Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: YvlnN5oPluvLhxc5eBwsYlnfVJ/SjrjslunnD872Dj8=
Subject key identifier: 3A:FE:71:A5:2F:66:5F:E2:E5:DF:60:AD:24:DA:74:9F:FC:11:EA:EB
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019D99D0EE0D9564F4C0BD0E5C41E2531118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 08F2
Signing time: Fri 17 Apr 2026 05:01:39 +0000
Manifest this update: Fri 17 Apr 2026 05:01:39 +0000
Manifest next update: Sat 18 Apr 2026 05:01:39 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: JgYDNfue7f7yr8xkV0TrTAzkVy66iSiOWi3qsBY7rh4=)
2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ee:0d:95:64:f4:c0:bd:0e:5c:41:e2:53:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Apr 17 05:01:39 2026 GMT
Not After : Apr 18 05:01:39 2026 GMT
Subject: CN=3afe71a52f665fe2e5df60ad24da749ffc11eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:c5:16:14:35:8a:c3:44:0c:55:94:fd:41:
45:51:6a:f9:83:c1:80:83:17:48:94:95:41:eb:6a:
97:7f:30:36:33:99:8c:e2:de:17:67:d6:7b:6f:e0:
06:1e:eb:91:a7:42:b3:16:f1:ad:c2:47:9e:28:28:
85:f8:32:f8:cb:ea:ae:98:c5:2f:0a:53:ec:1d:ba:
df:32:1c:07:f8:d4:67:bd:6a:36:c1:74:cb:da:2e:
b8:6f:d6:64:52:7d:84:99:e3:a0:74:75:be:7e:9c:
30:68:cf:c2:8a:17:88:f6:6c:f9:47:c1:21:b9:66:
33:33:ba:f0:af:ee:28:5b:76:fb:4e:94:2d:33:5c:
30:f0:9c:0c:2d:16:4b:c6:58:34:09:be:25:f4:37:
70:d3:56:1b:75:1d:9c:dc:c0:75:3c:7b:26:fa:a9:
68:25:35:bb:c7:66:e0:45:5e:bc:42:19:2f:87:8f:
69:55:32:9b:3c:ab:33:88:2a:c6:af:46:1a:99:ae:
bb:65:16:81:2d:59:a8:df:5a:b4:a1:4b:b7:b8:92:
6a:53:55:ae:88:f0:22:dd:aa:e4:4e:a3:30:5a:6e:
e6:f8:64:d5:20:e6:a2:f5:70:4b:ed:0f:fe:aa:ad:
9d:ce:4c:5e:cd:82:70:40:6d:13:53:86:eb:bd:50:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:71:A5:2F:66:5F:E2:E5:DF:60:AD:24:DA:74:9F:FC:11:EA:EB
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:bf:ce:46:b1:00:be:f9:8a:c5:a6:8e:36:23:ee:ce:d2:
71:ed:2f:5b:af:ed:34:39:b3:e8:9c:cc:ed:64:af:05:39:db:
20:84:de:3b:9a:5c:33:2a:57:15:9c:b5:ba:7b:11:23:d7:d3:
f7:4e:f3:06:4a:47:96:3d:ea:2f:3a:41:ae:38:1c:65:16:36:
fe:7c:51:0f:6c:df:d2:cd:3b:b6:a0:9c:07:81:7a:6d:ce:b0:
c0:0b:d8:fb:03:e2:50:e0:2d:39:96:f2:41:3b:20:fc:22:38:
ea:bb:93:09:0c:10:c4:a4:49:02:07:ab:a5:bb:06:d2:cf:a1:
34:92:46:d5:98:56:f5:9a:de:99:8e:c0:22:17:1c:9e:15:a3:
9d:cc:21:d4:4a:00:64:9b:d1:35:bc:17:fd:67:e0:e4:e6:ed:
bd:81:e9:c8:60:2b:a5:b6:70:27:ce:6c:91:3d:60:0b:56:06:
86:c1:e5:ae:5c:0e:56:54:7a:7d:72:60:9c:d1:00:17:8a:09:
84:c0:ed:f9:c1:97:ef:fb:80:cc:9d:bc:17:20:e4:ed:57:42:
e5:4c:95:3c:5c:3a:2b:6e:00:98:aa:c1:7f:e5:ee:9e:74:b7:
5a:bf:b4:db:73:db:e5:9c:8b:fe:fd:63:37:0e:5c:2f:2b:5c:
58:24:4f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0O4NlWT0wL0OXEHiUxEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0
ODViZTEwHhcNMjYwNDE3MDUwMTM5WhcNMjYwNDE4MDUwMTM5WjAzMTEwLwYDVQQD
EygzYWZlNzFhNTJmNjY1ZmUyZTVkZjYwYWQyNGRhNzQ5ZmZjMTFlYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymLFFhQ1isNEDFWU/UFFUWr5g8GA
gxdIlJVB62qXfzA2M5mM4t4XZ9Z7b+AGHuuRp0KzFvGtwkeeKCiF+DL4y+qumMUv
ClPsHbrfMhwH+NRnvWo2wXTL2i64b9ZkUn2EmeOgdHW+fpwwaM/CiheI9mz5R8Eh
uWYzM7rwr+4oW3b7TpQtM1ww8JwMLRZLxlg0Cb4l9Ddw01YbdR2c3MB1PHsm+qlo
JTW7x2bgRV68Qhkvh49pVTKbPKsziCrGr0Yama67ZRaBLVmo31q0oUu3uJJqU1Wu
iPAi3arkTqMwWm7m+GTVIOai9XBL7Q/+qq2dzkxezYJwQG0TU4brvVCwlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr+caUvZl/i5d9grSTadJ/8EerrMB8GA1UdIwQY
MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt
MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm
LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxu/zkax
AL75isWmjjYj7s7Sce0vW6/tNDmz6JzM7WSvBTnbIITeO5pcMypXFZy1unsRI9fT
907zBkpHlj3qLzpBrjgcZRY2/nxRD2zf0s07tqCcB4F6bc6wwAvY+wPiUOAtOZby
QTsg/CI46ruTCQwQxKRJAgerpbsG0s+hNJJG1ZhW9ZremY7AIhccnhWjncwh1EoA
ZJvRNbwX/Wfg5ObtvYHpyGArpbZwJ85skT1gC1YGhsHlrlwOVlR6fXJgnNEAF4oJ
hMDt+cGX7/uAzJ28FyDk7VdC5UyVPFw6K24AmKrBf+XunnS3Wr+023Pb5ZyL/v1j
Nw5cLytcWCRP7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:41 2026 by rpki-client