Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: t7F0d1687ftvqYz2lnOKKjr2/KPiNmqjGj6ZENykX8Q=
Subject key identifier: D2:57:D4:13:0B:8A:D9:7D:77:B5:E7:A0:21:A5:40:39:9C:6A:7F:4E
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019CAD596CB8E1C656CA2589FB67F07EDE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 01E3
Signing time: Mon 02 Mar 2026 07:00:44 +0000
Manifest this update: Mon 02 Mar 2026 07:00:44 +0000
Manifest next update: Tue 03 Mar 2026 07:00:44 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: YnbDcpc69EL9gzVqhkjluqkw6RdCU6fSkFJN70wA1yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6c:b8:e1:c6:56:ca:25:89:fb:67:f0:7e:de:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Mar 2 07:00:44 2026 GMT
Not After : Mar 3 07:00:44 2026 GMT
Subject: CN=d257d4130b8ad97d77b5e7a021a540399c6a7f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:72:3b:07:82:cc:a4:ee:d8:63:c2:f3:5a:
a0:0c:4c:2c:e8:08:59:25:40:fa:18:ea:49:22:1b:
7b:b5:c8:6b:ce:33:21:e6:9b:d8:eb:d5:35:66:d3:
01:c2:d8:8a:09:89:4a:bb:37:4e:cd:d6:11:11:1c:
99:80:a4:6b:6b:2a:92:9f:ad:47:0f:2c:d2:40:7d:
90:19:5d:31:65:dc:62:15:ef:51:f1:ae:40:ac:eb:
ec:b7:f8:4a:72:32:b0:49:4b:cb:97:82:f4:9f:82:
b4:e5:df:0a:07:56:f6:95:c0:d6:1d:bd:ff:3a:11:
26:b4:05:e0:6f:cc:d4:4a:aa:34:45:fe:b4:d6:a1:
76:6c:2d:0e:7e:fd:7d:ac:60:8d:08:54:2d:40:16:
53:13:4e:15:2c:25:56:78:a0:36:52:29:de:c5:01:
70:c8:97:e8:78:46:5c:b8:94:77:1b:1d:ce:bf:45:
03:d2:ca:90:b0:67:3c:6b:39:4a:19:b1:5b:04:b1:
fb:6d:05:4e:57:98:86:94:c7:b8:1c:d4:51:58:48:
6c:cf:9f:53:ea:b1:ca:fa:85:cb:8a:4e:ff:e3:49:
73:15:7c:83:2e:ea:2b:11:3e:b1:8a:56:3d:ff:0a:
0e:d3:4e:9c:05:2d:7b:fe:95:67:f4:08:81:15:5c:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:D4:13:0B:8A:D9:7D:77:B5:E7:A0:21:A5:40:39:9C:6A:7F:4E
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:55:db:73:a3:64:91:56:84:4f:f3:59:16:c7:a0:8b:33:
44:2f:20:3d:e9:43:42:a3:94:13:31:af:8b:7d:5c:9b:52:29:
f1:6d:6a:46:44:df:fa:e5:7d:13:6b:d8:08:8e:e1:16:1f:b7:
a8:96:ae:41:ee:8f:ba:81:d1:cd:c3:38:76:41:13:e4:ed:d1:
cb:53:96:7c:32:d5:02:8f:17:08:9a:b8:eb:e3:42:5e:a4:92:
c3:d6:1d:65:4a:4c:f0:27:04:c7:1b:ab:75:c8:83:27:53:3b:
69:52:8d:59:ef:59:cc:1e:7b:5d:32:d8:c1:19:a3:7c:f4:b9:
af:e2:74:ec:d6:bb:b0:31:34:68:55:11:e2:aa:38:bb:65:01:
42:01:9a:42:d7:4a:5a:71:12:8d:8f:9d:69:b3:ca:54:52:4d:
00:63:ef:4d:80:f3:7c:20:d3:aa:66:bd:1d:fb:8c:95:d1:3a:
d4:9e:14:b2:c2:3c:18:19:c3:5a:4a:2a:8a:c4:75:45:dd:36:
e1:fe:04:df:ed:a6:00:5b:b8:52:49:0f:30:84:88:9d:00:3a:
54:79:87:d0:3a:88:bc:ea:bb:8e:50:32:52:0a:1e:e0:f5:d6:
a4:2f:87:bf:57:f9:06:0d:7d:11:42:db:80:a3:a3:fd:ba:b3:
bf:6f:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:44 2026 by rpki-client