
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
File: iljqUXnWZHGoIQxi_MhO8XvUvz0.mft (raw, json)
Hash identifier: 17CzcvGMd5HB8Sbljqr0FXWNidiPuDZ7pRy7ran5Zn8=
Subject key identifier: 6B:B5:96:E7:8F:60:A3:EB:76:10:6A:91:05:D3:FA:5E:C8:D9:DC:EB
Authority key identifier: 8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D
Certificate issuer: /CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
Certificate serial: 01A0C40E42B070EBCA3B29495FE429B8FC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
Manifest number: 012B
Signing time: Mon 21 Sep 2026 13:01:03 +0000
Manifest this update: Mon 21 Sep 2026 13:01:03 +0000
Manifest next update: Tue 22 Sep 2026 13:01:03 +0000
Files and hashes: 1: iljqUXnWZHGoIQxi_MhO8XvUvz0.crl (hash: 5yf6foNLarpmmx3lSsrJSfGHHnsO3Lg6eDwstBdgKM8=)
2: mF1RS8LnLkXN8vWWTILBQMonH6U.asa (hash: RoNJP5GISKj19rEZAkT7j2xuvCAzO+US0l9wkh11poc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:42:b0:70:eb:ca:3b:29:49:5f:e4:29:b8:fc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
Validity
Not Before: Sep 21 13:01:03 2026 GMT
Not After : Sep 22 13:01:03 2026 GMT
Subject: CN=6bb596e78f60a3eb76106a9105d3fa5ec8d9dceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:cd:d3:aa:76:17:95:4e:30:00:41:86:b4:
9a:dc:23:cb:1c:9f:34:66:ef:62:28:2b:29:59:df:
22:d6:b6:8f:16:8f:5c:d1:04:1c:aa:89:72:cd:9d:
a3:ba:71:98:73:30:ab:63:02:f4:54:52:82:32:70:
9e:47:23:94:7a:a7:f1:57:76:7a:f4:30:c3:4a:44:
49:b0:45:a7:b5:e2:5d:1b:fe:92:7f:15:8b:4c:06:
96:8b:63:3c:27:43:c5:be:a0:f0:ec:be:03:aa:e6:
05:01:50:d7:c2:70:cf:20:b2:ea:b9:8c:02:f1:1d:
a9:8b:b5:ac:8b:bc:e9:f0:1b:eb:8c:39:2d:0a:10:
93:bc:ce:7a:44:28:ca:a5:4e:ee:d4:b5:fe:b6:fe:
bd:65:45:0e:5a:1b:9d:83:4a:9a:ee:00:68:de:e7:
3c:69:32:03:5f:f6:26:11:7b:89:71:6e:a1:05:4e:
bc:7e:7c:d5:9e:a4:c4:66:e7:5d:ed:d8:97:74:d9:
39:7d:d8:06:08:3e:77:df:dc:de:38:14:c6:e9:bd:
e1:dc:08:a2:a2:a0:be:9f:f5:3a:84:1c:5f:e2:3e:
26:99:00:b1:5c:53:cd:cd:02:f8:47:56:ff:cc:0e:
75:7b:25:43:e8:02:9e:65:8e:36:11:3e:7e:30:32:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:96:E7:8F:60:A3:EB:76:10:6A:91:05:D3:FA:5E:C8:D9:DC:EB
X509v3 Authority Key Identifier:
keyid:8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:91:54:47:6d:f0:7d:3d:cf:eb:de:6b:b8:d7:f7:15:c4:
06:37:75:ef:a4:75:42:1e:ad:3d:8a:3e:3e:8f:c8:11:95:07:
8a:30:f1:9d:03:0d:14:00:5b:db:37:31:66:7b:77:dd:da:f1:
01:50:b1:5d:0b:fe:1c:64:09:e6:72:a5:62:74:67:a6:55:eb:
bb:a9:06:7a:3c:38:47:b0:68:c2:dd:aa:f4:6a:a7:55:4f:52:
e6:5f:a8:96:a6:ba:f6:aa:fe:6c:59:e2:be:82:ec:34:fb:91:
24:13:bb:6c:7a:88:8f:ff:51:fc:f4:f4:45:c6:d5:2e:21:be:
bf:2c:0e:0e:37:96:52:4b:bd:61:c3:a3:d7:e1:fa:7c:d0:af:
2f:b6:44:b3:7e:f7:42:91:71:8f:c2:62:92:fe:7c:99:2f:5f:
f2:c2:a6:72:56:3b:e4:bc:79:8a:b2:66:b0:fc:2e:0e:9f:44:
25:4c:14:e7:e8:0f:4f:c6:99:05:08:59:69:ee:1a:da:72:d2:
bc:9f:08:48:ca:b4:02:a3:44:30:6d:5c:33:9f:9a:00:3e:d4:
18:81:5f:30:26:4f:16:f6:ef:23:36:99:ea:58:57:56:23:94:
6c:05:2a:2a:49:1a:65:ac:bc:a3:5d:a2:6d:7b:0b:0b:49:fa:
56:96:8e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDkKwcOvKOylJX+QpuPxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNThlYTUxNzlkNjY0NzFhODIxMGM2MmZjYzg0ZWYxN2Jk
NGJmM2QwHhcNMjYwOTIxMTMwMTAzWhcNMjYwOTIyMTMwMTAzWjAzMTEwLwYDVQQD
Eyg2YmI1OTZlNzhmNjBhM2ViNzYxMDZhOTEwNWQzZmE1ZWM4ZDlkY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fPN06p2F5VOMABBhrSa3CPLHJ80
Zu9iKCspWd8i1raPFo9c0QQcqolyzZ2junGYczCrYwL0VFKCMnCeRyOUeqfxV3Z6
9DDDSkRJsEWnteJdG/6SfxWLTAaWi2M8J0PFvqDw7L4DquYFAVDXwnDPILLquYwC
8R2pi7Wsi7zp8BvrjDktChCTvM56RCjKpU7u1LX+tv69ZUUOWhudg0qa7gBo3uc8
aTIDX/YmEXuJcW6hBU68fnzVnqTEZudd7diXdNk5fdgGCD5339zeOBTG6b3h3Aii
oqC+n/U6hBxf4j4mmQCxXFPNzQL4R1b/zA51eyVD6AKeZY42ET5+MDIcbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu1luePYKPrdhBqkQXT+l7I2dzrMB8GA1UdIwQY
MBaAFIpY6lF51mRxqCEMYvzITvF71L89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zMmY4ZGUtOTRkZi00MGU3LWJjOWQt
NDQ3YzdjMDQ0NTRiLzEvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zMmY4ZGUtOTRkZi00MGU3LWJjOWQtNDQ3YzdjMDQ0NTRi
LzEvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPmRVEdt
8H09z+vea7jX9xXEBjd176R1Qh6tPYo+Po/IEZUHijDxnQMNFABb2zcxZnt33drx
AVCxXQv+HGQJ5nKlYnRnplXru6kGejw4R7Bowt2q9GqnVU9S5l+olqa69qr+bFni
voLsNPuRJBO7bHqIj/9R/PT0RcbVLiG+vywODjeWUku9YcOj1+H6fNCvL7ZEs373
QpFxj8Jikv58mS9f8sKmclY75Lx5irJmsPwuDp9EJUwU5+gPT8aZBQhZae4a2nLS
vJ8ISMq0AqNEMG1cM5+aAD7UGIFfMCZPFvbvIzaZ6lhXViOUbAUqKkkaZay8o12i
bXsLC0n6VpaORg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:49:01 2026 by rpki-client