Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: OGEPSn+prmax5hkuKORlF7NJHPblcQUhX6KnTIHv3Xo=
Subject key identifier: 95:6B:6E:69:14:C1:04:42:D9:D6:7E:35:A2:8C:86:B2:74:21:F8:14
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 01A127D5CF8667EBD7F06818918331DE6B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 196E
Signing time: Sat 10 Oct 2026 22:01:26 +0000
Manifest this update: Sat 10 Oct 2026 22:01:26 +0000
Manifest next update: Sun 11 Oct 2026 22:01:26 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: QXT4aD5762UaEEIhD/1gmWglYnR/yZpu/qyJOAKC9K4=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:cf:86:67:eb:d7:f0:68:18:91:83:31:de:6b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Oct 10 22:01:26 2026 GMT
Not After : Oct 11 22:01:26 2026 GMT
Subject: CN=956b6e6914c10442d9d67e35a28c86b27421f814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:02:36:da:10:fc:7a:fe:85:43:a8:67:ab:
d7:d8:59:ab:61:af:dc:ca:81:94:36:9b:87:98:9e:
71:cb:c4:68:ff:24:03:c5:e3:7c:55:22:31:f3:4e:
a6:33:47:c7:09:b6:73:60:2c:a9:35:1a:0c:58:99:
50:45:73:9c:b7:79:e9:a9:41:f3:63:7b:75:4c:b5:
7e:7a:31:2b:b6:cc:38:31:94:60:0f:a9:a6:29:96:
c6:14:b8:e5:aa:12:13:41:65:05:df:a4:59:e8:1d:
e7:3e:0a:ce:02:60:8a:d0:87:59:9b:f1:9b:d3:9f:
99:17:f2:97:16:cf:df:28:cb:e5:3f:2e:51:fa:e9:
44:8d:63:f4:db:80:fa:b4:91:ab:9a:5e:a8:1c:6d:
36:de:64:7f:97:62:78:a6:ef:09:31:04:a9:ab:c6:
2c:79:9a:9d:4d:c4:f6:47:f2:c7:81:03:35:b3:36:
21:59:9b:74:bd:6e:56:79:95:75:4a:81:7c:b6:0a:
59:95:b5:38:60:e5:1a:f0:70:28:d4:2d:17:58:1e:
4d:60:eb:9f:b2:0e:99:80:cd:b2:7f:77:2e:14:1b:
ff:cf:66:53:38:81:07:b2:7d:a6:ff:5f:91:7f:b6:
36:8d:c5:63:b5:bb:ef:32:97:6d:31:d4:0b:7a:92:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:6E:69:14:C1:04:42:D9:D6:7E:35:A2:8C:86:B2:74:21:F8:14
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:93:b4:0e:05:4d:21:d1:c1:78:1c:c6:cb:0c:ab:02:d4:
4c:f0:05:24:d0:cd:6c:79:b5:6f:68:9a:89:61:b9:ec:b3:29:
42:34:a9:80:8a:9a:01:32:0a:42:81:8b:3b:bc:2f:1a:25:da:
02:b2:ac:71:1e:90:be:c9:af:07:91:ae:b1:a4:11:9d:f4:01:
3a:6a:45:eb:47:67:85:f2:79:0f:b2:c9:3c:27:32:9f:8f:fe:
9f:d2:01:c2:a5:9b:d4:c3:b8:af:f3:7e:79:d6:b1:bc:a7:a6:
55:26:a4:df:0b:e9:20:77:45:55:fd:43:06:e0:01:a0:ad:41:
7f:e7:7f:0b:96:e8:b3:0f:77:6d:44:13:b7:3a:3f:be:35:33:
d4:88:23:a0:29:41:a0:38:ac:ea:df:8e:bd:e5:d4:e9:04:07:
d9:ec:2f:2d:03:44:20:99:b9:86:38:3a:79:fb:62:bd:31:39:
f8:0b:dd:13:6c:0a:29:74:91:88:8b:0e:eb:25:21:e8:4c:73:
4f:21:e5:3e:fe:c2:a3:d4:f7:67:28:2d:50:ce:2d:64:67:4c:
04:aa:bc:b1:d6:fd:d3:4e:34:0b:9d:15:57:11:de:76:80:71:
fb:05:9d:3f:db:96:94:62:58:51:05:0a:16:ae:4f:9e:25:c9:
b5:bd:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:35:58 2026 by rpki-client