Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: FEOMKmbLz19aBEip8TLscMKJEJmfjKdFotNdP6kp/hc=
Subject key identifier: 9C:D9:23:C3:43:4F:4F:45:D8:80:94:EE:14:56:64:F9:2E:C4:7F:A4
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 01A17A3B068696D37E0CDB17D3503F0C9DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0462
Signing time: Mon 26 Oct 2026 22:00:50 +0000
Manifest this update: Mon 26 Oct 2026 22:00:50 +0000
Manifest next update: Tue 27 Oct 2026 22:00:50 +0000
Files and hashes: 1: ZTD8fuKRYiaNX4nVpyJD6qP1jDE.roa (hash: dRqWb02TjyID30U42GkJOuo0MEtt70RLk3I7RGNdjgE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: grCCqzWbqJnW9mKXzyzx6fU3oP8ArGmaes6GpVxf/Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3b:06:86:96:d3:7e:0c:db:17:d3:50:3f:0c:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Oct 26 22:00:50 2026 GMT
Not After : Oct 27 22:00:50 2026 GMT
Subject: CN=9cd923c3434f4f45d88094ee145664f92ec47fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:85:4d:32:a2:92:35:da:33:2a:94:b4:42:
ba:72:dd:3b:fb:83:4e:e2:2f:77:ab:03:94:1c:9a:
21:61:41:16:89:c2:0e:da:e2:88:37:fe:9f:3f:fd:
ec:de:a7:c2:95:c5:fc:72:9c:11:a5:11:9c:62:3a:
7e:a2:ec:95:29:96:d1:0f:5a:4d:4d:e6:14:b6:82:
09:89:7f:d1:3f:8a:36:83:d9:7d:56:fe:42:7a:31:
60:fa:a7:1a:34:ab:f5:a0:77:29:84:46:48:35:69:
40:ab:26:fa:b2:c7:88:25:18:a7:1a:06:bf:5b:75:
da:05:82:1e:48:eb:12:03:16:a3:42:70:3e:fd:19:
13:b4:83:75:f0:1e:13:78:43:6c:06:a0:ff:de:a8:
17:29:a5:48:c2:88:18:a9:a7:1b:5d:f6:a5:13:fe:
36:10:26:75:e9:be:ca:2b:20:92:90:74:25:0e:d8:
b4:6b:e3:11:62:3b:ff:05:cf:46:68:a5:87:c6:4f:
62:4a:6e:2b:c7:23:b4:07:84:5b:9c:b2:e7:ff:f2:
a9:e7:fd:51:c9:8b:9a:6d:36:a0:32:de:33:32:da:
0f:9e:fb:87:f0:1d:1d:d3:1b:12:00:ab:2b:0b:ad:
f2:cf:24:9e:0a:69:b9:5a:96:08:d9:a7:6f:d5:ec:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:23:C3:43:4F:4F:45:D8:80:94:EE:14:56:64:F9:2E:C4:7F:A4
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:06:ec:b9:6f:71:92:4f:25:55:1c:3c:a8:61:a6:71:e6:79:
22:c0:f1:75:7b:25:25:e0:a6:3e:09:28:fc:fb:a7:11:8c:94:
b3:83:9c:30:a9:db:11:e5:86:48:39:94:6b:d6:3d:5b:ec:51:
92:85:e9:3e:66:da:15:5c:a1:6a:14:15:23:f8:2e:02:40:cb:
46:32:50:b6:d1:bd:0e:b1:ef:e6:90:b9:c2:5e:d2:c2:24:e8:
1d:38:09:d3:14:3c:0c:5e:11:71:a3:0f:69:af:6a:32:1b:bd:
f6:db:65:4f:d6:3a:cd:26:5a:8c:a1:d6:f1:0c:21:c4:e9:e6:
c2:d1:63:84:29:67:fc:c7:e9:05:ed:3c:f9:ac:a6:d1:c2:1b:
27:95:f6:f7:a9:57:98:b8:87:69:45:04:28:e2:ec:b9:c3:02:
d1:6f:e3:22:ef:f0:85:15:9f:66:53:6f:a4:aa:cb:1c:0e:40:
05:2d:23:bf:4e:ac:ec:68:d4:17:61:e7:75:7e:51:b2:b0:7d:
dc:b9:23:d7:34:07:14:f7:23:5e:46:b2:a5:c5:69:26:e8:ee:
cb:42:64:d6:1d:1c:70:0f:77:32:99:1e:b7:fb:7f:77:73:a6:
46:a4:65:8c:ab:d5:0c:6d:30:c8:05:75:32:4e:ef:cc:49:4d:
ff:fb:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:50:26 2026 by rpki-client