Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: isoheH+TrbWMl3ihZkUKD23nXABbV2oyL9S2KpX9Xzg=
Subject key identifier: 09:98:48:E9:C1:6B:DC:86:51:DD:AF:F6:4A:E9:9A:4D:17:EE:3E:31
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 019CA9EA7EA5CBC7F3BD45C1C0ABC0A516AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:00:43 +0000
Manifest this update: Sun 01 Mar 2026 15:00:43 +0000
Manifest next update: Mon 02 Mar 2026 15:00:43 +0000
Files and hashes: 1: OW0uslrg_GEgmEZG28eR9rKF34M.roa (hash: KrRJivtezUitThQ/Pah/fHB0G7rklcjBtZ4pZk0sSHc=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: mAVFZh1lpVMRdyP9S7LZJezogEJqZTZ0BxGJO55y3Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:7e:a5:cb:c7:f3:bd:45:c1:c0:ab:c0:a5:16:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Mar 1 15:00:43 2026 GMT
Not After : Mar 2 15:00:43 2026 GMT
Subject: CN=099848e9c16bdc8651ddaff64ae99a4d17ee3e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:d0:79:73:a1:18:c3:27:5e:97:dd:fe:50:
a4:ec:69:01:c6:37:44:ea:01:fc:fd:ad:b8:9d:2b:
95:f2:b9:c3:da:fa:b1:46:bd:0f:d9:d2:6c:e4:79:
79:38:49:f1:05:cb:b5:00:61:6d:e3:9e:97:9c:e9:
7e:8e:fa:9d:4b:cc:91:40:c0:dd:96:c9:07:c0:55:
be:5f:49:a7:15:52:48:34:74:dc:1d:68:3b:8b:a4:
7e:97:6a:92:ac:f1:5b:80:02:51:9b:0a:8f:24:ca:
b8:ea:a4:03:c4:22:22:19:b8:8a:f6:7b:64:5f:ab:
35:dc:ab:fd:61:a5:ad:fa:93:b2:2e:61:a8:62:f0:
1a:b8:3b:66:ea:ed:d2:c6:58:1f:73:47:6e:18:a1:
e6:0a:69:7f:12:d8:75:88:9d:34:0a:51:f0:87:7d:
e4:e0:2d:b3:b6:f3:dd:ba:d0:53:a1:be:ce:a2:1a:
5f:5b:7b:1c:9a:db:78:4f:a0:59:37:3f:89:e3:5c:
17:a7:be:9e:a0:b6:93:44:d5:25:e5:9d:18:9e:35:
b4:41:c4:52:93:03:a5:22:9d:29:90:22:67:d3:2d:
fc:cd:81:0f:61:ba:60:43:ab:26:f2:c0:9d:ab:40:
0b:67:4a:38:a1:75:98:6d:82:41:26:ff:e7:bf:95:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:48:E9:C1:6B:DC:86:51:DD:AF:F6:4A:E9:9A:4D:17:EE:3E:31
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9b:31:5f:54:35:c3:bd:03:fc:4a:90:97:43:39:20:7a:2e:
24:14:ff:e4:60:d5:b8:79:a6:e7:92:9f:05:ca:29:47:89:c8:
1c:58:15:3a:13:7d:cd:f2:44:48:90:71:14:4c:59:9e:af:d5:
b2:d1:ef:9d:c5:b4:00:e5:45:24:e0:3a:d8:1c:2d:a7:10:77:
30:4e:ca:44:c5:d5:f7:f2:19:fd:cd:98:bb:f2:09:f0:f7:aa:
e0:4a:23:28:ef:9d:9b:5b:a7:83:4b:0c:3b:35:a8:45:de:1f:
4b:20:66:c1:d6:1f:f3:4f:45:44:30:e7:0a:c9:0f:07:d4:da:
f3:4b:a5:c4:04:83:3b:92:82:2f:51:47:2c:52:f6:07:2d:14:
0e:8d:63:5f:58:c1:4f:93:b5:a2:0f:db:57:65:4c:05:a8:a3:
ef:58:58:2a:60:c5:3b:f6:83:91:e1:48:c1:e7:28:e8:25:6c:
04:a4:65:93:9e:a0:34:cd:3e:9e:18:cf:e5:17:e6:e7:00:b8:
e5:3f:f8:2b:84:15:c2:74:87:3c:29:1b:84:2b:85:0d:09:86:
97:5d:95:92:2f:3c:df:47:4b:0c:d8:c9:85:59:99:5d:84:82:
f7:a4:37:a1:09:15:5e:cf:d5:3c:c7:38:85:f9:ba:58:f8:97:
51:3a:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:52 2026 by rpki-client