Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: WeKrlfi28z3hoK6X9hgDjsTnYOwni2s6k2Szi25KTwk=
Subject key identifier: 0B:F3:5B:3F:AF:91:45:80:F3:D4:87:E3:CD:8C:B3:AD:92:6B:35:E1
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 019CB05B400588F4FB11B772A0747F7AE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 02B4
Signing time: Mon 02 Mar 2026 21:01:36 +0000
Manifest this update: Mon 02 Mar 2026 21:01:36 +0000
Manifest next update: Tue 03 Mar 2026 21:01:36 +0000
Files and hashes: 1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: Sj86bj9q2InvMeYPazSzMCX7kSY6SWscGmacUixU64A=)
2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5b:40:05:88:f4:fb:11:b7:72:a0:74:7f:7a:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Mar 2 21:01:36 2026 GMT
Not After : Mar 3 21:01:36 2026 GMT
Subject: CN=0bf35b3faf914580f3d487e3cd8cb3ad926b35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:59:bc:21:bb:2a:77:86:5c:b4:c8:fb:16:
09:6e:8d:c6:0e:0c:9d:7d:2e:39:32:b2:9d:19:90:
42:07:b4:7a:aa:69:cb:ac:8c:4f:1c:dc:36:91:94:
10:64:2d:17:bf:84:87:fc:fb:54:b5:e8:d2:b7:4f:
99:2c:aa:76:06:0f:1b:6e:b7:ef:d2:48:ee:e7:15:
11:ce:43:1e:3b:ae:ee:32:3a:fc:0c:ac:e6:e9:97:
db:d3:66:52:dd:44:8c:32:96:1b:ae:32:87:2d:f9:
05:ed:87:35:80:e6:78:3c:df:c6:ec:eb:ff:dd:61:
e0:b6:ea:c7:9a:07:c4:fa:4a:cb:d2:49:2d:b7:ed:
70:12:51:e9:0b:4b:8c:1b:b3:57:1d:f2:26:42:3d:
ec:ba:8e:4f:3f:db:92:d3:b6:6f:9a:f8:3a:dc:c8:
85:5d:c8:90:ee:72:c9:de:36:37:8a:fa:30:11:41:
2f:c6:6b:86:63:32:f9:0a:c9:7f:12:9f:75:46:1c:
f5:a0:e4:06:00:d3:be:34:0e:c4:10:47:21:7a:46:
50:ea:e3:5a:0a:2a:6c:89:90:48:e6:f5:f6:dc:86:
9f:21:0a:77:b2:4f:b3:4b:8a:9e:80:cc:48:ce:72:
4e:63:ed:a0:a1:06:62:c3:2c:48:f4:d2:a9:5a:77:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:5B:3F:AF:91:45:80:F3:D4:87:E3:CD:8C:B3:AD:92:6B:35:E1
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:70:fa:05:c4:34:76:8d:f9:39:62:25:02:5b:db:bc:40:8e:
b3:3c:6d:89:e5:0b:d5:62:90:94:83:b4:71:6a:5c:ec:9d:f9:
83:4c:a0:e8:5a:e6:cc:af:cb:57:68:6c:56:b6:b8:50:59:75:
b1:de:da:bc:3e:12:0c:aa:c5:1d:7b:d3:b1:fd:d9:2d:ad:82:
06:33:61:bc:88:04:ba:a5:a6:cd:86:f9:ce:a9:37:c3:fd:59:
46:de:a9:a1:91:ff:bf:05:b0:ae:86:76:39:b3:f5:55:aa:c1:
e7:b6:85:8b:fd:58:4f:52:93:88:1e:02:de:30:18:0b:fd:23:
72:8e:29:93:03:1f:51:2e:8f:66:3d:8c:20:4e:38:4c:74:f5:
5d:0f:a8:aa:7b:c2:e1:41:78:c0:34:76:3c:cc:fa:0e:7e:fc:
2d:a9:6d:06:99:5a:71:30:a8:3a:a8:66:f4:c4:2c:53:a4:77:
d3:76:76:6a:28:a6:d1:c0:6b:e6:0f:a5:2e:fd:5c:a5:37:89:
4e:7a:6d:a9:f3:ae:06:86:34:65:a7:76:90:ea:21:d3:d4:fd:
cc:03:b3:13:bd:c1:10:06:a9:eb:72:72:f9:56:c1:7c:db:a2:
eb:82:8d:f4:eb:41:d9:28:74:d5:00:a2:f0:44:94:ba:d0:64:
2a:ef:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:10 2026 by rpki-client