Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: 3qjiTK0U5m4LXS+hgiOsyt23Na82UAHtXfn1QlmUI/U=
Subject key identifier: 07:A6:10:D9:EF:CE:99:AA:3A:95:E9:E6:FA:78:D4:0F:B9:6C:A8:0A
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 01A06E39E05B61C54A5A87549DC045CDB5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 03D7
Signing time: Fri 04 Sep 2026 21:01:21 +0000
Manifest this update: Fri 04 Sep 2026 21:01:21 +0000
Manifest next update: Sat 05 Sep 2026 21:01:21 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: 01aFdxJdT8hgdL1masoAbBXfRoIrsN34m+mW7inrDGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:e0:5b:61:c5:4a:5a:87:54:9d:c0:45:cd:b5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Sep 4 21:01:21 2026 GMT
Not After : Sep 5 21:01:21 2026 GMT
Subject: CN=07a610d9efce99aa3a95e9e6fa78d40fb96ca80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:87:a5:c0:01:54:13:5f:73:72:e1:e5:eb:
f6:8a:fe:d1:96:07:ce:fa:11:29:0d:c0:a9:ff:49:
57:47:aa:5a:3e:9e:4c:bd:4c:a6:aa:b5:f3:54:38:
c3:6c:db:e2:c2:ea:f6:1a:3e:5d:c0:4d:e8:07:26:
b0:b8:16:0f:40:53:34:1e:4d:fd:74:25:f8:3a:3e:
fe:d1:7a:79:37:4e:c1:67:35:6d:53:92:b8:7a:e7:
1b:bc:1b:e0:a6:7e:a2:e1:24:0d:f9:b4:6a:e5:25:
9a:89:d2:a0:14:7d:14:0e:25:ea:83:18:cd:f6:c1:
4c:8e:a3:f3:a3:4c:68:1a:24:d0:77:2e:05:aa:3f:
78:c4:4e:a9:4b:12:84:a4:0b:fe:d5:ed:e3:7c:e8:
a8:f0:ae:6e:f9:34:89:05:76:bc:e6:c6:75:b0:6f:
16:80:25:69:32:a6:b5:4b:26:cc:84:67:ce:63:30:
6d:13:15:77:13:b0:df:66:6f:43:7f:7a:9e:fc:b6:
88:c7:7d:5b:b8:aa:17:25:3e:de:63:f4:56:91:ab:
23:a9:31:5e:2d:04:f9:b5:23:14:2b:c2:04:5a:50:
6f:4a:50:49:0d:6f:38:e0:ab:d2:2e:fe:73:2e:6b:
7b:5a:0d:a6:33:11:ed:1e:51:44:a4:69:c3:e6:e9:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:10:D9:EF:CE:99:AA:3A:95:E9:E6:FA:78:D4:0F:B9:6C:A8:0A
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0a:0e:0e:40:04:d6:da:22:bb:dc:85:34:af:93:eb:69:f3:
8c:e7:c0:6e:29:22:df:b9:26:db:ae:d6:af:ad:db:93:27:fc:
23:2c:10:e6:27:46:b7:9b:aa:d9:31:7d:3b:02:f0:dc:30:e1:
a4:7f:b0:d5:ec:95:80:f0:67:60:05:b4:e3:4f:6a:8b:c5:2e:
20:84:35:7f:19:9b:14:c9:12:86:69:15:25:a9:a8:58:1d:1f:
fd:e4:f4:c0:7d:20:38:db:37:e4:4f:4f:6c:6a:b1:5a:69:d7:
7d:da:3d:bb:c0:c5:8b:e2:88:4d:32:fa:89:e5:a0:84:20:77:
81:f5:eb:eb:4f:2b:49:6e:e4:b0:04:d3:87:fc:b3:92:74:21:
7b:e1:33:b7:5a:ab:ed:83:e4:9f:62:91:2d:5a:67:97:41:d9:
e0:82:c0:9b:ae:45:92:15:e6:fe:dd:a4:bf:8d:59:da:d1:21:
9d:1d:08:5c:02:68:d7:90:1b:95:4d:e1:23:94:11:fe:da:be:
dd:4c:3e:8d:df:a3:b9:ad:11:28:7a:22:47:f7:b2:67:5c:bb:
c4:f1:56:87:4a:c6:f2:45:0b:e8:0f:e4:de:d6:80:97:40:4d:
05:f8:22:30:15:6d:00:99:2f:3c:2b:8c:33:2c:d1:6f:d4:30:
01:42:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:21 2026 by rpki-client