Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 5hYeXsEMyXryMdcY964vfQGktwJN9i8urXtA2Kmti1E=
Subject key identifier: A7:26:D0:33:76:1F:9C:1B:9E:3F:2F:96:0A:A2:78:A0:98:48:20:EF
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019DA3784AC2FD90FA52014C125BC5318D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0711
Signing time: Sun 19 Apr 2026 02:01:02 +0000
Manifest this update: Sun 19 Apr 2026 02:01:02 +0000
Manifest next update: Mon 20 Apr 2026 02:01:02 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: FwgdZFohXTuUt4LVEAjcLUZ1aoGbp9EbQhMJlmuiPiQ=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:4a:c2:fd:90:fa:52:01:4c:12:5b:c5:31:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Apr 19 02:01:02 2026 GMT
Not After : Apr 20 02:01:02 2026 GMT
Subject: CN=a726d033761f9c1b9e3f2f960aa278a0984820ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:c6:ab:8a:96:57:e5:42:00:68:c6:5f:c7:
fb:eb:29:9a:45:74:91:68:ae:33:29:87:87:9a:48:
bb:2e:09:64:d1:da:6f:3a:1a:40:3e:24:0c:9d:b0:
e4:80:d6:7f:f2:68:9f:84:d5:09:7b:31:25:15:54:
75:87:ba:cf:9f:9b:fc:9f:01:c5:5a:7b:30:d7:52:
80:ad:b0:16:71:13:21:18:41:f7:7f:d4:3a:94:86:
19:65:69:db:2d:95:5d:d3:bf:2c:19:d9:f0:2b:f4:
8e:de:7a:f7:5b:a8:ed:40:21:c3:b0:98:dc:f2:f2:
11:75:c8:87:99:0b:26:8d:56:af:e8:be:51:bc:24:
64:5b:5d:9d:2e:f7:68:59:6b:9c:2c:07:7c:7f:fb:
97:74:b8:f3:4c:97:8a:c8:7d:49:0b:cc:82:7c:34:
a0:cb:4a:c4:d2:ff:f0:87:56:de:11:7c:13:2a:77:
6c:40:d4:fb:2e:f6:72:12:50:91:d5:f6:de:3c:05:
2d:f2:6d:33:c1:ba:b7:c6:a0:74:62:ac:e0:7e:c2:
8d:f4:06:b9:8d:53:fa:35:3a:28:6a:05:03:cd:36:
17:50:82:6d:41:fe:57:80:ed:43:66:6b:f4:fe:4e:
2a:a3:e9:84:2c:ef:2c:4b:91:72:41:86:bb:d0:c2:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:26:D0:33:76:1F:9C:1B:9E:3F:2F:96:0A:A2:78:A0:98:48:20:EF
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:86:3e:74:16:de:af:17:23:7c:a2:30:26:f5:b1:69:2c:
aa:fa:8f:bb:42:08:b0:b1:02:16:4d:17:6e:78:59:f0:a0:62:
d5:c9:74:51:5d:d6:62:13:f8:e8:70:35:19:9e:a1:e9:c4:75:
4c:e4:f1:34:70:ae:77:16:b9:21:e4:70:32:4b:3a:c3:4b:fc:
25:0c:9c:e2:ee:af:53:9f:d5:fa:83:fe:13:90:e4:4a:0f:12:
02:64:d9:5e:91:1a:d9:3b:0c:3c:fa:49:09:d2:24:f9:83:55:
42:ba:5b:69:e2:2b:e0:e6:e8:5c:d2:20:6c:fd:6b:1b:65:4f:
69:59:99:9d:33:05:5a:f5:3f:9d:4a:2b:4b:8d:db:06:a7:eb:
7e:a2:05:0e:f6:79:3f:c9:2b:79:d5:23:45:53:ca:b9:73:e1:
63:83:0b:92:73:8b:48:44:1f:48:61:12:a7:6f:99:f7:47:c3:
15:03:b0:52:6f:e9:95:98:70:10:c2:85:96:e1:b7:96:16:45:
83:6b:39:4f:dc:75:e4:d5:d1:19:72:50:50:78:25:64:fc:10:
8f:01:98:2f:85:35:dd:9c:7e:7d:50:c3:20:32:db:d9:8e:b7:
9a:4b:bb:f2:b3:66:ed:07:f2:35:18:2b:35:50:a8:96:5a:c2:
a0:fb:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:22 2026 by rpki-client