Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: TSEpIc77xCQA0WnufmeIX5Y19esyAIZJYfraE4c3PMQ=
Subject key identifier: 08:82:AB:9B:2F:24:04:96:B0:F1:65:E0:C4:15:20:83:70:CF:CC:FF
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 01A0BE0BDD6313F57A831193C9EE94094D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0996
Signing time: Sun 20 Sep 2026 09:00:43 +0000
Manifest this update: Sun 20 Sep 2026 09:00:43 +0000
Manifest next update: Mon 21 Sep 2026 09:00:43 +0000
Files and hashes: 1: NDzhVbz3oeZ11q9_LylV2ZPngdM.asa (hash: DgFN6Xf/HdcvFRuAAAFfHYivxEVG4xC2XmK5Ds7rm28=)
2: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
3: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: JhD0hR6i8cRxOQLLyyj1dhohWJm9l3QjXsH18OOjRWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:dd:63:13:f5:7a:83:11:93:c9:ee:94:09:4d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Sep 20 09:00:43 2026 GMT
Not After : Sep 21 09:00:43 2026 GMT
Subject: CN=0882ab9b2f240496b0f165e0c415208370cfccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:64:6e:64:f4:22:f7:76:37:11:3c:26:b9:
38:ea:1e:82:58:43:d8:ac:33:02:3b:0a:b6:d3:16:
b2:93:71:dd:8e:b6:54:70:72:11:ea:74:81:7a:54:
06:f1:42:d8:86:b0:72:3c:a1:dd:8a:5c:af:aa:0f:
b6:5f:43:b3:21:fa:81:c6:64:b7:89:22:aa:11:06:
fb:d7:22:fb:f1:9b:ea:10:fa:2f:0a:9d:32:13:d2:
f9:0d:83:f9:77:96:52:3c:5f:98:a0:00:24:0b:40:
d8:eb:aa:e1:46:63:cc:eb:ad:4f:ae:6c:98:19:8e:
c9:67:75:83:3c:c2:28:c0:ec:79:1d:93:e7:41:7f:
2b:87:79:b6:c2:9a:48:dc:6f:d4:a1:03:e4:72:14:
db:26:1f:ae:19:e8:40:3e:56:7b:91:e0:bb:a4:1d:
d5:62:36:58:a8:ad:af:af:d8:a2:38:f1:1f:a6:4b:
f5:fe:1c:a9:d5:f1:66:92:29:10:50:a5:cb:cd:d4:
6b:88:87:14:f5:6f:f0:2c:4f:32:22:99:42:e9:2f:
16:a1:5a:df:c1:f3:9c:89:98:d7:45:e6:ac:6b:9e:
43:b9:d7:68:fa:f0:75:72:66:9d:43:f2:82:63:32:
3f:f3:c3:e9:7f:94:7a:0e:7b:97:fd:60:5a:52:8e:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:AB:9B:2F:24:04:96:B0:F1:65:E0:C4:15:20:83:70:CF:CC:FF
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:47:4e:17:b2:c6:bc:88:e8:53:a5:b8:69:ab:0c:8b:a6:0d:
b2:57:44:e8:7d:cf:d9:c1:61:e1:d3:14:26:13:73:44:de:1c:
92:da:98:9f:d0:db:e9:50:12:b0:1b:00:ed:3d:4c:0d:b0:83:
b9:ba:4f:cc:94:b2:c6:27:af:3f:b3:5c:49:22:8d:1b:d7:61:
56:cd:a6:11:fe:02:0d:eb:3a:4c:19:88:60:77:68:7d:62:2d:
da:b1:6d:a3:4d:ef:36:f1:c0:9a:e3:f4:05:17:5e:5c:65:66:
1a:eb:ce:c2:6e:dd:77:45:4b:48:5a:a6:42:3d:7a:53:a5:25:
90:3f:d1:1d:31:b4:2a:31:f0:83:96:38:a4:0a:82:86:98:6e:
ed:4c:e5:d1:79:14:3a:5c:14:e9:27:c4:b2:53:c0:71:02:5f:
02:a1:ba:23:08:19:f8:37:2c:a9:22:55:ad:b9:0e:c1:cb:29:
13:68:f0:5b:03:43:ed:cb:ea:b5:3f:54:3e:d4:2b:0d:94:5e:
83:f2:31:dc:00:5e:c5:ac:a0:42:27:ff:ca:a6:42:4e:98:93:
49:93:2b:8f:b1:ab:a4:3a:8a:43:e6:2c:68:85:26:40:39:23:
87:09:8e:78:f5:ec:aa:fe:e7:02:9c:44:f6:cf:07:ab:67:e6:
13:6c:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:21:07 2026 by rpki-client