Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: zQO0zyCNkssGFWNGPusTsUzsrwYtQZ4pbRXOsAC0Rmo=
Subject key identifier: 11:EA:E5:2D:CE:18:D1:92:EE:4E:B8:07:48:88:D6:E3:75:5F:8A:56
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 019D9A3E237DFC45F86E7F6B50FD84A93C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0E1A
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: H2l+cuhjHz53Ug5+mKY+tCiBhqPwDexOThJr3/kW+1k=)
2: LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa (hash: bcLMSmZZ+3fduWbmxkS4mikbivKQ+Mib1eYrxT+UG6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:23:7d:fc:45:f8:6e:7f:6b:50:fd:84:a9:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=11eae52dce18d192ee4eb8074888d6e3755f8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:0a:9b:65:ed:67:9e:a6:6c:1b:a4:6b:b1:
bf:dd:82:5b:87:18:f8:37:b8:82:04:28:94:1f:14:
b2:0a:b9:f3:6c:04:c6:94:d2:a3:60:70:e0:65:96:
42:df:ca:14:53:4c:1b:da:7e:0d:08:7b:6a:fc:2a:
76:1f:56:17:f8:02:e3:b0:1e:dd:e4:8b:d5:fe:be:
ff:7e:a6:f9:ad:01:46:91:71:81:32:d9:a2:5a:5a:
4a:7a:7f:04:02:ec:ed:92:5a:a1:dc:c9:b0:d8:81:
56:85:17:39:8c:46:f2:3a:e4:d9:38:15:fb:fa:a8:
a1:21:99:13:ef:de:00:93:85:79:4e:db:b0:16:fe:
35:bb:4d:82:83:21:a1:ba:3c:34:e7:c0:14:2a:54:
43:7f:07:15:c2:f3:2b:07:12:bf:74:ec:19:19:17:
64:40:6e:3f:a2:c2:e8:7e:f1:45:0d:f8:9c:f4:22:
ee:13:12:45:56:d2:c2:0f:49:e1:96:dd:75:a1:33:
d3:82:0c:a0:3c:3d:f0:0f:ed:96:36:14:17:6e:49:
50:74:9f:cc:c7:2b:4b:33:31:86:59:36:73:63:50:
41:8d:05:11:30:da:53:b7:10:78:86:ad:79:7c:67:
6e:2b:fa:fb:06:35:d8:66:91:5b:1c:ed:18:d1:38:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:E5:2D:CE:18:D1:92:EE:4E:B8:07:48:88:D6:E3:75:5F:8A:56
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:22:9c:d0:92:ef:8e:26:9e:9a:06:c1:6b:a7:9b:ec:ab:a0:
10:74:61:9c:6b:75:79:b7:1d:4a:59:77:8f:d7:69:bb:ce:ec:
42:06:d0:09:52:9a:95:5b:78:62:2a:2f:7b:a5:1c:14:1b:b0:
23:60:8f:15:d7:be:bb:25:d6:a4:9d:45:52:a0:05:1d:2b:32:
19:9c:bc:67:88:7d:ad:8b:ab:a4:d9:fb:12:73:3a:b7:40:f6:
60:0d:02:28:87:23:fc:d8:c2:16:48:4d:84:dd:3d:76:cb:e7:
fa:76:31:d0:40:67:66:41:78:b0:3f:c5:a5:52:a8:80:c9:cb:
93:83:e1:11:fe:95:07:1b:cb:6c:26:ed:f9:73:e1:7e:8d:9b:
40:10:b6:c3:45:f3:5d:f1:bc:32:28:f2:da:6f:5d:56:b0:f0:
3b:48:2a:cc:07:26:a6:51:36:26:7b:89:ae:68:77:13:e3:81:
ed:d9:7b:0c:1f:b0:db:ba:5c:71:b6:22:60:3c:cc:6d:4f:3c:
e8:3c:25:c6:6f:76:43:de:8b:70:a2:98:18:d7:ff:c0:03:c0:
ad:18:2b:e9:fc:de:e7:36:23:6a:2a:aa:65:fd:01:eb:7d:c6:
30:c9:fa:8d:c0:be:6e:32:99:58:2b:b0:c5:d6:c0:84:17:d6:
7f:fb:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:53:14 2026 by rpki-client