Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: KPVQZcwIU0Ce6jLUPM3T6OANTgld2O2iL30dcdcFROA=
Subject key identifier: FD:FB:F0:99:A0:43:34:7E:E8:85:7A:DB:D5:80:58:82:9B:6E:15:7E
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 019CAAC67186F354330B9EA1824864BE778C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0D9E
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: cgExfJlt+g02NXhh6LBT5yYjl1KJiiGYyCUvUzwIb9o=)
2: LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa (hash: bcLMSmZZ+3fduWbmxkS4mikbivKQ+Mib1eYrxT+UG6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:71:86:f3:54:33:0b:9e:a1:82:48:64:be:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=fdfbf099a043347ee8857adbd58058829b6e157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:b0:9d:6a:3c:a0:8b:a1:07:8e:f5:88:1a:
4e:47:14:54:9c:1c:c9:64:24:36:c9:a8:aa:2c:9a:
3f:73:d8:e3:7f:de:91:32:a9:1e:70:ac:ea:f1:5d:
e2:bc:2e:67:07:30:c9:36:21:60:16:31:5a:1c:20:
4c:b1:3c:ac:96:9c:79:a7:2a:84:3d:27:3a:f8:a2:
17:f7:c1:c0:e0:7c:49:8f:d5:4b:b1:6b:b3:ae:6a:
1e:b1:c4:fa:fe:55:d0:d1:57:36:ab:f3:53:ac:ea:
4e:20:48:21:36:10:ab:03:c6:72:1a:59:c9:2e:66:
60:3e:5a:d5:87:6d:6a:d8:d5:8e:e6:c3:29:e5:f8:
44:b5:cb:db:28:a9:90:21:68:ee:da:2f:ac:bb:72:
c8:47:40:bf:a3:6d:f9:ca:43:e0:c9:c9:7b:86:f1:
4f:cb:d8:f2:03:a6:18:de:ca:ac:01:46:04:de:17:
82:dc:b1:09:ed:e6:62:2d:85:41:3f:59:eb:d7:d2:
89:a4:28:cd:df:38:ed:e9:8c:1e:35:97:5d:9c:29:
58:17:3a:05:84:5e:52:84:a8:e1:17:ff:88:8e:38:
7a:93:f6:a4:70:eb:b1:3b:01:f3:36:d4:ad:7a:28:
c0:76:7e:cf:8c:1b:1f:ae:10:c7:62:ac:f1:fc:af:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:F0:99:A0:43:34:7E:E8:85:7A:DB:D5:80:58:82:9B:6E:15:7E
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6c:55:af:de:91:23:4a:88:a5:a6:50:1a:68:bf:37:81:9c:
12:ea:4f:bf:bc:ea:94:e5:63:c4:2b:71:26:8d:57:1b:25:7a:
38:6d:ed:e1:59:b6:c6:1c:04:60:ac:45:aa:5c:30:9b:8f:6c:
2b:9c:8c:40:58:a1:ea:cd:c8:1a:76:60:ff:56:f9:a3:50:80:
83:c1:d0:19:03:d7:51:56:b3:46:3a:16:7a:82:e8:34:cf:61:
58:82:d5:4c:11:b7:ef:a2:b0:4e:ca:21:0d:c8:d7:cf:f0:cd:
bd:6b:10:cf:a8:7d:5e:ec:f2:89:b9:2c:ef:16:c7:d6:8c:0f:
9f:45:3c:c6:46:fd:39:92:18:df:7d:aa:37:ad:31:2a:79:60:
b6:89:4f:60:2a:7b:64:5a:f3:ac:18:fa:07:64:32:2e:b9:1c:
e3:55:e7:86:0e:a6:aa:f9:07:6e:d0:60:a3:52:7e:0f:6f:21:
b9:cc:0d:e5:a9:49:24:88:74:47:23:53:26:22:b1:0b:a7:72:
a2:f3:2e:05:00:97:77:1f:af:b8:48:7e:9c:d0:58:2a:6b:1d:
e2:0d:b6:0c:73:a3:b4:eb:98:26:a8:d3:1b:71:3d:fc:5e:4b:
f9:2d:d0:37:5f:63:c3:da:47:84:0a:44:bc:0f:ab:df:5a:8d:
3f:65:3e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxnGG81QzC56hgkhkvneMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy
MjhkYmIwHhcNMjYwMzAxMTkwMDU3WhcNMjYwMzAyMTkwMDU3WjAzMTEwLwYDVQQD
EyhmZGZiZjA5OWEwNDMzNDdlZTg4NTdhZGJkNTgwNTg4MjliNmUxNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRWwnWo8oIuhB471iBpORxRUnBzJ
ZCQ2yaiqLJo/c9jjf96RMqkecKzq8V3ivC5nBzDJNiFgFjFaHCBMsTyslpx5pyqE
PSc6+KIX98HA4HxJj9VLsWuzrmoescT6/lXQ0Vc2q/NTrOpOIEghNhCrA8ZyGlnJ
LmZgPlrVh21q2NWO5sMp5fhEtcvbKKmQIWju2i+su3LIR0C/o235ykPgycl7hvFP
y9jyA6YY3sqsAUYE3heC3LEJ7eZiLYVBP1nr19KJpCjN3zjt6YweNZddnClYFzoF
hF5ShKjhF/+Ijjh6k/akcOuxOwHzNtSteijAdn7PjBsfrhDHYqzx/K+KEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP378JmgQzR+6IV629WAWIKbbhV+MB8GA1UdIwQY
MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et
N2ZhNWViY2Y1NzRlLzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl
LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2xVr96R
I0qIpaZQGmi/N4GcEupPv7zqlOVjxCtxJo1XGyV6OG3t4Vm2xhwEYKxFqlwwm49s
K5yMQFih6s3IGnZg/1b5o1CAg8HQGQPXUVazRjoWeoLoNM9hWILVTBG376KwTsoh
DcjXz/DNvWsQz6h9Xuzyibks7xbH1owPn0U8xkb9OZIY332qN60xKnlgtolPYCp7
ZFrzrBj6B2QyLrkc41Xnhg6mqvkHbtBgo1J+D28hucwN5alJJIh0RyNTJiKxC6dy
ovMuBQCXdx+vuEh+nNBYKmsd4g22DHOjtOuYJqjTG3E9/F5L+S3QN19jw9pHhApE
vA+r31qNP2U+eQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:59 2026 by rpki-client