Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: wUN7j/wVXUjsITDFYxr2v3TEoTm2App9Mm701TYj3dc=
Subject key identifier: 8F:66:C5:FC:D1:AC:8F:04:6C:24:21:44:12:98:41:56:ED:10:F5:AD
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019D397794CDDD13D0E4713FE68292C961F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 022E
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: aC6p05/Fg+CsSauEbYrViGFn3Ld6td6I9G/j1jN3S7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:94:cd:dd:13:d0:e4:71:3f:e6:82:92:c9:61:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=8f66c5fcd1ac8f046c24214412984156ed10f5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:9f:16:8e:a7:eb:6f:27:61:4a:66:21:04:
2b:20:fc:63:40:2d:06:cf:87:0a:a1:53:a9:5b:b2:
f1:2e:17:a8:4d:70:87:b4:a5:67:d0:d7:54:c0:3d:
7b:f3:80:18:e7:0b:92:36:b5:10:71:54:15:96:bd:
84:71:84:90:f0:f1:84:e5:22:c3:37:86:b2:d0:b8:
81:33:b8:3c:17:2d:dd:92:20:f2:4c:f5:16:92:ca:
d3:2e:d1:80:28:3d:2b:4d:7b:28:da:ec:56:b0:a0:
be:5b:0e:d3:07:89:72:8d:7b:04:91:e8:28:55:32:
9e:fb:41:bd:41:73:99:54:1b:ee:1a:35:0d:5b:d9:
d2:28:c5:98:06:b6:fc:db:23:6d:32:ef:a8:60:6e:
6b:4c:23:0a:d3:d7:e0:a7:8d:12:e4:ce:b3:76:9a:
5f:b4:54:28:8a:57:e6:3e:ea:cd:5a:f6:30:4b:fc:
a2:91:b2:c8:62:4e:7a:1e:bf:e4:ad:e5:70:8d:9c:
f3:fe:bc:38:7d:14:7e:0b:5d:10:2c:39:07:2c:f8:
64:cb:5b:fd:5c:91:ef:de:ab:9b:db:14:fe:35:72:
e6:c5:47:06:0f:d9:12:36:5e:35:13:4f:08:66:bf:
19:fa:12:48:c3:fd:8d:74:67:c3:51:8d:ae:39:16:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:C5:FC:D1:AC:8F:04:6C:24:21:44:12:98:41:56:ED:10:F5:AD
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:1b:3f:77:b5:b4:80:84:ea:1a:7d:e1:fb:a2:03:b0:18:
c2:bc:f9:5d:3e:b0:08:34:da:ce:ff:aa:4d:ef:6b:4d:3f:68:
05:b7:7e:04:6a:4d:41:64:41:f2:b7:33:e4:e0:18:d5:3f:5a:
11:5d:e7:41:26:06:44:b5:ff:d8:9e:39:eb:79:91:80:a2:e9:
1f:20:d2:08:04:98:e3:c7:55:dc:25:de:95:de:a4:0a:df:48:
f6:6e:a4:ad:23:59:ba:f4:bd:5d:a9:cb:2b:cd:4e:6d:7e:9a:
30:85:30:1c:e5:96:36:49:0d:cc:61:43:7f:96:4b:54:d6:fc:
7b:b1:cc:3a:17:82:35:87:e1:ba:68:7f:32:27:28:23:94:cc:
6f:ba:56:48:48:8f:bb:a7:b9:2c:9b:af:5a:de:b3:0f:3a:b4:
23:d2:3b:81:b3:99:ab:75:b6:70:6c:71:ad:01:b2:8b:38:e0:
a6:95:84:70:e1:6f:ec:d7:8c:70:c8:c8:ca:17:90:44:02:6d:
f4:53:cc:73:49:71:8a:5e:12:9d:34:ea:38:49:98:8b:bf:84:
31:9f:52:59:f6:6b:dc:03:a9:d7:9f:fb:1c:0b:22:8c:2a:5f:
4a:a9:15:4e:f5:f9:34:71:67:32:e7:a3:96:3d:5c:6f:3b:7f:
12:6b:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:24 2026 by rpki-client