Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: GEUBxdjx9RsfVwAU8JKVHx27Br99SDmG/pF8Z6rtnVU=
Subject key identifier: 1A:0A:C0:C9:40:18:52:76:3E:B1:F4:B1:3A:A3:7C:CE:C7:E6:E4:71
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019FAA196A1CC4E91CD91FCCD3FE751C819D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0907
Signing time: Tue 28 Jul 2026 19:00:20 +0000
Manifest this update: Tue 28 Jul 2026 19:00:20 +0000
Manifest next update: Wed 29 Jul 2026 19:00:20 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: vnUSar64FUEIkGjf/y4zb2G3zUm/zJIKaFUEh1aVinU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:6a:1c:c4:e9:1c:d9:1f:cc:d3:fe:75:1c:81:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Jul 28 19:00:20 2026 GMT
Not After : Jul 29 19:00:20 2026 GMT
Subject: CN=1a0ac0c9401852763eb1f4b13aa37ccec7e6e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:7a:53:de:20:3c:b9:b5:da:2f:95:63:48:
c6:9e:b9:2b:3a:48:92:dd:ed:9f:d0:c1:5c:69:8a:
a9:02:09:f2:93:ba:98:48:47:30:ab:9c:d6:4b:7e:
3f:55:6b:41:20:49:b7:d9:2e:fe:c8:b9:3e:9b:50:
88:4d:4f:3a:43:1e:d3:b2:d7:92:3a:5b:20:a2:5c:
40:70:3b:89:a1:6d:83:68:31:7a:07:38:53:1e:c6:
ff:d1:73:8f:75:ee:cd:d1:2f:ea:39:83:df:71:84:
09:0e:91:d0:fe:5e:00:42:ef:a8:9a:46:9c:6c:b9:
76:50:3b:a0:ea:0e:9a:94:49:44:27:5c:ba:09:d9:
b7:66:b5:84:08:c4:35:f5:47:be:cc:2a:2d:b7:cc:
3f:16:10:e2:e5:39:84:92:32:2a:e4:7a:a6:25:be:
a2:45:5a:56:e7:2a:d2:77:02:fa:24:03:d3:3a:21:
0e:ee:e1:fd:68:31:0e:fa:df:de:9d:84:a7:5e:ff:
cd:55:14:0c:34:20:1a:e0:15:b9:f9:5d:e9:1b:06:
77:d7:b4:25:2d:f5:c4:53:0a:5f:2f:65:e2:0c:a2:
cb:3a:a9:90:84:c2:de:b5:40:b3:fe:21:2b:ce:60:
1b:f0:48:eb:13:8d:67:d9:bd:45:da:21:d8:05:bb:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:C0:C9:40:18:52:76:3E:B1:F4:B1:3A:A3:7C:CE:C7:E6:E4:71
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:45:dc:54:8b:c8:e6:99:aa:91:9a:e8:34:e7:54:bd:ed:
c7:00:5e:30:da:ac:66:e7:b4:75:08:30:d7:1a:83:74:37:b6:
58:2f:84:e3:bd:f1:21:fc:90:11:1b:99:35:7d:c9:71:18:78:
f6:ef:3a:20:b0:ab:36:74:fd:b5:37:e2:7b:54:1d:31:5b:f6:
a3:44:b1:cd:7b:8e:96:b3:d4:cc:57:2a:73:d9:b8:62:ec:a2:
1e:17:98:87:2a:83:cc:c8:1c:38:75:67:56:37:9e:b5:10:6b:
91:50:09:7e:ec:19:da:83:52:4c:8a:f0:66:7d:6e:0f:19:c4:
af:48:da:09:80:9f:95:3f:4f:75:0e:03:db:c2:65:ea:dd:84:
fa:e5:69:59:0a:47:25:a3:eb:b3:5c:78:0c:10:b8:c4:bb:21:
be:0d:98:b0:f5:7e:e5:a6:a5:06:86:94:04:cf:ed:e8:9a:e6:
d0:dd:a1:86:df:f3:13:2e:3c:51:78:f0:7d:32:94:72:81:e5:
6e:f9:99:f4:e7:e5:3d:b3:70:5d:23:bc:6a:8a:79:6e:c4:33:
0d:84:d5:85:cc:c5:e2:f0:00:18:6b:f0:df:01:5f:d8:31:2e:
43:b3:20:eb:72:2f:7a:fa:95:fa:5a:80:a0:b2:f7:09:0d:f2:
4f:f9:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:01 2026 by rpki-client