Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: 5SiOUy+pWWmws1Lr4FNMXW4FV87NfhgPh5Xy//YgT3s=
Subject key identifier: 47:99:09:C5:FE:3A:48:10:36:3F:8C:21:96:E3:71:14:64:F1:40:93
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019FAB62F3962720B605CDEB81DA23C50CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 18A9
Signing time: Wed 29 Jul 2026 01:00:16 +0000
Manifest this update: Wed 29 Jul 2026 01:00:16 +0000
Manifest next update: Thu 30 Jul 2026 01:00:16 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: SJ5mFop77Jrwi42jNz52SMBEYVFURjgE0i6fciSL5TQ=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:f3:96:27:20:b6:05:cd:eb:81:da:23:c5:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Jul 29 01:00:16 2026 GMT
Not After : Jul 30 01:00:16 2026 GMT
Subject: CN=479909c5fe3a4810363f8c2196e3711464f14093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:10:38:8a:d4:f3:71:86:d1:d3:98:d0:eb:
84:72:59:17:71:d4:d6:34:54:bd:37:0f:13:11:71:
e8:62:37:0f:f4:44:13:60:eb:90:9d:10:87:81:99:
f9:e3:12:0f:49:97:29:1b:a6:cf:7e:36:00:f0:e0:
76:5d:4d:42:ef:cc:b0:3e:dd:46:45:ae:6e:5d:91:
d1:23:48:79:21:ed:ba:13:41:fc:25:d3:5e:59:d2:
82:3b:51:17:bb:1f:d5:ce:fc:72:fb:6a:60:a0:cc:
11:55:89:c7:5a:32:06:1d:a8:a5:bd:ba:81:e2:c5:
3a:31:76:1a:c7:35:b6:42:ca:ef:9f:3e:07:90:dc:
1f:d1:a3:9e:8e:e2:f4:d4:fb:27:6a:63:f9:78:7e:
f5:45:7e:bb:f8:6e:fd:a3:22:b3:8b:2c:7e:b7:71:
8d:06:33:04:27:6f:c9:9b:dd:4c:14:20:9b:85:ff:
c5:8f:fc:14:e0:3d:a7:57:31:6e:73:b3:4d:af:9f:
11:29:03:27:7d:e4:9f:45:3e:e9:85:dd:ab:26:d8:
02:f0:d4:a1:ba:db:6b:26:34:61:34:ed:57:b3:73:
1f:79:bb:5c:b6:e9:10:c4:4e:8f:34:f1:6f:ec:61:
6b:80:9c:ff:84:f2:5b:28:b4:83:39:79:a7:4a:01:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:09:C5:FE:3A:48:10:36:3F:8C:21:96:E3:71:14:64:F1:40:93
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:6d:46:a8:db:ac:4c:b9:86:be:71:04:81:f1:b4:00:88:
46:ff:c1:bc:47:d9:d9:8b:c2:e6:a2:23:40:a2:46:54:f3:40:
c5:49:b5:12:f1:0d:20:95:fe:07:81:c4:71:af:37:ff:1a:6b:
79:5b:95:77:62:fa:f8:4e:b9:00:4b:cb:b4:b1:32:5a:4b:58:
c3:a5:64:5f:5f:41:b0:33:fd:46:9c:bd:1a:0f:39:36:d2:13:
a7:2f:53:49:ff:30:5c:71:36:e4:1a:da:da:59:ef:da:ce:62:
c2:9e:3f:01:74:7e:4a:23:ea:2e:eb:1b:ca:a7:12:64:bb:dd:
2e:85:d8:17:15:5b:18:d3:a5:ce:be:71:9d:18:eb:4a:01:f6:
a6:03:ab:90:3b:fe:7b:14:a9:25:00:2a:68:18:b8:9a:32:5d:
0d:c9:d3:87:17:66:91:ec:77:61:32:8f:82:2c:93:6f:b7:54:
30:04:ec:28:a0:bf:fe:84:f9:23:90:1b:60:06:87:f0:3f:02:
3a:37:86:81:57:6f:15:25:68:ae:50:ba:54:a6:57:38:9c:a0:
94:da:46:05:15:f0:a4:93:3f:18:e0:1c:41:0a:05:65:49:ae:
ae:dd:d7:90:0a:57:9c:32:29:0e:21:91:9f:8a:fa:15:aa:83:
dd:1a:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:11 2026 by rpki-client