Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier: 945GsfogrBvNzqZ2remv0gAVAOjw6gDmSV/NBaChr4g=
Subject key identifier: 2E:1A:BB:B2:CB:1A:04:1B:37:08:25:1A:F6:C2:56:B7:62:9D:09:DB
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial: 019D37897A6624BCBC4255FE524684C0CC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number: 03AD
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: HF5zqPXN9kt9inQteOZzFMTE7II.roa (hash: R1fiWZdr3X5ktKLZaP8dhQLpBM9tv/J5IHD5dAofhUY=)
2: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: BVYMDX5juKLd0uDtjxS+UmdhUdGypjru2CvoQWQs4B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7a:66:24:bc:bc:42:55:fe:52:46:84:c0:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=2e1abbb2cb1a041b3708251af6c256b7629d09db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:65:bf:e7:77:64:ca:5b:69:ac:98:86:1c:
de:a7:41:da:08:6c:6c:03:c6:18:de:23:8d:a2:44:
31:5a:93:14:2a:b1:2e:4b:d9:db:13:70:ca:29:c0:
04:9c:40:41:ce:4a:ee:eb:00:69:7a:2c:be:6d:80:
7f:f9:70:92:18:44:44:f7:f9:67:3e:6e:74:0a:5b:
b7:d7:47:67:b8:10:38:e5:83:3b:1f:56:62:a3:7c:
48:1f:9d:2e:0a:dc:b7:4a:c1:df:be:01:92:02:72:
a9:f9:2b:f1:64:d3:04:3b:2b:74:ee:f6:1d:57:c1:
44:2d:fd:ea:b5:cd:37:80:7c:94:77:f3:c5:16:cb:
6e:e8:b3:67:74:7c:63:46:80:92:87:b3:c9:32:03:
fd:a1:00:54:0b:ef:20:70:81:1a:ab:24:53:77:15:
a8:2b:fa:a5:cc:55:65:a4:58:0a:69:db:bb:91:f0:
bb:2c:d7:4e:d0:ae:26:58:72:37:56:15:61:92:ab:
3b:7a:ea:33:01:6f:40:ca:f0:f0:55:6d:d8:a9:2e:
67:5a:c9:da:e6:43:fd:0c:6a:bf:82:e2:92:70:0c:
c3:b3:45:11:e3:2c:15:8e:bf:97:24:62:80:81:9e:
24:27:32:b2:84:83:9f:25:59:c4:a3:ba:32:00:44:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:BB:B2:CB:1A:04:1B:37:08:25:1A:F6:C2:56:B7:62:9D:09:DB
X509v3 Authority Key Identifier:
keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:0b:73:da:9d:11:46:b5:50:31:42:c2:f3:ae:35:84:be:
e8:65:62:c0:86:db:d2:82:8b:19:34:ab:ea:ec:40:14:b2:22:
50:f8:81:a0:48:6a:34:ee:78:a9:bb:95:eb:46:70:69:d8:ff:
59:0d:1f:40:2e:34:be:f7:da:bb:f7:ad:0e:2f:a6:98:dd:1f:
bf:72:06:c9:07:08:cc:03:5c:0a:ec:74:e5:af:35:96:c4:c4:
a1:a3:4a:52:88:62:c1:49:0a:d9:cc:fa:6f:d6:d2:59:f2:5b:
96:93:b3:4d:a3:3c:41:ea:d6:0b:cc:bd:64:0f:42:1f:db:df:
b2:11:8f:f7:26:c6:fb:53:2d:3b:70:a2:67:8d:46:13:04:cc:
be:85:92:3a:e6:d7:c9:18:54:40:e1:71:33:b5:a5:d9:07:3f:
5d:31:6a:65:ea:10:56:37:d1:e3:99:d3:15:60:c0:f4:9d:70:
7f:ff:45:42:b1:6e:3a:6b:8e:95:c6:7c:af:d0:c7:3c:02:2b:
82:3c:b0:53:b0:db:87:54:66:1d:2c:b4:57:5a:fb:71:85:6d:
3d:b8:95:70:c6:e3:a0:d7:b4:a1:88:d5:d3:9c:6b:10:cf:b4:
6a:ab:86:00:a9:1c:97:20:8d:2f:a4:e7:0c:36:1a:b5:09:9c:
17:46:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:09 2026 by rpki-client