Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: JaimTBDW8UL5gNGPfvXa11M1EbJc1xuUPaQsl9K1aTY=
Subject key identifier: 7D:64:F2:93:50:06:34:E1:DD:2E:48:10:04:A7:13:63:89:51:9B:85
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019D9CD0F2606DD1173AF674F58AEB96519A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 025F
Signing time: Fri 17 Apr 2026 19:00:32 +0000
Manifest this update: Fri 17 Apr 2026 19:00:32 +0000
Manifest next update: Sat 18 Apr 2026 19:00:32 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: uIbn/gaOT5zySRf8Ous7FD6FrX2HLTvh9ZTiOw8WvBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:f2:60:6d:d1:17:3a:f6:74:f5:8a:eb:96:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Apr 17 19:00:32 2026 GMT
Not After : Apr 18 19:00:32 2026 GMT
Subject: CN=7d64f293500634e1dd2e481004a7136389519b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:87:8d:47:50:ea:ba:9c:fb:04:26:ab:28:
56:89:d5:e2:79:89:5b:36:14:d1:57:b8:79:b2:cb:
5b:e7:e5:33:35:65:c2:ef:ec:96:fd:be:93:93:5a:
4a:eb:14:14:3b:42:0d:c9:f4:5d:bd:60:44:0c:5e:
e2:25:ce:9b:8f:54:ce:b6:64:71:0a:22:29:a0:df:
79:42:72:fb:83:a5:60:53:ac:37:df:26:aa:7a:bc:
41:dc:f2:41:58:11:30:d2:4c:a2:37:ea:16:43:a1:
cd:a2:65:0d:ca:72:3f:7a:02:1f:08:b0:57:df:5a:
96:68:88:6c:db:ab:ae:00:0a:b2:63:9b:80:67:28:
dc:8d:67:b7:54:c3:7d:d7:00:20:a7:6d:7d:6c:ec:
41:aa:0a:68:48:93:7f:cd:2b:bb:74:14:69:b8:98:
9e:05:53:4d:1b:eb:ff:b4:44:4a:74:31:88:5d:5b:
60:b8:88:45:d0:aa:ff:70:25:2e:8e:f8:8d:ea:ea:
25:c9:df:d7:1d:e4:e6:7b:f5:82:55:2f:b5:74:2d:
68:22:ef:67:fe:53:1b:54:0e:cd:a6:27:40:da:66:
08:d6:d7:64:51:7e:09:72:b4:f1:ec:0f:76:b9:75:
72:53:35:3a:42:3e:60:2c:35:9a:4e:4b:ad:47:4c:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:F2:93:50:06:34:E1:DD:2E:48:10:04:A7:13:63:89:51:9B:85
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:07:d0:70:61:d6:6a:15:5d:6d:84:10:fb:e1:53:e8:ca:b4:
a1:86:4a:b3:4e:ce:11:10:8b:f0:6d:5e:29:14:e4:42:43:72:
c6:4c:09:dc:69:d2:c5:2f:56:47:c2:a1:35:ca:0a:97:52:f7:
5b:b1:25:07:00:a7:cf:27:c7:32:20:e5:cd:ab:12:44:cf:12:
e0:b2:d7:a9:c9:fb:15:d3:be:fd:53:e8:f9:ac:e1:24:02:41:
e1:c9:88:60:7f:b2:c5:63:31:0f:eb:6f:bc:eb:86:b5:d6:cf:
0b:05:95:a1:3a:af:b8:bd:01:1c:fc:52:9f:77:3a:19:67:61:
29:c6:ee:2d:b9:e4:bf:12:52:09:95:51:96:3b:c8:5c:7d:50:
19:07:f2:3f:7e:5c:59:26:3e:26:10:1c:f0:42:eb:3c:ba:f9:
bc:cd:f9:82:73:90:ab:fc:c7:71:05:36:a3:c7:e9:b4:2c:69:
ad:51:7e:4f:4c:c0:ad:9c:49:52:fd:bf:a5:4b:9e:26:9b:58:
15:de:00:db:80:21:84:26:fe:9d:8c:15:15:f2:5e:8d:39:29:
69:e9:d7:95:6b:0a:53:f1:8a:06:78:16:6f:04:38:bc:7b:b4:
16:22:e5:50:b3:f6:bf:23:47:75:4d:c4:e9:05:f8:41:1f:1c:
ca:86:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:25 2026 by rpki-client