Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: 9ZAiCv8g9fVM0Ge76tr5ttvshzFCEBuGvPqQNit/77Y=
Subject key identifier: 5D:4A:53:51:4B:5E:3D:45:0E:94:B8:EF:A9:3B:5B:53:3C:36:7B:37
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01A06E70CB5A431728AB083C9FD7430DE15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0C27
Signing time: Fri 04 Sep 2026 22:01:20 +0000
Manifest this update: Fri 04 Sep 2026 22:01:20 +0000
Manifest next update: Sat 05 Sep 2026 22:01:20 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: nFUDOWbPJvquqyeRnfnXQ8SIXP7qdzaOq31q1TerxXA=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:cb:5a:43:17:28:ab:08:3c:9f:d7:43:0d:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Sep 4 22:01:20 2026 GMT
Not After : Sep 5 22:01:20 2026 GMT
Subject: CN=5d4a53514b5e3d450e94b8efa93b5b533c367b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:37:1f:5a:43:76:00:f6:92:88:36:bd:b7:
3b:77:9a:bb:00:9b:71:95:00:76:7b:73:50:9d:ea:
ac:03:95:28:50:3f:fc:9f:f8:56:e1:d2:79:04:cb:
7a:e1:3f:6f:f6:45:b4:0a:28:18:06:69:4e:28:da:
7c:bb:35:df:f7:03:2a:1a:f1:b4:65:a1:d5:5f:d3:
3a:d7:5a:4e:fb:0b:45:0b:f4:e4:5b:4a:3d:e1:5a:
28:2b:40:13:41:07:b4:01:fa:7f:a4:90:b1:88:09:
82:74:0b:24:eb:27:31:d0:11:c7:b3:09:4d:25:be:
91:9c:dc:4d:cf:72:8c:ae:7c:34:45:52:ac:1e:cd:
4c:4f:c6:e2:71:57:5f:19:ac:e6:b1:04:3e:b3:29:
bc:3f:69:d1:f9:9a:57:64:0f:a2:1c:19:c4:9d:df:
f0:11:b9:80:73:80:8e:d5:02:c7:18:5b:32:23:40:
2e:d7:3a:85:da:8e:f3:e9:ab:2a:0f:0a:95:cc:f9:
39:1c:76:25:a6:7d:6a:cc:35:34:68:b2:7a:2a:49:
20:83:93:0a:75:45:1d:ff:d9:80:b1:0f:05:2a:db:
62:f1:ef:80:71:f1:2d:f4:79:58:f9:60:b0:c5:54:
1c:11:20:8a:48:55:71:f1:b8:b8:78:d2:ff:b1:9b:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4A:53:51:4B:5E:3D:45:0E:94:B8:EF:A9:3B:5B:53:3C:36:7B:37
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a2:eb:66:c1:0e:08:0a:95:a8:25:1e:48:75:80:40:23:a0:
e3:e6:79:33:fd:c9:c8:f3:3a:98:0a:87:42:2e:cf:94:12:45:
b4:cf:90:25:ec:54:8b:62:e0:58:22:e0:02:8b:56:ed:4f:82:
1a:86:29:86:04:ee:08:96:40:f5:69:cd:23:c6:6d:38:5f:4f:
78:18:71:33:43:c2:c3:89:75:8d:5c:e3:f2:52:35:9f:26:41:
32:af:ef:96:7c:c6:0f:52:06:30:88:6b:23:44:ca:2c:07:67:
2c:8d:58:ca:ac:3c:dc:fa:bd:0a:0b:f0:18:b9:1b:c9:ec:b2:
69:ec:ce:ea:94:c3:7e:9e:72:65:b3:8b:a2:d6:02:da:6a:26:
72:d3:19:f9:59:6f:8b:81:3e:ab:df:ce:20:83:9b:ae:81:be:
15:ae:6f:ca:d1:0b:9d:c5:39:da:fd:59:51:3b:59:72:cf:3f:
cd:10:bb:b9:3b:3c:41:41:6f:05:ed:c7:b6:09:fd:9f:2f:28:
34:fb:96:03:87:c7:ac:bc:7a:66:e1:10:48:8e:8a:6e:1d:da:
3b:16:6e:c3:cc:03:42:e2:db:df:e7:e2:4d:2b:23:e5:94:cb:
b0:11:91:d7:f0:18:0e:85:0f:c6:ca:4d:b2:e8:b3:1b:10:5a:
f7:05:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:50 2026 by rpki-client