
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: wmaRnWIyzm2zs+Kwo9bYyXcO6RwKJnUUEbms4zk1nbk=
Subject key identifier: 66:E6:F5:8B:48:1F:7A:19:CB:10:56:EA:FA:6D:4C:43:83:60:10:96
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 01A0268E438F8E1C2D5E326C5DAB79F1096C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0EA5
Signing time: Fri 21 Aug 2026 23:00:52 +0000
Manifest this update: Fri 21 Aug 2026 23:00:52 +0000
Manifest next update: Sat 22 Aug 2026 23:00:52 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: I2UNXjrN5cxTA4Y89TMJZBdGwg4t+KdZTg1P5an5E3Y=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:43:8f:8e:1c:2d:5e:32:6c:5d:ab:79:f1:09:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Aug 21 23:00:52 2026 GMT
Not After : Aug 22 23:00:52 2026 GMT
Subject: CN=66e6f58b481f7a19cb1056eafa6d4c4383601096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:cb:db:8d:58:9b:19:fd:9e:0f:ae:3a:3b:
72:6d:38:51:3e:91:d4:af:10:33:19:d1:f3:95:d6:
4b:24:68:77:c1:75:02:73:1b:fd:b6:7f:fa:9f:ac:
0f:a0:41:59:a1:48:c9:a5:d4:bf:b1:71:19:e1:02:
31:7e:15:65:fe:35:ca:13:48:c0:4b:cf:c4:39:e3:
b8:60:44:b9:6e:17:bd:0a:2d:fd:ad:ba:68:60:bc:
98:0f:dc:6d:f4:9b:ec:b4:8f:80:8c:9a:38:44:fb:
bd:f4:e9:b0:e0:f2:b8:7f:08:11:22:b4:3d:b6:cc:
78:1c:7a:67:46:77:e2:6f:a4:1e:2a:69:70:e6:15:
f3:2e:bb:28:36:1d:c8:7a:53:3e:b2:9b:82:fb:9a:
4c:cf:92:66:0b:9b:da:a1:50:a7:8f:7c:da:55:b2:
92:32:4b:88:23:05:82:0e:b1:dc:05:c0:6a:27:d8:
6e:54:f7:a2:5a:12:71:13:6e:89:0e:38:f6:06:ff:
87:3f:55:c8:6d:4f:da:5f:4a:ff:ea:50:fb:e5:c3:
f8:18:3f:50:c0:6e:a7:ae:2d:9f:72:eb:bb:fe:1a:
e6:6b:74:ca:90:f7:98:93:22:d5:7e:f4:36:a3:d5:
c3:f9:7f:4a:f1:4f:44:10:a0:38:48:36:c7:45:2c:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:F5:8B:48:1F:7A:19:CB:10:56:EA:FA:6D:4C:43:83:60:10:96
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:37:dc:96:85:33:08:53:9d:e9:5d:7b:e0:bc:cb:3c:2b:
99:36:d5:94:e7:d7:92:45:23:19:43:75:9b:e1:09:c9:83:80:
5b:44:27:0a:99:37:6f:df:a5:f8:07:cd:91:41:f1:0b:b0:97:
e3:51:a4:e2:93:1b:2b:ba:48:83:65:13:07:ac:0b:d3:22:51:
70:7f:7c:77:cf:fa:86:88:63:96:51:49:b2:92:e3:13:15:84:
91:e2:39:37:cd:a4:39:a7:1c:42:25:f4:99:0d:d1:01:94:8b:
2d:88:2d:8b:28:ad:ea:e0:40:6a:ca:42:c2:84:94:95:8b:e9:
7e:ec:1b:70:fd:1e:d4:00:dd:be:44:f7:e1:85:bd:0a:16:b3:
11:24:9f:8b:e3:57:51:ad:1a:ae:45:50:9a:b7:fa:ea:29:a9:
a8:64:61:8d:3f:e3:e5:51:19:a3:81:4a:b9:f7:39:52:b5:3e:
b8:dc:65:b8:96:6f:91:cb:8e:03:fa:c8:ec:b5:1a:37:9b:91:
61:dc:2c:75:47:2f:ad:03:f6:b5:62:3f:4c:bb:b6:9a:69:eb:
91:26:15:bf:a7:13:b1:44:3e:13:16:58:07:fd:b7:9a:97:35:
2e:43:29:87:90:09:97:47:bf:8d:c6:41:ae:72:1f:46:25:6a:
06:44:52:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmjkOPjhwtXjJsXat58QlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwODIxMjMwMDUyWhcNMjYwODIyMjMwMDUyWjAzMTEwLwYDVQQD
Eyg2NmU2ZjU4YjQ4MWY3YTE5Y2IxMDU2ZWFmYTZkNGM0MzgzNjAxMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhHL241Ymxn9ng+uOjtybThRPpHU
rxAzGdHzldZLJGh3wXUCcxv9tn/6n6wPoEFZoUjJpdS/sXEZ4QIxfhVl/jXKE0jA
S8/EOeO4YES5bhe9Ci39rbpoYLyYD9xt9JvstI+AjJo4RPu99Omw4PK4fwgRIrQ9
tsx4HHpnRnfib6QeKmlw5hXzLrsoNh3IelM+spuC+5pMz5JmC5vaoVCnj3zaVbKS
MkuIIwWCDrHcBcBqJ9huVPeiWhJxE26JDjj2Bv+HP1XIbU/aX0r/6lD75cP4GD9Q
wG6nri2fcuu7/hrma3TKkPeYkyLVfvQ2o9XD+X9K8U9EEKA4SDbHRSyX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbm9YtIH3oZyxBW6vptTEODYBCWMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPw33JaF
MwhTnelde+C8yzwrmTbVlOfXkkUjGUN1m+EJyYOAW0QnCpk3b9+l+AfNkUHxC7CX
41Gk4pMbK7pIg2UTB6wL0yJRcH98d8/6hohjllFJspLjExWEkeI5N82kOaccQiX0
mQ3RAZSLLYgtiyit6uBAaspCwoSUlYvpfuwbcP0e1ADdvkT34YW9ChazESSfi+NX
Ua0arkVQmrf66impqGRhjT/j5VEZo4FKufc5UrU+uNxluJZvkcuOA/rI7LUaN5uR
YdwsdUcvrQP2tWI/TLu2mmnrkSYVv6cTsUQ+ExZYB/23mpc1LkMph5AJl0e/jcZB
rnIfRiVqBkRS4w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:48:40 2026 by rpki-client