Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: RC74paaP9rJr2DPPwWvcDzwQDF4d3Aik05nmlDqJTOQ=
Subject key identifier: 3A:62:73:46:40:B2:C4:12:8C:13:AD:61:84:EA:81:3E:DA:C4:07:BE
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019D375228A996E258D5CB3D31A0A107DE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0D20
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: z0hfYmjOcZanSOhXct7JzlKJttf+mJpbG3AUJ6migIE=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:28:a9:96:e2:58:d5:cb:3d:31:a0:a1:07:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=3a62734640b2c4128c13ad6184ea813edac407be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:c3:70:c4:bb:23:94:10:ec:df:7c:e5:ee:
bb:e0:95:b2:05:2e:b8:fe:c6:87:dd:60:23:30:4a:
44:c4:a8:ed:98:b4:dd:8d:df:d2:c1:ea:bc:eb:de:
75:15:63:1a:d1:27:76:a6:b5:ac:e3:c7:e3:14:0e:
01:38:f1:6a:aa:9e:88:c7:b7:e5:15:19:35:f8:16:
8d:a6:b9:01:14:1a:d6:c3:c8:af:a4:81:83:e2:87:
79:ba:3a:36:54:aa:bb:f2:0f:b5:fa:d4:0b:ee:92:
59:b0:56:04:de:e2:cd:e6:d0:2c:af:55:68:15:6d:
60:cd:b0:c6:2e:a1:0a:8a:a1:ab:29:07:6b:45:ae:
ec:2b:4c:12:ca:4b:8a:92:00:c5:a2:55:b2:ff:b1:
9d:84:01:11:c7:a4:7d:a1:e9:7e:a7:e7:72:8f:31:
f4:fa:72:fa:f6:1c:02:da:14:8c:5f:8f:4a:04:3a:
0a:4c:be:76:dc:02:34:72:ad:de:d6:2a:68:e0:c2:
ac:bc:dc:d7:c9:ad:a4:32:a6:51:b1:9b:b0:47:0d:
f9:4e:00:fa:6e:d2:19:ac:11:6b:35:c3:72:03:c6:
65:bf:64:8c:0f:5c:35:9e:5d:80:74:d0:90:98:85:
cb:6c:56:bc:b1:34:e0:9a:a1:d7:cf:fa:8e:61:5c:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:73:46:40:B2:C4:12:8C:13:AD:61:84:EA:81:3E:DA:C4:07:BE
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:67:69:61:38:b3:58:21:d3:24:66:89:35:b0:e3:ed:e1:
de:84:0f:40:d1:fc:17:8c:79:88:d0:e7:39:6e:8b:19:a5:e8:
0b:59:29:a3:08:77:08:f5:91:6c:e9:34:70:9a:b3:9d:45:a8:
d9:2b:91:b9:ea:f3:75:07:d2:dd:aa:8b:89:dd:9e:9b:66:e9:
c6:3d:1f:60:4a:65:fe:fd:ce:8a:af:bd:d4:88:8d:b8:90:eb:
49:0b:03:be:c3:ce:45:c0:ae:ef:82:23:cb:6d:15:19:c8:8e:
0f:d4:96:9a:0d:24:cb:73:6a:79:85:3d:3a:b3:3a:a1:b7:5b:
db:94:e9:1e:d5:3f:ad:60:d7:80:ac:da:ce:fe:09:14:34:9e:
59:ed:c7:14:c9:33:b3:cb:ba:09:a8:31:6d:1e:32:cc:dd:71:
9c:bf:b8:7d:a9:a2:64:cb:ec:cc:19:4a:f2:59:44:46:c7:15:
11:32:2e:63:09:9c:ac:4c:c7:63:09:e1:46:f4:b5:08:da:bb:
06:3f:04:42:6d:ab:d9:ed:63:61:ab:67:1a:58:ac:78:fb:62:
55:89:c6:31:c4:aa:15:2f:a1:d5:b7:f0:d2:e9:47:7f:53:6b:
df:95:f0:71:e2:c3:48:d4:a2:35:e5:cd:9e:a6:81:8a:0a:e4:
67:ad:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:14 2026 by rpki-client