Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier: chWxVq2SyvjAFqIMxkQp5w2QCV5Q2y9Cwg/yN5lBkIM=
Subject key identifier: CD:97:D8:CD:19:8E:07:E9:0B:3F:38:F4:0F:A2:07:67:7D:5A:0B:36
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 01A131462DEDEA09F54E3A7A842B7262107B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number: 0509
Signing time: Mon 12 Oct 2026 18:00:45 +0000
Manifest this update: Mon 12 Oct 2026 18:00:45 +0000
Manifest next update: Tue 13 Oct 2026 18:00:45 +0000
Files and hashes: 1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: Wloet6SiUfn5E87rNUIPVv702yKj2rYjdlVjGCWNyzM=)
2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:2d:ed:ea:09:f5:4e:3a:7a:84:2b:72:62:10:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Oct 12 18:00:45 2026 GMT
Not After : Oct 13 18:00:45 2026 GMT
Subject: CN=cd97d8cd198e07e90b3f38f40fa207677d5a0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:f9:00:87:2e:f1:c7:9a:27:27:d1:14:80:
eb:58:82:7c:6d:e0:d2:0d:bf:6e:ab:43:d3:1c:01:
2b:af:f7:61:81:71:1f:a4:14:71:c4:92:4e:48:db:
e0:e7:cb:34:ae:77:1e:63:95:21:31:9f:ef:a4:91:
c5:e2:f6:47:2a:a1:d1:15:6b:63:87:26:b5:6e:12:
c3:66:f3:c8:59:4d:d4:9f:26:57:90:af:0a:06:a9:
de:6e:87:db:e5:05:96:e8:4a:e9:21:b9:3b:82:02:
9f:fc:aa:73:b1:de:5a:a8:2e:5b:4f:e9:22:08:70:
c6:60:df:a5:67:59:c3:cd:d2:fa:26:59:68:e5:1d:
95:0e:6f:2c:af:c0:89:fb:c8:f8:b6:19:bb:fc:b8:
1a:8d:4b:9b:2c:f5:78:c1:17:63:6e:51:00:a5:36:
b4:3e:9e:09:22:b3:c9:f7:83:cf:a1:ed:5a:a7:68:
4b:12:9f:db:fe:0e:97:dc:46:bb:7e:97:0a:13:13:
cd:bf:a4:e4:63:73:ff:49:38:88:49:5e:19:17:91:
23:bc:64:b8:a1:a3:f6:ad:89:60:b8:bd:23:34:b5:
2f:03:9e:32:4d:2f:de:9c:12:db:97:e2:ac:35:ba:
3f:96:46:9d:e6:7c:d8:b7:d2:e4:74:0d:e1:59:4f:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:D8:CD:19:8E:07:E9:0B:3F:38:F4:0F:A2:07:67:7D:5A:0B:36
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bd:cc:0f:e1:6c:06:3a:ff:55:43:2d:6b:f4:ea:22:1e:1c:
91:f5:56:a1:f3:f5:21:f5:de:04:cc:56:b5:b9:71:d7:9d:a9:
a6:1c:f1:dd:76:a7:df:4b:60:bd:0c:43:20:e8:ea:ed:5d:44:
d5:5a:64:14:ee:3c:bd:44:7d:a9:d8:74:36:10:b6:57:c9:c5:
fa:5f:f0:7d:f5:d5:53:c5:31:9e:33:36:5f:b8:65:94:f2:e6:
3d:eb:da:59:06:a3:a8:aa:9c:63:70:30:c7:bb:12:44:8c:f4:
36:d3:09:38:39:26:c6:71:31:07:fc:bf:54:a2:d7:8e:c7:57:
a4:ac:23:a8:80:55:1c:b1:fc:d3:d5:58:42:ee:82:c1:6e:6d:
15:28:a1:60:b8:6a:d5:e0:04:c5:b4:be:73:b5:40:cb:38:7d:
fd:f6:68:ff:01:ba:f6:44:c8:d7:89:8a:f9:44:5a:e7:dd:3a:
a0:44:e6:4f:ed:93:37:1b:6e:ec:6f:e9:11:6d:b0:62:e4:72:
97:5a:ce:59:80:c3:6c:29:65:61:ef:20:db:76:d4:49:3e:e6:
49:ca:a3:97:32:cb:14:ef:7a:d9:3f:d3:38:34:ee:83:f5:0f:
3c:0f:29:55:23:ff:c4:4b:80:8a:16:a2:73:3c:45:27:c7:4b:
83:c2:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:30:06 2026 by rpki-client