Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: QFDUf/ZVdWvSPRduUzmE5rNjRHjWXuzvPlsXB2PnM4s=
Subject key identifier: D4:32:80:59:93:95:19:62:B4:82:6A:16:91:A2:F6:A4:6B:CC:9B:0A
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019CAAC718E5DF7B1652F33296DCFCC99AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 171B
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: JeDPpSxpsIdKNe0qk6fyIibgn2ArZ/iaPG3A01zVdiI=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:e5:df:7b:16:52:f3:32:96:dc:fc:c9:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=d432805993951962b4826a1691a2f6a46bcc9b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:a2:37:1f:ae:e3:0a:f5:21:18:56:f4:92:
61:ad:23:22:50:5f:f3:a0:fc:00:2b:be:8d:16:f4:
94:92:3d:51:19:a5:5b:da:1d:f1:fd:9a:d5:d9:76:
8e:60:56:0d:41:71:4c:5f:9d:b9:be:f4:15:89:cf:
11:c3:ad:ac:11:af:37:99:92:d0:be:b5:c5:ae:b2:
87:8a:6a:c4:67:70:3a:dd:1d:db:95:c6:5c:bb:20:
be:0d:09:02:db:43:39:0f:d5:6d:da:74:f4:88:49:
d9:d9:5f:42:38:00:fa:f0:6c:b3:dc:d7:91:0d:d8:
da:4d:86:6a:d1:58:9d:bc:43:0b:78:94:df:40:cb:
e5:f6:b5:0a:e2:26:00:57:02:7d:21:a9:ce:0d:18:
a2:87:1f:1a:46:0e:46:a7:b8:76:36:da:8b:20:20:
9b:fc:18:b3:cb:a2:f9:f8:99:1a:1e:0c:b8:c5:b4:
dc:ea:17:8f:af:34:37:5f:73:41:ec:1e:c9:fc:63:
e3:20:38:01:1c:c2:05:b5:45:8f:c8:53:0a:33:e0:
5b:47:6d:e8:65:b6:6c:a5:0c:a2:30:25:13:17:d1:
9f:0e:aa:ce:9f:6d:b7:74:a7:5e:f8:39:45:d3:76:
ef:ae:bb:a5:db:80:bc:1e:8e:43:c7:7a:bd:96:b6:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:80:59:93:95:19:62:B4:82:6A:16:91:A2:F6:A4:6B:CC:9B:0A
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:b9:0c:b3:10:ae:b0:d9:75:09:ef:35:ab:11:38:fc:8e:
cc:97:4a:89:00:99:23:10:24:e1:5b:f7:ec:b9:27:f0:73:3d:
c5:1c:16:80:b5:01:8a:02:f7:a6:5c:5a:7f:84:76:a5:b0:14:
eb:e8:f4:96:a8:b3:04:e9:79:d1:48:9a:dd:08:42:95:65:fc:
55:b2:f7:c8:99:a0:3a:41:cf:fa:b1:f2:d4:c8:f9:6b:0b:71:
e6:73:59:21:e2:c6:df:6e:fa:e1:9c:e8:bb:39:e7:f8:a0:17:
25:51:c6:3d:f3:1d:bf:46:a8:8c:17:3f:ae:e4:6a:9e:85:e2:
fb:fd:e3:79:fd:75:d3:9d:40:8f:da:df:fb:9a:3a:0c:d2:40:
72:16:bc:2b:2b:e1:9e:52:97:e9:4f:70:ee:40:74:c5:9f:42:
29:c4:7b:21:d5:02:22:fe:a8:87:87:86:27:ba:c8:d5:bb:c4:
34:b9:fb:0f:d4:18:80:e7:85:d9:27:a8:27:c6:fa:3f:eb:12:
7a:e0:1a:0f:23:9b:e5:ea:e1:b3:2d:58:25:2d:7a:d4:fe:f3:
6e:e6:b4:4b:8c:c9:b3:bc:1a:b2:91:10:21:5e:b2:eb:16:f6:
36:ba:81:a9:7f:c5:99:69:3a:64:19:6e:96:af:1a:07:00:bc:
74:c0:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:00 2026 by rpki-client