Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: SNzrgxZO+KpxPrEnYUBa63X57Xed3GI/InFx9Ll4phU=
Subject key identifier: AD:3C:DB:D2:B7:69:18:61:4F:E0:AA:C7:24:B9:86:02:20:43:7A:B8
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 019CADC7BA6C67073A5FD7AD451A0E9E650F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 1548
Signing time: Mon 02 Mar 2026 09:01:13 +0000
Manifest this update: Mon 02 Mar 2026 09:01:13 +0000
Manifest next update: Tue 03 Mar 2026 09:01:13 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: MI0omZGvOGUbdNQFsnB39NoGInCVVMKD8rSVlWj6cno=)
2: PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa (hash: 2NL/gh4kC5fIE0HniOqEKL8Ijhb8+hqlpLKTL/K3tGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ba:6c:67:07:3a:5f:d7:ad:45:1a:0e:9e:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Mar 2 09:01:13 2026 GMT
Not After : Mar 3 09:01:13 2026 GMT
Subject: CN=ad3cdbd2b76918614fe0aac724b9860220437ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:bd:6e:71:d5:55:98:95:f5:a7:18:05:81:
d1:c7:e8:0f:50:31:c8:b3:f0:49:57:cc:0e:5e:9c:
56:ea:a4:96:f9:1e:97:11:a3:fb:4a:4c:46:f9:75:
4b:08:05:0d:20:74:64:8f:dd:c2:67:f0:9c:96:87:
88:6c:ff:f6:e3:55:65:3c:1c:34:72:d5:46:de:8c:
7c:71:64:e2:db:a5:32:24:69:d5:60:bc:5d:c3:95:
73:f6:8e:05:e8:bc:05:33:a0:f0:21:13:56:f0:42:
dc:fb:e4:d7:3b:a0:f0:da:5b:81:52:0e:e7:da:a0:
eb:a8:30:61:05:e9:4c:0f:5e:d3:71:6d:89:c2:a6:
30:5d:45:c9:c3:85:ca:1c:04:84:6a:b0:65:a9:9a:
de:6a:86:92:09:60:9d:c8:f4:c2:12:a6:20:4b:3c:
51:58:b8:bd:eb:ab:ca:02:a7:f6:a5:70:c4:f4:54:
d7:0a:1c:65:e4:bc:4a:98:01:97:bc:86:97:9e:34:
08:af:9b:bb:63:ee:2c:56:6e:b0:75:bc:5c:93:2e:
50:1f:0a:72:0c:eb:ef:20:66:77:a9:c9:e3:f8:05:
13:8d:b9:45:59:8b:09:78:e8:eb:d9:30:85:54:6e:
63:d5:bc:27:19:a2:07:4f:88:f3:ca:fd:92:6f:67:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:DB:D2:B7:69:18:61:4F:E0:AA:C7:24:B9:86:02:20:43:7A:B8
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:44:ee:7e:91:7c:54:a0:5f:6a:cf:98:e8:57:c9:27:ff:
cd:7e:aa:24:39:b3:97:df:00:cc:5b:16:60:f4:aa:3f:fe:9b:
d6:89:33:bb:37:25:67:2f:3e:a6:9b:03:20:ea:37:dd:72:be:
05:41:95:fc:17:68:d2:ab:fd:e0:07:f6:1f:98:22:37:f1:76:
34:0b:91:c5:ab:c9:cb:1b:b5:66:40:b7:57:6a:21:33:6a:73:
d7:f0:26:ac:a1:1e:1a:91:fc:a4:0c:1c:4d:85:d6:88:05:57:
95:11:a3:d2:47:52:fd:3f:bc:26:c0:d0:c6:ef:52:c4:21:8a:
41:9e:bb:d5:fe:2e:55:71:73:7c:60:2b:e2:44:26:fb:2f:ad:
4c:37:4c:be:55:d7:51:d2:13:4d:4f:59:b2:e3:b5:1b:93:4c:
97:5f:4b:f8:72:a5:0e:4f:f3:2b:8f:5c:c0:24:da:9c:10:17:
ed:c7:60:84:1e:ea:77:c9:e9:60:92:18:ce:37:91:94:fe:9f:
3a:7b:c3:1a:30:fd:62:0b:fe:70:ab:da:d4:7d:53:f7:c3:af:
18:ab:cf:90:cc:81:39:1c:69:37:e7:ac:a9:31:62:87:ce:c6:
90:f4:8b:52:f6:b5:f0:a6:01:98:21:41:0b:29:7c:24:fc:2f:
fd:9c:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:19 2026 by rpki-client