Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: 8gynrhI4hUo7ad8hgSccv5B03g5zAEQoK9llUiXfE3I=
Subject key identifier: 9A:7D:0A:46:31:E6:F1:DD:1C:66:2E:1A:DB:A0:98:DC:53:CE:49:4D
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019D9A3E7209D53E1822D6165F51379BBD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 1797
Signing time: Fri 17 Apr 2026 07:01:16 +0000
Manifest this update: Fri 17 Apr 2026 07:01:16 +0000
Manifest next update: Sat 18 Apr 2026 07:01:16 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: f9d8317muTYTGonmkyCYyypmCqSqBkgbCSnDvslKog0=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:72:09:d5:3e:18:22:d6:16:5f:51:37:9b:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Apr 17 07:01:16 2026 GMT
Not After : Apr 18 07:01:16 2026 GMT
Subject: CN=9a7d0a4631e6f1dd1c662e1adba098dc53ce494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:6d:9b:c0:82:8e:e5:b1:ef:69:6b:04:9d:
b4:90:7d:bc:4c:77:91:57:d3:ac:e2:3e:25:9f:20:
08:3a:f3:7d:a1:fb:5b:fc:cd:27:7c:e8:36:ff:9d:
ee:17:53:67:14:3b:08:c8:2c:16:f4:2f:02:46:b2:
e8:8d:93:82:80:a7:7d:0b:da:51:40:2b:4b:2b:d7:
b2:44:b2:fe:fd:59:29:69:d9:25:e4:65:71:a1:bb:
de:21:5c:43:c7:37:ac:93:df:3e:1e:7b:25:60:90:
e8:ad:78:53:b5:c8:ba:83:1d:e4:e2:65:77:9a:b2:
14:3f:ab:31:d3:26:f4:88:c8:ea:0b:f9:d2:06:43:
85:cb:9c:7e:8b:8c:db:8e:8c:8a:f1:41:1a:76:32:
65:74:26:74:1c:a4:9e:ac:67:06:2e:ba:4f:b6:a8:
62:5d:25:16:e4:71:87:da:47:e9:50:33:fe:8a:75:
b3:a5:bd:e8:7d:13:30:9a:00:a3:6f:5c:cb:32:47:
1d:e4:67:12:d3:39:2a:c8:e0:c0:02:c9:2b:ca:86:
45:f0:fb:73:9c:cc:2c:66:af:21:24:c3:be:9b:36:
7e:e1:cd:71:84:a7:38:79:46:78:0e:15:1f:41:59:
59:7c:93:be:65:2d:60:63:7f:fb:47:e3:7d:67:c5:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:0A:46:31:E6:F1:DD:1C:66:2E:1A:DB:A0:98:DC:53:CE:49:4D
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:ca:2d:2e:7d:c8:50:27:ab:bd:30:66:21:4d:e6:12:47:
8a:4b:29:63:5f:74:21:26:3c:d4:16:27:ff:d5:cc:a0:35:44:
69:c5:19:b9:81:36:af:3e:67:53:05:71:20:95:c8:30:23:bc:
be:1c:55:36:79:10:41:4f:18:03:39:4b:f2:cc:ae:52:d5:97:
a7:f2:69:29:2b:ac:7e:5e:90:e7:b9:4a:ae:81:42:6d:b5:73:
cd:00:5e:24:c3:2e:2e:90:67:6b:62:0e:15:4b:f3:51:3e:0d:
77:c6:44:32:01:51:e4:cc:6e:dc:32:cc:11:e3:bf:dd:29:d3:
d3:c8:e4:5c:a2:8c:9f:b8:74:dd:f8:e7:65:6e:c9:11:65:a4:
75:49:d9:3d:7f:3f:54:7e:02:ac:82:e7:76:6c:27:c8:b9:0d:
07:66:90:8e:74:03:9a:5a:21:5d:06:82:b8:c2:35:2e:e7:b6:
57:a8:04:4b:90:29:e2:03:f9:a1:1e:a1:6b:5d:a5:d6:e7:02:
0a:57:bb:24:e1:fe:f3:34:01:fb:68:6f:8e:6a:a1:a6:05:a3:
b0:63:1d:bf:ac:1e:31:01:b2:41:eb:3c:d8:a1:bf:57:9f:e0:
84:4f:a1:25:9c:11:de:cd:5f:ee:ba:6d:da:f3:dd:3a:1a:95:
5f:3b:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:32 2026 by rpki-client