Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: ndk7nYdS3BGO41zs54PZqx0c2y49K7W+PDKoO9OEkjk=
Subject key identifier: DC:60:E0:21:5F:DA:BF:CF:2B:AD:E1:64:96:41:76:AE:56:5D:15:D8
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019E32984B17F55CAD8EDACDD0BECDACE960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 02AF
Signing time: Sat 16 May 2026 21:01:41 +0000
Manifest this update: Sat 16 May 2026 21:01:41 +0000
Manifest next update: Sun 17 May 2026 21:01:41 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: 6Z9mybR3qGQ5KiV6VS+jbJA2pXKWvVj0vrv/kuaUqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:4b:17:f5:5c:ad:8e:da:cd:d0:be:cd:ac:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: May 16 21:01:41 2026 GMT
Not After : May 17 21:01:41 2026 GMT
Subject: CN=dc60e0215fdabfcf2bade164964176ae565d15d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:a2:f0:20:ac:7e:20:55:57:68:8b:1d:14:
bc:e1:18:05:1d:2d:4c:9a:ec:42:35:db:55:84:f6:
21:7e:6c:a9:75:dc:94:5f:f2:fc:3d:c9:c9:68:b3:
73:c4:8c:d6:88:ca:e2:79:0c:e0:13:74:de:6a:a3:
dc:96:34:db:3a:a1:af:55:16:99:01:e7:d5:56:dc:
fc:e4:57:b0:73:14:13:0a:00:e2:51:dc:2a:e4:be:
62:7e:ac:f0:d4:1a:38:28:2e:2e:71:e8:6e:4d:87:
ce:7a:6a:ef:4c:8d:3d:84:5f:55:a3:23:92:ba:09:
85:a2:4c:7f:af:e1:be:86:fd:2f:50:45:9c:3e:4b:
1a:97:8e:ff:9d:c0:2c:98:71:0a:36:1e:9f:0a:20:
41:14:59:b5:a1:35:64:37:a4:2b:62:32:9d:38:56:
64:2f:8d:b8:d0:e1:8a:7f:99:75:53:5a:ea:66:65:
10:b0:2f:37:18:cd:13:86:0c:30:c8:3b:6b:6f:d7:
b4:44:5a:ad:43:0f:da:29:55:cc:49:53:e0:3a:8f:
32:0a:2d:43:ab:70:f4:86:d4:7c:ba:b2:67:63:d6:
11:2a:32:80:10:68:bd:90:77:0e:54:07:2e:8e:02:
7a:8c:e6:3f:91:fa:de:18:7d:3b:05:a1:e4:fc:f9:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:60:E0:21:5F:DA:BF:CF:2B:AD:E1:64:96:41:76:AE:56:5D:15:D8
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:65:cf:41:0a:5e:c5:d9:d7:98:dc:70:e1:9d:19:5a:ed:a5:
a5:11:ff:c4:88:b9:78:87:31:b9:10:b5:48:06:b7:98:51:ef:
db:68:ba:ca:b6:8e:ea:cc:f6:67:2c:7d:ed:49:f7:38:9c:0b:
df:fe:0c:1d:4b:47:21:a5:37:ad:11:98:60:25:7f:43:08:38:
a2:1a:12:81:2d:af:3d:5c:d6:a9:54:b6:ec:63:f0:a5:01:77:
8b:5c:e3:86:9a:d5:5b:71:6e:ed:39:ac:41:1f:30:55:ba:13:
8a:25:5e:38:97:23:69:fe:86:86:3d:87:56:43:79:a4:6e:55:
64:64:25:cf:43:1c:9e:df:7b:22:13:7a:47:57:7b:5b:17:fd:
29:5c:05:03:02:f3:90:9a:71:34:3d:92:dc:b2:ea:b9:6b:1a:
34:ee:88:51:55:70:fb:af:cf:d7:0c:0a:5b:a1:81:5b:23:e9:
84:b4:d1:77:45:c1:ff:cb:8d:85:18:cb:f5:78:98:22:0a:06:
85:fe:ba:b9:85:19:dd:5f:73:f9:b6:ed:d8:a8:d5:4a:9b:53:
41:20:4d:9f:f2:da:05:c0:96:4e:84:fb:e9:eb:ae:1a:8d:53:
67:2d:dc:a1:46:b5:c2:54:46:82:68:6a:9d:dc:7d:fd:a7:72:
da:8c:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:32:40 2026 by rpki-client