Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: JmlOgxXFcgja7Co1+/X9m0aYAAPkC6khNJvvjS0stbY=
Subject key identifier: 07:54:A2:CD:CC:24:9E:00:25:8C:58:EA:A1:0D:18:B6:C4:72:BD:91
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019CAC46D64A2860A68B17A64FE2D5CE1A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 0877
Signing time: Mon 02 Mar 2026 02:00:49 +0000
Manifest this update: Mon 02 Mar 2026 02:00:49 +0000
Manifest next update: Tue 03 Mar 2026 02:00:49 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: IDC0xVWUWjE5x+CWz+iQPb4PO79wHA81VgUCB+Gdri4=)
2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d6:4a:28:60:a6:8b:17:a6:4f:e2:d5:ce:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Mar 2 02:00:49 2026 GMT
Not After : Mar 3 02:00:49 2026 GMT
Subject: CN=0754a2cdcc249e00258c58eaa10d18b6c472bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:1c:56:4b:1f:37:5f:06:50:7b:e4:43:2e:
4a:63:ca:0f:0c:52:d5:d2:ca:70:05:21:8e:16:39:
8e:88:c0:0b:18:23:c4:1e:d2:d8:0c:34:9f:7b:76:
fe:45:33:ae:c8:d1:f7:5b:68:2b:5b:a2:54:eb:28:
af:5b:2e:9d:cc:42:af:9f:e7:25:51:2c:80:c1:df:
e3:a5:40:78:a7:3a:24:80:d2:5d:6d:4f:75:e3:ec:
2c:20:8a:23:16:8f:68:44:c0:9c:f9:e2:56:53:64:
00:8b:f1:44:dd:f9:de:19:85:26:eb:7a:83:87:2c:
f3:c8:f0:57:b6:6e:ed:ab:ea:56:36:f0:ab:11:b9:
ce:52:0b:60:b8:92:fd:bb:ee:f0:b1:87:96:77:88:
34:04:ac:d2:f0:a6:aa:f3:fb:12:2d:24:2b:76:63:
74:cb:b0:a3:60:f2:49:d4:13:92:52:24:e0:7f:17:
38:b2:ac:31:64:7f:52:38:79:a6:de:4e:cc:70:f1:
8b:55:59:76:5f:3b:fa:ca:d6:f2:20:e3:6a:1b:a1:
1c:8e:74:af:47:87:4d:a1:c1:97:7b:7b:16:71:fa:
eb:cd:24:4c:0b:f2:d7:3a:02:30:71:8a:73:e4:ff:
d7:3f:15:70:6c:e6:31:4d:c2:0a:c2:36:eb:a5:b2:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:A2:CD:CC:24:9E:00:25:8C:58:EA:A1:0D:18:B6:C4:72:BD:91
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:92:a0:52:0e:95:75:2b:3f:44:e2:c1:bd:fc:9d:7b:7c:b0:
86:cd:9c:47:ac:82:d6:fb:8d:07:37:e0:63:4f:e7:65:b8:2d:
8a:ce:dd:24:1d:18:bf:09:48:54:9f:a7:31:52:57:54:e0:0d:
18:23:e8:4c:47:b6:41:8f:9b:41:37:6f:ff:1c:86:97:e9:14:
6c:89:53:93:29:bb:20:af:ef:47:53:ec:a3:2a:41:f5:32:0c:
ad:fc:d2:4b:c5:48:45:48:55:a7:c3:f3:7a:54:79:76:22:9e:
83:ad:0b:ee:f5:fa:80:5c:25:88:7c:87:28:e6:9a:ab:c6:ec:
38:af:c3:41:bd:5b:3d:de:4d:43:c0:25:81:15:3d:5f:27:a9:
55:87:72:1f:90:0c:71:b2:4f:63:c9:55:60:d7:01:2d:b3:55:
65:11:34:2a:d7:7b:f8:d9:46:52:f3:c5:eb:f5:b8:35:15:23:
c3:05:39:52:1d:ad:da:97:8c:49:38:dd:4c:0e:83:4b:fd:aa:
03:d9:81:74:69:6c:7b:e9:e0:c8:68:34:38:4d:61:5a:67:00:
81:20:c0:09:0a:d2:65:f8:ca:21:96:1a:d4:22:70:8d:b2:79:
8d:38:46:bb:df:de:cc:8e:69:b3:1d:f4:26:9a:2c:f5:f6:07:
7b:5b:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:32 2026 by rpki-client