Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.mft
File: Ili6DKWW_i8VXU6r6HN1naWu_gk.mft (raw, json)
Hash identifier: /ogx/qg7QmQiW5iVK1y2RP41jLz95TMZs2k4Z5pfxHU=
Subject key identifier: 56:BA:1C:52:D0:82:37:B3:06:D6:E3:28:12:EA:99:FE:E3:C0:0D:EC
Authority key identifier: 22:58:BA:0C:A5:96:FE:2F:15:5D:4E:AB:E8:73:75:9D:A5:AE:FE:09
Certificate issuer: /CN=2258ba0ca596fe2f155d4eabe873759da5aefe09
Certificate serial: 019D382E3F0139CDE071C8452DC9F42FBDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ili6DKWW_i8VXU6r6HN1naWu_gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.mft
Manifest number: 1B
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: Ili6DKWW_i8VXU6r6HN1naWu_gk.crl (hash: aWvtI2aLBAewytoOEEo0yj2pG6IM95BR26Yw7jXG2gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ili6DKWW_i8VXU6r6HN1naWu_gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3f:01:39:cd:e0:71:c8:45:2d:c9:f4:2f:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2258ba0ca596fe2f155d4eabe873759da5aefe09
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=56ba1c52d08237b306d6e32812ea99fee3c00dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:44:15:9e:98:da:db:9c:90:03:3c:6a:89:
89:8a:b3:4a:e1:73:d0:97:8e:8a:68:23:da:2b:9e:
7d:a1:50:3d:8c:dc:f5:8c:cb:35:bd:0b:7e:b8:0d:
09:8e:c7:6d:c5:c7:5f:92:b1:6c:74:03:df:b2:61:
2b:88:34:3d:51:ed:f7:1d:1e:87:ad:a7:1f:c0:70:
72:06:9b:47:ff:47:61:e8:0d:12:ed:ac:5b:13:dd:
dc:0f:0d:12:8d:51:72:6d:d3:8c:be:ff:06:78:c3:
55:d7:0d:a0:52:b1:77:f3:25:0e:1e:a2:94:07:0d:
cf:2c:83:95:37:6b:7e:f0:11:75:3f:04:1a:b0:b2:
11:9c:eb:08:92:77:9d:a4:59:af:f6:b5:1e:5b:11:
be:f0:ec:ff:81:c2:aa:38:37:89:ae:2c:16:e8:fb:
d5:28:61:fb:21:ae:8e:96:78:f5:c2:e4:af:bd:2e:
cd:1c:f5:24:10:98:5d:6d:92:21:45:5e:0e:c3:f9:
bf:f2:59:7b:e8:1f:60:aa:96:f6:ea:b8:e7:e2:a6:
81:1a:a3:1f:b6:89:6c:c7:f8:84:43:6f:94:85:e2:
18:c5:c9:d9:6c:dc:11:12:2a:d0:94:d9:a2:5c:16:
ac:b9:e6:50:6e:c1:2a:d7:20:91:83:1a:ef:d5:ed:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:1C:52:D0:82:37:B3:06:D6:E3:28:12:EA:99:FE:E3:C0:0D:EC
X509v3 Authority Key Identifier:
keyid:22:58:BA:0C:A5:96:FE:2F:15:5D:4E:AB:E8:73:75:9D:A5:AE:FE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ili6DKWW_i8VXU6r6HN1naWu_gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/59d5df-ab53-4d4f-ab45-1347d1c7d198/1/Ili6DKWW_i8VXU6r6HN1naWu_gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:af:1a:3f:fa:03:e6:9e:78:6b:a2:c6:06:fa:82:ab:a3:
47:f6:26:be:f4:cd:c8:bd:6c:fe:9f:9d:5a:14:3c:c9:b0:e8:
4b:e7:4d:99:04:84:39:2f:45:4e:ed:ef:d9:7b:e5:42:55:b5:
0e:89:02:23:63:05:37:db:9a:89:a0:1e:c8:76:e1:a9:c0:3b:
51:21:5e:2c:9a:e3:2c:e2:a4:3b:aa:aa:e0:57:4d:22:66:60:
f1:3a:a6:a9:13:79:48:30:f4:44:42:b6:66:0d:5a:1d:86:4c:
d6:31:ea:be:62:75:09:ca:1e:d0:37:d6:31:4f:de:90:a1:97:
02:00:6c:19:71:1e:3d:81:1a:8b:b6:de:45:eb:2b:15:fb:38:
6a:c9:22:b7:98:31:d2:93:8a:7f:50:aa:1a:d0:1f:37:4c:54:
a4:c0:db:6a:8f:3f:40:52:bf:f5:7f:86:0e:f7:7c:b2:8d:af:
e1:ff:cf:3b:76:e4:23:73:20:ff:ae:fd:6d:8e:7f:42:af:3f:
e3:7c:ab:aa:22:12:f1:85:43:91:2a:b8:b3:c8:d8:3a:af:4e:
28:5b:35:92:59:f3:79:42:4c:4c:f4:0c:72:cf:b5:30:96:df:
d2:31:d6:41:e7:86:bc:77:29:cc:30:db:36:61:9d:ea:00:f0:
25:f8:54:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:11 2026 by rpki-client