Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: qWompelWbm3NZHZJYcJzLw5g7AUUSrpCp0Ma8FCyyG0=
Subject key identifier: C0:F6:C6:86:01:EC:F5:C7:56:BC:BF:CC:BB:D3:2F:10:46:8D:24:96
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 019D37C0C2DFCE32E2D789A2307DDA6E4110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0A7D
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: B7FWy34STJVsjF0Dt7GPv376Wz/iIivNObE/cZiKiFQ=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c2:df:ce:32:e2:d7:89:a2:30:7d:da:6e:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=c0f6c68601ecf5c756bcbfccbbd32f10468d2496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:c5:56:8f:3d:f0:ef:f2:7a:d8:6e:aa:09:
3b:70:79:d0:21:fc:07:f1:5e:77:1e:2c:67:d2:eb:
94:42:97:1f:64:29:44:7e:0f:13:3c:e4:db:06:f3:
38:20:20:c0:1b:23:7d:9f:ef:a1:be:b1:8b:b4:67:
68:7e:34:81:05:bd:48:ef:2c:0b:d1:96:dd:b5:83:
38:6d:a1:b2:4a:83:71:7f:c4:76:f0:84:29:f1:43:
31:5b:75:7f:c1:61:1a:62:86:03:75:9a:3e:28:41:
05:c2:1c:c6:ba:58:06:00:f4:f3:68:e7:cc:6f:61:
5d:72:97:21:b8:38:61:41:6e:29:7a:c2:97:95:58:
33:cc:dc:16:9c:31:1d:a9:99:43:19:26:09:0c:a5:
6a:3d:29:d2:1e:a2:36:62:b8:ee:0b:7e:a0:84:94:
c1:33:c7:87:d4:f0:7e:c4:27:29:1f:3b:54:03:bd:
a2:99:a8:81:6a:93:d2:65:de:ca:90:fa:56:66:b3:
82:2a:31:28:4a:1d:98:de:bd:70:1c:46:01:e4:5f:
91:24:88:31:69:cd:3e:d1:15:08:c7:c4:46:74:5e:
4c:41:c5:11:42:47:93:8c:cf:b5:ec:86:76:fc:60:
b9:3b:7a:45:c5:67:ff:b0:e0:57:25:df:54:b5:73:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:C6:86:01:EC:F5:C7:56:BC:BF:CC:BB:D3:2F:10:46:8D:24:96
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:dd:43:52:c2:2c:3f:62:81:29:ba:52:00:81:1d:df:78:
75:2e:8f:43:21:a9:f1:81:53:1b:a6:e1:66:ea:fb:39:e6:95:
fa:97:ff:0f:6d:3f:35:30:79:22:80:52:ec:2a:b3:6f:5d:bb:
73:93:db:9f:7f:98:79:e1:5f:ee:7f:1e:d0:42:18:80:1e:4d:
07:ec:c3:46:d3:ed:b6:11:37:9a:ce:f1:3c:d8:f9:c6:75:bc:
3d:89:8a:55:83:44:1e:d8:16:fc:60:47:be:df:35:df:fd:cf:
c2:75:93:ba:75:2a:08:9e:f4:ae:de:04:8c:18:2a:ca:2b:b2:
99:d4:92:00:94:84:2b:53:cc:04:65:d1:83:14:9b:1c:97:9e:
1a:db:0b:bc:3e:f0:2a:f0:9d:a3:b1:47:b7:95:63:bf:36:ee:
75:36:28:85:d4:f6:55:dd:67:7d:9d:67:ef:75:e1:a0:13:64:
54:64:c2:a3:1e:7e:a4:7d:c5:91:31:0d:8d:a9:1e:34:d6:72:
ea:bc:58:fb:f1:b7:f4:77:0e:88:d4:aa:11:34:24:d4:29:f2:
70:00:61:e5:51:1f:fb:18:1d:96:17:6f:26:e7:e9:55:c4:d9:
91:8c:ba:36:72:c4:76:02:db:8b:b9:78:5c:62:c3:d1:34:f5:
3d:17:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:25 2026 by rpki-client