Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier: CZC44VCC5AX6HU1PjaMu1MyJALzNDGQsJ4CFvAubfS8=
Subject key identifier: D1:3B:B2:2F:47:EB:D2:A5:BD:CA:3F:70:06:4C:58:FC:D7:77:3A:02
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer: /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial: 01A0852EC8FF0E6FE29E168DDFC3F2C7FF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number: 01E8
Signing time: Wed 09 Sep 2026 08:00:30 +0000
Manifest this update: Wed 09 Sep 2026 08:00:30 +0000
Manifest next update: Thu 10 Sep 2026 08:00:30 +0000
Files and hashes: 1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: RVvSEyrSC/nOuO6OQTkzr1qBbeOzWX7UkklGwv04B9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:2e:c8:ff:0e:6f:e2:9e:16:8d:df:c3:f2:c7:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Validity
Not Before: Sep 9 08:00:30 2026 GMT
Not After : Sep 10 08:00:30 2026 GMT
Subject: CN=d13bb22f47ebd2a5bdca3f70064c58fcd7773a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:61:2f:4b:fe:e4:22:d0:de:de:d9:a5:53:
fc:b7:51:9d:a3:fc:e3:13:55:9f:23:58:c7:21:4a:
03:84:4a:3b:41:ed:0a:34:5d:4a:22:7e:0d:cd:56:
fc:c7:08:9c:f3:79:72:06:d7:61:2e:6c:de:87:20:
9a:c7:df:a0:fc:09:c7:12:d2:f0:d2:74:df:5d:b6:
77:7a:49:df:13:ac:ba:b8:37:7b:c3:bf:b4:51:19:
d5:2f:98:c5:e0:6a:9c:d0:ac:25:9f:a5:e3:e5:95:
a0:6a:07:ce:3c:84:ba:83:55:1c:fb:33:ff:c1:fa:
b5:10:c6:0c:df:02:92:5f:22:8c:cc:cd:f1:26:2b:
08:ff:89:02:7e:0e:c0:f4:28:0a:70:51:41:e3:d7:
51:5f:6c:e1:8f:c8:0a:5a:64:e8:7a:95:c2:70:fd:
e2:76:f2:29:bc:8b:85:77:02:c3:ca:27:a1:eb:39:
f1:ac:91:ee:cb:68:8f:9f:79:58:c5:57:f6:3a:15:
50:5a:e3:c4:9c:0e:b9:32:5d:1d:9c:f7:41:ee:ab:
2e:3e:bb:f6:24:d9:10:42:cd:e9:4c:67:89:df:af:
f1:40:33:bd:64:a7:8e:00:76:0f:e3:69:a3:17:d7:
0b:15:25:d4:9b:22:43:8c:02:f5:6d:6e:13:4e:86:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:B2:2F:47:EB:D2:A5:BD:CA:3F:70:06:4C:58:FC:D7:77:3A:02
X509v3 Authority Key Identifier:
keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:7e:f8:4d:d5:3b:ba:59:9a:f0:7c:10:a7:02:60:c7:54:
99:d3:88:bb:29:08:aa:24:b7:70:3b:98:58:de:46:45:37:b8:
cf:bc:e8:bf:2b:b3:61:b0:86:db:e2:59:16:5b:9e:8e:56:f3:
19:50:a6:21:92:42:8b:57:5b:fc:12:3b:c8:16:a3:44:b6:b1:
4c:84:f9:5a:8b:ad:70:f5:0d:b4:bc:eb:17:0b:96:63:00:ed:
66:0e:31:93:f9:a6:8b:fe:9c:c6:34:ab:6b:29:83:8c:85:d9:
0f:40:c9:16:55:0b:30:6a:ae:fa:ab:0b:b1:bd:22:38:68:f7:
62:68:d4:46:36:d3:8b:dd:e7:b7:ce:51:f2:b5:b1:58:c6:7c:
56:81:a2:47:5b:27:6d:15:2f:1a:0a:d0:cd:21:04:7a:23:af:
68:a2:97:96:42:7d:e8:fa:4a:c0:de:5d:53:ca:ac:37:c8:e5:
ae:f2:16:32:0e:6b:a2:27:8f:27:36:76:3e:ff:ff:db:13:15:
d4:25:30:1e:93:02:0c:86:55:a8:96:0f:32:a4:71:75:ca:39:
c1:ca:93:0b:59:ff:a6:e4:45:90:8c:ed:3c:d4:8e:cd:04:2a:
36:39:21:59:be:48:09:65:69:81:65:39:f6:fe:ec:93:11:37:
0d:e2:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:24:54 2026 by rpki-client