Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: XDr15SgQKXIFjFTErXphcW9KI6w0rF6mL0r1rZvE+YY=
Subject key identifier: D3:D1:F4:E9:C0:87:FF:0C:6F:32:5F:90:BD:F8:A8:D0:1B:72:7B:46
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 01A1AB9533B9D501BF0AEEF33D29632B21D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 0A11
Signing time: Thu 05 Nov 2026 12:00:44 +0000
Manifest this update: Thu 05 Nov 2026 12:00:44 +0000
Manifest next update: Fri 06 Nov 2026 12:00:44 +0000
Files and hashes: 1: NDzhVbz3oeZ11q9_LylV2ZPngdM.asa (hash: DgFN6Xf/HdcvFRuAAAFfHYivxEVG4xC2XmK5Ds7rm28=)
2: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
3: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: EikaJELjjjgW/x7PFt2DLwCXNHOI4H9DmagG1q3S6lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:95:33:b9:d5:01:bf:0a:ee:f3:3d:29:63:2b:21:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Nov 5 12:00:44 2026 GMT
Not After : Nov 6 12:00:44 2026 GMT
Subject: CN=d3d1f4e9c087ff0c6f325f90bdf8a8d01b727b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:51:23:92:6f:59:d8:9f:cd:f8:79:0d:f3:
ac:80:e6:75:e3:34:a4:44:15:8a:ca:79:ba:37:e8:
e0:a7:1c:2e:b8:1c:2e:d8:c4:ec:a5:51:44:54:bd:
e7:11:68:be:b4:97:7a:2e:00:25:75:6c:43:a3:bb:
8a:81:8e:e1:b4:b8:b8:54:db:6a:4e:5f:e0:4b:05:
81:cb:08:a5:4f:ea:aa:34:d4:17:e2:11:fc:b8:c1:
c9:36:55:98:8e:2b:42:b2:60:86:e0:0e:df:ec:76:
63:89:b8:eb:da:97:ae:77:52:16:5a:24:bc:6c:f6:
e9:2c:c4:be:d8:92:69:49:ed:69:47:76:43:8f:90:
aa:45:c7:e1:a1:ad:b9:15:14:a1:f3:37:d9:49:f6:
15:eb:7b:e4:cd:20:f1:9e:b3:2c:f0:c9:d2:69:a9:
42:8c:3e:f3:84:a9:00:2f:3a:ef:16:0d:88:56:f7:
1f:4e:30:e1:b0:97:5b:e5:db:4d:16:4d:06:63:f6:
e6:8f:59:2e:c2:0b:89:31:8d:34:f4:7c:5c:eb:04:
b1:36:80:aa:6c:60:9f:d3:61:9f:df:b1:a2:48:ba:
13:d5:a7:da:74:50:1a:29:cc:93:36:9e:c8:61:af:
d3:24:12:6e:6c:b4:7d:a1:40:39:60:4e:1c:ed:99:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:F4:E9:C0:87:FF:0C:6F:32:5F:90:BD:F8:A8:D0:1B:72:7B:46
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:59:c6:4f:2b:17:e9:ed:1b:15:88:3a:6a:0f:6f:c5:16:6f:
c5:3a:68:c6:f5:2d:3d:8a:1b:86:ef:81:4a:84:a1:c3:a7:ae:
cc:9f:50:55:7f:d9:73:16:a7:fd:b0:41:f4:bc:64:c8:03:3a:
ea:65:cb:52:16:39:b6:38:6b:57:a9:f6:dd:3a:c7:11:ef:6f:
d3:5d:8e:b7:a1:8c:13:5b:d2:d6:ed:65:dc:70:73:a6:e9:8a:
cd:87:50:2e:f1:27:f3:99:c5:bc:a1:d3:3d:1a:e6:c5:80:37:
65:bb:49:5f:81:37:75:c7:d6:60:4b:91:95:d0:3d:05:73:b1:
54:35:b7:97:0d:9f:43:5a:98:7c:07:9f:af:28:c6:cd:72:c4:
5e:e7:d9:ae:db:3b:a8:86:6a:54:18:c9:e0:35:06:71:24:3b:
6a:d4:85:1e:27:e2:c7:41:1e:eb:ae:f0:1c:fc:55:d1:b9:d1:
d9:71:1f:93:d2:0b:cf:f0:31:1b:2c:94:19:17:c6:14:dd:88:
08:75:b7:f3:04:ac:75:57:7c:86:db:93:43:04:12:21:71:4d:
7e:e6:cd:ff:a2:53:8b:16:b4:06:ef:4e:64:5f:fc:9a:ab:11:
8c:96:e6:07:a5:ba:cd:a7:8b:b8:1f:d9:cd:65:a3:40:9e:66:
e9:59:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:26:50 2026 by rpki-client