Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: n4F2hJzD0Vmtu9LbOLbcC7J72blEaYyCWz3XHCYf6uw=
Subject key identifier: 3C:B0:C0:A2:C5:C3:4A:92:6D:2F:04:AB:D9:8B:DF:1A:AA:86:6B:A6
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019FAAF5E70F967B63003CD2BF6D9E2DA26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 081E
Signing time: Tue 28 Jul 2026 23:01:09 +0000
Manifest this update: Tue 28 Jul 2026 23:01:09 +0000
Manifest next update: Wed 29 Jul 2026 23:01:09 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: yx9BYVTBbpwOborifFnhlVoNS6z0htv/Ooe4HeH6i6Q=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e7:0f:96:7b:63:00:3c:d2:bf:6d:9e:2d:a2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jul 28 23:01:09 2026 GMT
Not After : Jul 29 23:01:09 2026 GMT
Subject: CN=3cb0c0a2c5c34a926d2f04abd98bdf1aaa866ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:0c:91:96:4f:f7:ce:51:72:0e:f3:fa:9d:
c0:a1:32:5e:47:ad:da:66:78:92:00:0f:86:e4:fb:
5c:c9:bf:cd:a5:75:12:d7:2d:d9:b2:80:e2:cf:14:
9d:90:30:31:a5:c2:64:f4:31:23:da:30:9e:c8:4b:
71:4d:07:1c:60:11:f7:c1:19:9c:18:58:f7:8e:1e:
cd:e7:64:16:8c:60:12:06:1b:78:ca:25:5c:a9:27:
90:a0:ad:9a:41:12:b4:5a:d7:49:36:d7:9d:21:e0:
17:11:e8:fc:7b:6e:1e:44:4a:7a:72:8e:50:00:e8:
81:62:ea:69:c8:87:11:36:81:9f:68:d4:27:b0:75:
a1:aa:31:f8:da:d2:9e:18:27:ff:77:48:c2:a1:f5:
65:63:8c:46:69:c3:e4:ec:60:37:83:1f:af:d5:c1:
d3:dd:17:6f:c5:28:ca:a6:4d:9e:22:4e:3b:b7:ab:
78:e4:8f:a5:cf:c0:e5:a4:73:55:3f:b2:38:fd:ca:
3d:d4:22:32:bd:6d:47:6e:d0:32:3e:b3:25:6c:9e:
bf:fd:f5:07:93:a7:a3:95:bc:c7:8d:ae:21:26:fc:
da:22:1a:b9:2a:23:a5:29:80:65:4c:dc:56:70:72:
5d:d9:1a:f6:73:21:55:7c:c7:8a:73:1e:04:95:bc:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:C0:A2:C5:C3:4A:92:6D:2F:04:AB:D9:8B:DF:1A:AA:86:6B:A6
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cb:3f:77:9a:28:bf:c5:22:15:bf:51:31:2c:c7:db:d3:b4:
15:85:82:7e:ef:68:35:73:d4:82:77:ca:66:34:f8:76:f3:00:
dc:31:21:a1:e2:04:16:31:8f:c3:56:66:18:d7:8c:da:f8:1c:
93:dc:ec:e9:e1:fd:d2:52:a6:a2:c5:ca:9a:3a:5e:39:ec:71:
21:a8:2e:0b:97:2f:69:81:91:ef:85:6e:df:90:47:4e:0a:c9:
75:50:52:ca:94:cd:4f:eb:31:28:92:7c:f6:f7:4f:f0:d3:d0:
9a:5c:1e:4a:42:74:f3:5b:86:11:77:66:9f:96:9f:ff:81:6a:
c8:df:10:0d:26:58:4f:f9:b4:32:1b:74:04:78:2a:f0:46:17:
c2:35:4f:93:3a:ea:bc:e0:7d:12:20:5e:c2:98:48:25:63:e5:
74:34:9b:84:82:c5:38:91:ba:12:da:52:8c:67:44:b2:38:7e:
c5:31:1e:22:6a:1c:9d:d8:28:a9:08:f4:18:8a:58:2d:df:86:
f1:e2:ff:9a:c5:5e:e5:e7:82:c9:a9:be:1b:c4:42:16:89:de:
de:2b:49:9c:da:84:58:77:70:ba:08:39:6f:40:60:de:0a:84:
9d:1b:c9:09:c7:68:9e:61:69:51:6f:cf:39:1a:4c:c8:27:c0:
be:98:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:58 2026 by rpki-client