Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: FofMYyeHQ4VcUYZzVIno00DmD5cTixRlfDCMuG/aRCw=
Subject key identifier: E6:64:EB:23:63:C9:8F:1A:FB:F9:51:5A:AF:82:88:46:6F:98:11:FD
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01A0CCA2FE48D5AB4946B0E85F66B555E637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 08B4
Signing time: Wed 23 Sep 2026 05:00:29 +0000
Manifest this update: Wed 23 Sep 2026 05:00:29 +0000
Manifest next update: Thu 24 Sep 2026 05:00:29 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: 9/x/3B4gsdWRtcZGNLI0g9EEXeFwRybx2qmsNjDk2/U=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:fe:48:d5:ab:49:46:b0:e8:5f:66:b5:55:e6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Sep 23 05:00:29 2026 GMT
Not After : Sep 24 05:00:29 2026 GMT
Subject: CN=e664eb2363c98f1afbf9515aaf8288466f9811fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:a9:63:80:79:65:22:d4:74:48:5b:e3:e4:
84:a8:00:b1:bf:b8:6a:94:7c:b9:f8:e5:c5:f8:ae:
0c:e5:67:a0:a5:e2:d4:b4:6a:d0:13:f5:a5:59:d9:
3f:51:44:f5:6e:67:85:72:18:54:30:23:24:bc:6d:
c7:ab:e9:d8:0f:4d:c7:57:ba:60:51:e3:1b:2c:a3:
05:d9:e1:cf:c5:63:de:3d:78:d5:b7:09:95:6e:b6:
e8:5f:53:d9:81:2a:15:c4:b6:a1:0a:36:ca:ce:ee:
98:1a:c1:08:a8:a6:a2:eb:fd:08:c6:99:e4:fa:5b:
71:10:bc:73:ef:12:35:7e:72:65:ab:7c:cf:f9:3d:
bc:4e:1e:88:3c:9d:20:3b:2c:5b:09:db:e6:2d:5a:
32:49:00:e6:be:d6:04:c5:3d:51:65:55:0a:b3:57:
47:ca:a4:1f:48:b4:21:2a:47:c4:ce:f4:d8:8b:4b:
dd:81:6e:0d:a8:53:c6:ea:32:63:a6:da:ef:0e:21:
35:cc:c1:d3:bf:a3:e7:39:6e:48:a5:29:3a:51:76:
94:b4:fa:d0:d1:12:17:99:c9:63:e8:5f:13:d1:b9:
07:94:fa:e2:8f:f8:1e:62:02:30:96:96:06:9b:59:
2b:c7:2d:75:22:63:5c:56:81:7d:92:51:97:52:1e:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:64:EB:23:63:C9:8F:1A:FB:F9:51:5A:AF:82:88:46:6F:98:11:FD
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e0:2e:61:94:8a:df:46:bd:ed:9e:d0:66:34:07:b1:c4:92:
bb:23:eb:40:d3:fc:dc:36:e7:67:62:d8:6f:8a:d0:fd:f6:87:
b2:ae:ea:5f:66:6f:cb:02:ce:c1:05:38:a5:fa:ea:af:5c:8d:
4c:84:28:d3:9b:ff:94:c9:32:b8:7f:72:47:4e:4f:5f:9d:28:
5e:99:79:d3:7e:86:1e:86:90:30:3c:a9:96:81:0e:4c:a2:34:
f8:e7:1e:ec:60:85:4e:7c:83:65:dd:94:89:5b:0e:31:dc:19:
0e:af:09:39:c2:f3:c1:9b:b4:26:7b:3a:3f:69:ce:fc:dc:0d:
2d:9e:cc:55:d0:ec:cf:4d:0b:42:07:ed:fe:b2:1d:17:91:85:
71:13:e0:58:91:da:9d:d4:b8:5d:8b:de:b1:d5:43:48:41:e4:
ce:da:d0:e9:f2:35:ae:d7:30:fc:a3:25:e5:0c:4b:1c:44:7e:
54:60:17:d5:33:24:45:8f:fe:a4:5c:a3:d0:80:16:e4:9f:51:
9a:1e:93:10:bb:75:dd:13:90:a9:23:ed:d0:36:cc:8e:c1:59:
ec:1e:60:82:30:9f:c9:0e:68:55:4a:8b:1b:78:05:30:ca:16:
0b:82:b6:13:c4:ca:99:9c:1b:37:d1:cd:71:8f:30:1a:1a:ab:
79:2a:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:00:45 2026 by rpki-client