Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
File: ilqFDZoDAtO1zC3firM8qrfM5KY.mft (raw, json)
Hash identifier: 82yzRovBTQCpk7Yz3Mul43qbIY2S2Bo2+qnGPjBrIrU=
Subject key identifier: 7F:79:7B:FC:87:57:F4:20:82:27:51:69:6E:0B:C1:32:31:5F:42:E8
Authority key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
Certificate issuer: /CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Certificate serial: 019D9C2C9602217DB6EFEF2EC42D251BB8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
Manifest number: 0137
Signing time: Fri 17 Apr 2026 16:01:00 +0000
Manifest this update: Fri 17 Apr 2026 16:01:00 +0000
Manifest next update: Sat 18 Apr 2026 16:01:00 +0000
Files and hashes: 1: X0sJvwV09OqcfyACoi0QzOiDpSI.asa (hash: 4DIZkxx6C1+CqW+PWxpXd6bNAzfNgcYhwNzEirfyRvY=)
2: ilqFDZoDAtO1zC3firM8qrfM5KY.crl (hash: dnigjd80fXjPxKValAp8stIPcdacS/n2dWh4Z0B5FdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:96:02:21:7d:b6:ef:ef:2e:c4:2d:25:1b:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Validity
Not Before: Apr 17 16:01:00 2026 GMT
Not After : Apr 18 16:01:00 2026 GMT
Subject: CN=7f797bfc8757f420822751696e0bc132315f42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:5d:d9:13:31:6a:39:b2:b4:ed:6b:d5:7f:
26:fb:a6:22:4e:16:01:e9:fa:61:b0:0a:a4:77:d6:
8b:9e:cd:c1:e9:94:d2:64:78:a4:d7:3c:ee:0f:61:
71:c6:9a:23:5a:1d:cc:37:49:df:c2:bd:d2:8c:51:
a6:18:e8:c6:03:27:60:ea:3d:68:5f:d5:50:65:e6:
09:bd:67:20:b6:b8:13:c1:98:63:86:f2:74:71:af:
f0:7b:98:10:7d:37:2d:f6:26:90:47:9f:20:04:61:
cc:11:df:ae:3a:0a:6d:94:b6:9a:96:81:4f:e4:90:
c0:2e:e7:7b:be:e5:9e:04:4b:a2:65:ab:c7:53:a0:
c4:5f:58:f0:77:65:aa:c6:1c:92:c5:e5:f9:b4:4a:
7e:ba:0a:ae:97:b3:e6:cf:4b:d1:be:c2:22:5d:df:
25:61:75:f7:4f:bd:a6:09:eb:aa:50:ef:93:25:53:
68:d1:d7:11:2e:c6:ed:91:81:db:d7:07:dc:89:f4:
3f:42:45:36:e3:f0:03:91:f1:fa:c4:e1:86:35:52:
6b:40:a1:af:9a:b5:64:38:2c:58:e0:32:a8:f6:3a:
c5:1e:75:e4:85:5a:cd:6b:74:d7:42:d4:01:c1:64:
1a:ce:a6:79:ed:0a:32:bc:49:7a:7f:cb:e8:62:73:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:7B:FC:87:57:F4:20:82:27:51:69:6E:0B:C1:32:31:5F:42:E8
X509v3 Authority Key Identifier:
keyid:8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:65:61:6b:e7:69:50:c5:35:0d:dd:25:37:5b:cb:ac:b6:20:
f1:00:1b:b5:7c:61:a0:cd:8a:5e:5a:82:95:20:f9:15:20:33:
a0:06:7c:91:a5:17:02:80:0b:68:27:65:2e:cc:eb:79:14:7f:
4f:4f:ab:b3:87:ae:e9:ae:98:26:fe:45:c6:d0:3d:a3:14:df:
ac:c6:90:00:5e:21:42:1e:18:b4:9b:d7:85:55:89:13:cd:6a:
3b:91:48:42:df:45:36:14:1e:3c:af:d3:9c:75:8c:02:89:35:
17:a2:21:8b:08:4b:a6:84:de:54:a4:39:59:9d:12:77:50:ec:
ae:77:63:1b:e2:2f:71:59:22:42:3d:ff:b1:a6:eb:d5:27:46:
03:82:1a:47:8f:3e:d5:07:ce:12:55:3e:45:24:73:b6:46:63:
20:a1:e9:e9:bb:d0:cc:5b:b0:73:d8:77:4f:5a:d7:43:35:32:
f6:df:85:55:b5:29:55:fe:3e:c9:83:c4:5f:a4:68:01:62:56:
6f:2e:74:b9:b8:09:00:5e:36:24:2e:32:56:07:32:ba:4f:34:
31:66:96:f2:cc:48:0f:2e:83:5a:39:a0:81:8a:8b:81:c9:54:
7f:e7:75:2d:7a:c5:2f:e4:cd:5c:da:c6:43:08:a7:05:fb:f9:
0d:54:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:50 2026 by rpki-client