Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: d5y9i2uKlSGRoQnMNV86OYmdhJrGcFaZkOrAH9l6Ebg=
Subject key identifier: D1:9E:99:18:80:1C:87:0B:7F:4F:1F:5E:69:00:14:ED:A4:84:1D:7D
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019CABA1D7272C614D8A1068B9CDDDEB2759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: XxSdnjPnpzy5LyGftSstm6-fmZk.roa (hash: W+0II2qd7g6eEZycD1RXmyb9DYBIh88Zg19DWlRL1dE=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: yjTRehqGvqF0YNbSXNXNka648VROZ8zB7zg6cpyhJ8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d7:27:2c:61:4d:8a:10:68:b9:cd:dd:eb:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=d19e9918801c870b7f4f1f5e690014eda4841d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:f6:70:39:51:11:2f:81:4f:29:a3:77:20:
ed:07:ff:22:0c:cf:19:17:b4:68:0a:9a:c1:1c:e5:
81:ff:d5:b4:26:da:df:54:f4:6f:c1:83:a9:1f:ea:
11:9e:63:8d:d4:45:4f:13:e4:aa:b5:25:99:3a:a6:
54:7e:ee:30:6e:16:be:ba:6f:4a:b7:3a:a3:57:cf:
23:ac:e9:70:b8:16:02:db:03:04:71:11:b6:b5:00:
cc:52:71:d0:92:05:f0:13:6c:e6:4e:bc:91:a5:dd:
ac:e8:cd:08:ba:50:a2:5e:ed:cc:91:9a:6d:11:e4:
dc:ac:8f:40:48:4d:f4:68:56:4d:c9:68:19:65:ba:
99:27:22:82:69:31:4f:c8:d8:13:c2:22:9e:91:e2:
03:cd:81:1a:6d:eb:83:f8:31:f0:de:6e:96:8b:de:
ad:27:6d:01:2e:e1:7f:2d:e4:a4:c6:dd:a7:17:bd:
b9:37:f1:43:99:91:78:0f:97:cf:67:17:48:ae:a5:
3d:47:83:d1:6b:2a:c0:0a:41:6b:1a:c3:bb:45:85:
64:f9:c8:c2:de:29:ba:e0:76:51:02:83:40:1b:71:
c0:d3:1c:dc:48:be:85:7c:9c:ec:15:b9:25:38:54:
0f:39:16:6f:0d:71:6e:72:fa:7c:0e:55:95:31:c7:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:99:18:80:1C:87:0B:7F:4F:1F:5E:69:00:14:ED:A4:84:1D:7D
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:e6:eb:3c:d7:70:c9:8e:81:71:5f:92:30:e2:53:ae:8f:52:
e6:1d:b1:fd:2e:d2:64:16:63:27:67:1f:de:75:a0:08:dc:4c:
34:19:d6:9c:b3:d1:0f:2b:1a:fb:dd:ae:b1:d6:de:17:33:e0:
b2:5b:c8:4f:d0:e9:ae:6a:c4:0b:60:4e:c8:b1:c3:16:64:6d:
a6:9f:22:21:6c:9e:20:05:88:96:2f:40:f4:95:0b:7d:7b:61:
7b:61:9a:41:e7:be:f2:c9:af:8d:97:df:67:e8:0e:0c:ba:2c:
44:36:00:c5:b1:1e:c4:36:f2:71:2a:20:66:38:8b:4b:39:c3:
cf:df:06:5e:50:7a:7f:cd:3f:ea:38:47:a6:ee:74:f5:2f:46:
4a:ad:0c:ee:7f:47:ab:32:a2:04:9e:9f:69:da:d7:3b:1f:46:
07:50:89:03:58:12:a5:81:c6:11:9a:7a:44:6d:1a:0b:1d:83:
1d:13:b1:61:44:e1:c8:38:8d:4c:13:3e:cd:50:d5:fb:9e:ad:
27:6b:5c:6e:52:79:a5:89:04:26:ea:49:1b:4f:b0:64:3e:5b:
a0:75:17:ff:3e:e9:60:f3:25:11:e2:6e:a2:2d:15:7d:0c:93:
9f:58:04:88:84:8d:8e:e5:e3:1b:fa:b0:a9:4e:7e:00:d2:14:
ca:20:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:27 2026 by rpki-client