Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: Nicv57gizh+nswkHwT24kVLB0g43bizRzVdS/vZijK4=
Subject key identifier: 07:0A:A6:9E:D8:CC:A1:4B:55:A6:CD:D5:DA:0A:7C:79:29:61:20:A3
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019F867AD8FD411974EFCF8B43BE937E4081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 035F
Signing time: Tue 21 Jul 2026 21:00:25 +0000
Manifest this update: Tue 21 Jul 2026 21:00:25 +0000
Manifest next update: Wed 22 Jul 2026 21:00:25 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: NRm1ahOwHEOnrCp6XgqwhH/nZzKZlUNnAF24AKLC1O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:d8:fd:41:19:74:ef:cf:8b:43:be:93:7e:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Jul 21 21:00:25 2026 GMT
Not After : Jul 22 21:00:25 2026 GMT
Subject: CN=070aa69ed8cca14b55a6cdd5da0a7c79296120a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:5a:55:5c:68:f4:8e:9b:d4:e6:1a:b3:e3:
27:64:32:92:13:98:0b:91:7b:d8:d7:d9:22:fd:95:
7e:b5:8b:51:b9:7b:42:da:51:4e:62:ae:d6:82:22:
d4:52:e9:74:c3:c8:f9:c3:92:3f:a5:9a:84:35:d4:
03:3e:04:4f:ae:e9:8f:4a:df:cd:fb:de:f1:15:e4:
a0:68:97:c6:bf:bf:18:8e:cb:42:37:ac:78:d6:dc:
cf:e8:9a:bf:ba:77:5b:b1:e4:a6:1a:31:ba:9d:59:
ab:d1:dc:13:34:d6:98:5d:02:c3:86:e6:a8:07:b2:
7f:80:c7:76:a5:20:2b:3d:03:d7:60:3c:0b:26:d0:
a0:80:d6:bd:de:d3:f4:4f:9c:a5:cc:d4:66:ad:d0:
8a:b9:f3:85:86:30:cf:62:b6:81:57:52:66:12:9a:
04:fe:e5:a1:2a:9e:70:30:0e:dd:28:6a:86:23:71:
87:0d:9f:93:0d:c4:f2:e9:3f:28:76:23:11:5d:c3:
e3:b2:d7:ed:8b:66:10:62:23:b3:a3:8b:be:e1:bc:
d7:76:74:18:5c:67:a2:76:7c:dd:33:0d:d8:41:89:
d9:c1:b0:0d:df:f4:9d:a5:1c:bb:f9:4d:e8:d8:ed:
4f:7c:c1:09:a6:ac:85:3d:0c:f8:c2:ac:5c:5e:5a:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:A6:9E:D8:CC:A1:4B:55:A6:CD:D5:DA:0A:7C:79:29:61:20:A3
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:83:b4:e0:26:60:06:7e:5e:ec:b8:36:52:aa:ed:74:92:10:
f1:08:b7:61:9a:9c:e6:bc:5d:cc:e0:ce:db:bb:57:d3:b1:3b:
fd:15:b9:2b:43:7e:34:1e:bf:58:ee:50:b9:4c:f1:20:8d:46:
f2:37:0f:93:89:52:21:95:ec:7a:fd:8d:3a:b5:88:92:8d:2f:
bc:81:dc:fb:49:88:62:2a:95:53:63:54:04:09:8b:f5:6c:17:
fc:bc:d7:2d:3b:27:04:19:43:d4:b3:05:cc:e3:b9:88:3a:67:
eb:bd:fc:14:17:8d:2e:d9:61:7f:6b:69:27:7b:67:06:2a:36:
d3:42:54:db:7e:47:8d:c6:39:a8:cf:e6:fa:10:4e:3f:a8:01:
fc:56:9d:1d:d9:e8:1c:92:29:87:21:57:1a:78:2b:15:67:67:
0c:97:10:96:06:43:33:19:f8:ae:25:f5:17:f3:ef:4c:1c:06:
6d:56:bb:16:53:81:a3:ff:2a:60:81:d4:98:24:36:8f:dd:c8:
8a:a0:04:05:03:97:1d:b2:1b:cd:51:cb:df:b5:a3:29:81:4e:
5e:54:29:1e:83:7a:65:c2:51:a1:be:13:2c:6d:86:25:d0:e5:
fc:d8:a1:2b:4b:f0:35:a2:cf:0c:2b:67:3a:88:35:30:25:84:
83:b4:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:04:49 2026 by rpki-client