Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: CXxCyvOLKmlgrTxQE1q98nOj6l0WuBoPBnnHWBcQEGo=
Subject key identifier: 5B:19:C2:72:8C:74:B4:5E:83:3D:33:DB:A9:37:23:19:16:2D:04:D2
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 019FAE9B2D5D510FAEEAEFCF59E1FA0907E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 16:00:32 +0000
Manifest this update: Wed 29 Jul 2026 16:00:32 +0000
Manifest next update: Thu 30 Jul 2026 16:00:32 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 9vzi6Z2j66cpeOj8lTjA9Tl0Hu6Rnm/xlVCa4vrvMdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9b:2d:5d:51:0f:ae:ea:ef:cf:59:e1:fa:09:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jul 29 16:00:32 2026 GMT
Not After : Jul 30 16:00:32 2026 GMT
Subject: CN=5b19c2728c74b45e833d33dba9372319162d04d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:d6:5b:dc:6c:84:0e:e3:6a:d9:1d:ef:91:
3f:ae:4f:9a:10:ba:fd:85:8a:88:9b:59:9a:70:15:
57:e4:65:90:71:ae:f4:af:53:9d:82:af:e4:0f:cb:
23:d0:6c:ff:8c:ba:c7:7e:3e:1e:f9:96:30:60:b3:
7a:78:fa:7e:72:db:00:33:81:7f:3c:92:a2:69:17:
0b:61:26:5a:19:b7:cc:65:d8:5a:52:18:b3:e9:77:
24:d8:41:f3:c0:22:0c:3a:af:ee:61:bf:3a:e0:96:
46:74:ed:47:fe:86:04:c8:4d:56:bd:f8:78:d5:65:
89:d0:e9:c5:15:aa:5e:06:c9:04:92:f4:58:69:9f:
ae:35:9f:5b:19:79:c1:2b:9d:1e:ab:ba:4d:c8:03:
19:72:f6:11:f8:c1:94:a3:06:a7:d3:c6:08:d0:2c:
f2:46:7b:7b:42:f3:fe:13:9e:94:e6:df:03:2e:7f:
59:cd:84:71:09:80:90:29:90:31:0b:b9:f9:ad:9a:
9c:36:28:b4:73:6b:8d:87:7a:ce:61:a2:20:04:f0:
0e:35:53:db:e9:1b:30:76:59:f4:5d:28:a4:82:a9:
56:41:66:17:17:b9:c0:70:75:aa:53:d1:3b:cc:bc:
8b:1b:d0:6a:0f:76:55:cf:85:fb:d2:86:f7:4a:a1:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:C2:72:8C:74:B4:5E:83:3D:33:DB:A9:37:23:19:16:2D:04:D2
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:73:c2:bb:07:72:55:49:77:5d:8a:20:73:4b:6f:ea:8d:4d:
1c:d3:d3:5b:a7:1a:0e:ae:c1:96:b3:b9:a0:08:9f:7b:11:dd:
d6:97:f5:9d:45:64:22:3d:54:93:c2:bd:8a:b3:b7:c5:dd:7d:
c2:a3:66:60:35:d3:96:0f:7d:52:b2:32:a8:e6:8d:1a:7e:d1:
9a:5d:d6:fa:66:14:e5:c8:c6:31:62:db:11:d7:59:6e:19:26:
c5:18:ea:cb:66:43:bc:d5:7d:2e:18:b3:7c:4e:d4:56:f3:cc:
81:e7:cf:7e:e6:4b:1e:8d:af:26:a6:ae:75:7c:27:db:06:52:
95:3a:ee:d7:18:f7:46:45:90:cd:03:3c:1f:85:76:18:3d:9c:
cd:a8:56:47:8b:f7:b1:c8:16:f0:71:82:6c:c3:0a:a1:a6:9c:
28:40:29:28:21:74:51:a7:c8:7a:dd:99:a2:35:cb:b7:48:0d:
d2:8f:51:7a:87:c8:10:27:49:c2:d5:a2:36:ae:bd:24:ff:39:
a1:bc:be:64:0f:ab:74:b6:51:f1:99:7b:2c:6b:8a:78:51:3d:
ab:c0:25:af:7f:61:44:9a:0e:80:e3:4e:9f:e4:9d:06:02:e5:
dc:57:db:db:70:2d:4e:d8:aa:9a:c6:d1:d4:0f:a6:33:15:8b:
f5:a5:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:10:37 2026 by rpki-client