Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: GhVFNnuko8hUYtmDjR7dFAtsw/CwZEQZg1K7ti0zMmE=
Subject key identifier: 89:17:C0:73:51:ED:E7:AE:1C:3A:82:EC:3D:B2:04:84:4C:CF:0D:5C
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019D98F5062FAD4A19F56B1895200817F358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 07F5
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: 1srYoFRizQdYtAHLzy94P3lPnEvRfiXjyBKNnfWK1XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:06:2f:ad:4a:19:f5:6b:18:95:20:08:17:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=8917c07351ede7ae1c3a82ec3db204844ccf0d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:fc:a7:8f:0d:b5:10:f1:47:d9:7d:30:de:
20:6a:52:d9:f7:53:89:35:37:ab:da:3a:90:d3:6b:
dc:fc:89:cc:04:48:cb:a8:5e:19:16:85:1c:85:02:
ae:44:dc:8a:fb:f7:37:5f:15:8a:e1:4b:aa:41:f8:
0b:34:88:df:62:8a:7a:1c:a6:b0:7f:e8:16:dc:1a:
50:11:c9:41:24:be:74:da:18:86:a5:ce:ea:b0:ca:
53:fb:58:0e:15:ef:23:71:b4:d4:14:2d:a9:e8:ec:
c7:36:0b:80:4e:07:9f:c5:08:3a:cc:46:34:19:5d:
ec:38:bb:91:91:34:72:99:88:36:5e:1c:06:1e:d2:
96:72:66:58:07:63:4f:b1:ed:2a:b9:fa:d5:7d:87:
66:56:8b:ac:ee:ba:04:02:de:4a:a3:ac:5d:08:49:
e3:4d:23:c2:81:8b:08:08:b2:a9:c9:85:68:05:e1:
03:15:dd:da:14:4a:17:91:b1:4e:62:59:e6:64:54:
5a:b0:b4:45:22:ea:ec:b6:a8:04:b8:f9:a3:d7:04:
ea:9a:57:84:af:10:1f:00:fc:ae:53:ff:43:43:de:
7e:7b:b2:9f:4d:2c:d7:54:3d:e6:50:b5:af:03:d2:
39:93:37:6c:db:19:47:79:d4:03:36:3d:05:67:82:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:C0:73:51:ED:E7:AE:1C:3A:82:EC:3D:B2:04:84:4C:CF:0D:5C
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:22:73:9c:dc:30:ef:01:18:29:a6:bc:79:b2:d2:05:33:
c8:9a:15:40:0f:da:d6:8b:f4:41:de:bc:72:26:92:ad:e6:e3:
41:de:5a:8a:97:b7:c4:fc:cd:3b:67:9e:8e:bd:5a:2e:b7:3e:
f6:a3:64:4b:6b:3c:a7:22:e3:1b:37:1e:63:1c:78:7b:0f:b9:
9a:75:38:06:b7:c1:e7:db:49:00:60:23:94:39:02:f0:b9:26:
76:5f:65:a6:78:cb:d3:be:f1:53:4f:04:7c:d7:1f:c7:1a:84:
27:6f:f6:64:8d:6f:4f:7a:34:71:70:8b:0f:5f:08:09:a0:46:
15:3a:e1:b0:89:a5:66:fe:3b:b7:ab:62:fc:3d:a9:8f:9e:10:
44:31:16:1c:14:63:3e:63:ca:8b:f8:5b:49:67:16:c0:f4:4b:
02:b9:4f:d1:92:d7:50:7f:fe:d1:5e:14:d6:a2:82:ba:ed:8b:
3e:6c:27:3a:09:dc:9b:d9:45:e3:1a:72:cd:d5:96:bb:7b:2d:
3e:e9:f1:c9:26:62:a1:46:bb:ef:f2:65:75:ef:7e:5f:fc:60:
da:d1:3f:8d:2b:31:f0:54:75:e8:ea:dc:2b:b0:1d:a3:81:3c:
d4:a9:b0:79:f1:2d:fb:1e:ef:8a:6d:30:38:50:b0:95:83:04:
3e:0b:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:03 2026 by rpki-client