Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: JqAQ1wcAZo8zrc1guh3rXERso+31gQvoqb7pVcCEfgY=
Subject key identifier: 7F:C2:5D:F5:A8:08:1B:1A:F3:D7:45:41:9A:0B:06:5D:49:50:11:4D
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 019D9962B950E5460541EC4783C9125CF400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: OW0uslrg_GEgmEZG28eR9rKF34M.roa (hash: KrRJivtezUitThQ/Pah/fHB0G7rklcjBtZ4pZk0sSHc=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: V/Y7AGByqpszr3eH+99NBRBvE7wM4/D24u4dc/JpUjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b9:50:e5:46:05:41:ec:47:83:c9:12:5c:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=7fc25df5a8081b1af3d745419a0b065d4950114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:81:b6:9d:62:4c:a1:c7:6e:16:06:f8:8b:
28:00:2b:a2:84:95:20:0e:27:46:dc:0c:bf:27:97:
fd:ba:8f:9b:c3:c0:5f:f5:a6:2a:40:12:30:17:2d:
6c:e8:96:67:9b:bc:95:a1:55:2e:3c:49:b6:5a:fc:
e1:4f:7f:a5:5c:69:22:a5:7c:3a:15:15:df:86:ba:
c3:72:60:71:92:dd:65:5e:83:32:1c:85:6e:0c:7d:
87:78:01:30:6a:9d:af:c1:79:07:d8:ba:05:f1:49:
87:1c:1d:aa:d6:96:4e:e9:a3:0b:da:ee:7e:f5:85:
db:72:a1:4c:7d:55:c7:e4:8a:01:67:8a:e3:8d:19:
cd:46:b5:02:ee:c7:8f:03:df:79:44:a9:51:85:d9:
7d:99:4c:a5:54:89:dd:f7:0c:8a:45:f3:32:7a:8e:
38:fb:29:11:08:cd:b4:2e:73:82:14:95:bd:6c:ac:
34:45:b7:67:cd:a8:80:01:97:48:5e:54:cb:1f:7c:
fe:a2:58:6b:bd:e8:dc:00:b8:3a:58:22:16:bf:a6:
9a:a3:c1:8c:63:df:6b:ea:b8:06:11:a2:63:c1:f7:
07:9f:ff:69:92:c6:73:49:ec:d3:69:8d:8c:ea:62:
08:4f:87:bd:1d:e7:53:56:ce:e9:83:05:b8:48:a2:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:5D:F5:A8:08:1B:1A:F3:D7:45:41:9A:0B:06:5D:49:50:11:4D
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:b8:c6:d7:b5:98:82:86:fa:6f:b3:73:4d:7f:ab:4f:09:
a9:7d:df:aa:81:6e:37:bf:17:e2:3f:e5:53:de:88:b1:f0:da:
6f:f1:dd:cc:db:d9:1c:ce:2a:d3:43:76:72:9f:5b:37:24:06:
4b:49:e7:a2:27:a7:ff:2b:0e:75:0d:5a:92:96:ee:52:23:04:
4c:83:73:b8:49:27:43:fe:c0:3f:a8:54:58:6b:c7:66:09:e7:
43:29:e3:cc:96:5c:3f:de:c6:d9:b3:1b:ee:d6:c7:70:98:d2:
bc:e5:e1:7e:37:5f:38:34:ab:0b:6b:d1:3b:c4:3b:85:31:d8:
d6:8f:7b:f9:55:fd:15:80:76:ce:73:2e:95:55:98:9c:14:98:
9c:46:38:ea:0a:30:b5:b4:0a:bf:26:87:3d:65:78:6d:0c:ca:
85:eb:d0:83:07:d5:30:86:29:cb:e4:09:6f:4a:99:02:36:2d:
21:d7:cf:5f:30:d9:ef:8f:a2:45:63:2e:44:88:6e:10:e2:80:
77:cf:43:9e:01:b8:93:9a:ba:a3:8f:86:92:63:96:0f:d4:25:
9b:27:ab:1c:c8:08:ed:ab:d1:e4:d9:09:52:82:06:68:29:12:
71:2e:36:63:25:00:b1:07:07:f9:80:73:74:ed:42:fb:0e:47:
88:52:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:45 2026 by rpki-client