7C:14:EE:06:FE:51:1D:B0:03:68:95:14:C6:45:BD:25:6F:29:3B:4C
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 01A12767BA5F16D03A0885ED24A657098FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0F2A
Signing time: Sat 10 Oct 2026 20:01:11 +0000
Manifest this update: Sat 10 Oct 2026 20:01:11 +0000
Manifest next update: Sun 11 Oct 2026 20:01:11 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: vSKdfHTduzysFBY7IcwE+h86dqiar24f7FT2idUtbkM=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:ba:5f:16:d0:3a:08:85:ed:24:a6:57:09:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Oct 10 20:01:11 2026 GMT
Not After : Oct 11 20:01:11 2026 GMT
Subject: CN=7c14ee06fe511db003689514c645bd256f293b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:d6:96:ec:23:84:44:1a:b4:8a:69:da:17:
6d:38:50:ef:fe:c6:5a:11:37:34:99:69:ae:75:d9:
6e:24:59:57:e2:03:e4:4f:d3:a2:1f:79:6a:8f:fd:
d1:e8:d9:19:ff:9a:c7:64:2e:b1:b4:41:fb:7e:3a:
4d:aa:4b:eb:0d:37:e1:d9:14:5b:5b:77:45:f6:dd:
94:df:57:1b:5e:7c:9e:62:b6:10:42:d1:81:54:2f:
d2:03:b3:d7:a0:8c:52:2a:f0:b5:ee:58:56:f3:77:
88:b2:4a:d4:6a:c8:b3:36:fa:52:a9:06:91:ae:6a:
f9:d3:90:3e:41:a6:12:9a:3e:de:d6:1f:c4:0f:7b:
09:15:db:c9:9a:10:f4:6e:22:57:97:86:fc:71:ec:
ac:2c:13:c5:c1:af:64:e0:9c:9c:98:27:32:2e:9b:
2d:c1:b6:92:1d:4a:cc:5d:db:72:f4:fe:0e:4d:86:
de:79:42:d6:d6:52:ba:77:0b:ac:0a:6e:1e:18:7d:
c3:a3:38:59:39:c9:7f:19:f3:15:68:91:c4:48:ea:
51:e4:07:f0:1e:10:5b:d0:e1:b5:79:e2:c0:ec:45:
76:9c:e5:7f:5f:15:86:ba:3a:5a:1b:6e:ca:e6:24:
b3:61:29:fd:0c:66:47:f3:68:38:63:51:06:f0:0c:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:EE:06:FE:51:1D:B0:03:68:95:14:C6:45:BD:25:6F:29:3B:4C
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:df:12:b8:3d:75:6c:3a:56:13:9a:94:c9:4b:da:8d:68:
15:4e:21:63:b4:e1:b9:0c:0e:01:a6:8b:eb:9d:eb:df:9c:50:
93:d5:f4:6e:68:75:7e:a7:b0:82:9b:8a:94:1f:9b:cf:80:b0:
68:56:ae:0f:68:31:f8:93:af:60:71:d7:35:f0:66:16:9b:77:
ca:54:63:a4:4b:15:99:91:50:59:36:0c:87:1a:2d:38:f8:71:
0b:10:21:c4:28:96:3d:17:dd:93:76:ba:16:c7:e9:5d:66:f0:
4a:08:a5:f5:21:f4:5c:9f:4a:ab:34:59:ed:ba:d9:99:02:e4:
e7:5a:88:73:ca:27:9e:4d:d5:88:b3:e6:b4:30:c3:f4:da:89:
ef:07:e3:80:55:97:94:a4:e4:3e:92:29:d2:e8:ff:32:42:58:
49:03:6a:1c:97:89:a5:12:d7:8a:31:12:7f:da:19:be:2d:87:
da:b9:b8:61:ec:a7:d2:ff:cf:fa:05:0b:34:1f:fd:40:07:7b:
64:2b:94:61:1d:7d:e7:f4:9f:c0:93:d9:84:5d:ad:e4:8c:d3:
a3:5f:7b:66:be:cb:d0:c8:09:41:8c:8b:d9:92:5d:05:c6:c0:
1d:7a:6f:f5:29:e5:f8:e0:1d:dd:31:72:d8:89:09:9a:e5:09:
ef:44:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:23:40 2026 by rpki-client