Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: It7x+9YpU/7BAxW/1rN7tHQ+3WjHHZNZI90E9dWPTkA=
Subject key identifier: 4B:91:CB:CB:0E:BD:80:10:A0:05:36:5B:DE:82:76:2A:D8:13:25:FB
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 01A0E99C0B85962F7AB30D4C33769B877094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0F0A
Signing time: Mon 28 Sep 2026 20:01:52 +0000
Manifest this update: Mon 28 Sep 2026 20:01:52 +0000
Manifest next update: Tue 29 Sep 2026 20:01:52 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: dLGmU11ZeXrFbTCCG7TgyNmBDBuogUqqDfFW41qSLEE=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:0b:85:96:2f:7a:b3:0d:4c:33:76:9b:87:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Sep 28 20:01:52 2026 GMT
Not After : Sep 29 20:01:52 2026 GMT
Subject: CN=4b91cbcb0ebd8010a005365bde82762ad81325fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:79:8f:8a:6c:d5:27:8b:cf:d2:83:e5:d0:
0f:09:df:59:dc:a1:5e:47:13:72:a1:15:0c:a5:81:
9a:4d:76:0d:ce:b1:7d:d7:db:b6:e4:97:9d:d9:de:
6a:f4:f1:66:fb:7c:28:b2:71:bb:9a:84:62:5c:52:
a2:88:c2:49:8b:98:fb:02:8c:59:b4:7c:12:55:89:
68:32:83:9c:56:00:3a:77:47:d2:6d:ad:86:0f:80:
ff:ca:24:08:29:09:b0:48:47:0e:4b:85:85:51:18:
0c:36:50:46:5a:98:ca:8b:72:2f:88:a8:c8:77:95:
2c:c9:e6:b1:6e:a5:b0:7c:09:19:30:14:43:dd:2d:
6f:97:f4:af:db:53:b2:b7:1e:0a:fa:3f:c9:c2:ec:
ac:59:79:38:c2:b6:01:2b:07:17:26:bf:9e:43:a0:
5c:ae:22:fe:f2:cc:af:3b:bf:59:89:ee:1f:19:b9:
c5:2e:f6:47:ef:2a:a5:c3:ce:f4:5b:09:fa:3b:20:
dd:3d:b7:b2:72:14:e2:c8:bf:9d:27:0b:5a:c6:61:
21:d1:20:33:7e:de:21:bf:f6:f8:99:78:ed:67:d4:
23:d7:cb:97:33:2a:87:82:57:ab:9b:a5:20:35:a9:
4e:f5:17:e7:42:e5:31:fa:2b:b2:2a:97:f9:d9:12:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:CB:CB:0E:BD:80:10:A0:05:36:5B:DE:82:76:2A:D8:13:25:FB
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:a4:65:12:74:ad:f7:b6:af:28:1f:df:79:d6:3c:8d:c9:
bc:ad:7d:f9:cc:a5:e0:fe:4e:39:a6:8b:03:15:ef:ba:cc:ad:
ee:30:e6:ea:2e:5a:eb:b3:a6:15:a3:78:b6:dc:ff:ce:c6:bf:
45:09:ff:d3:70:e3:2b:54:ba:7d:26:b6:85:b0:e9:93:24:6b:
ba:33:23:4b:f7:2b:3e:3f:84:d3:2a:c9:d1:79:3e:01:00:0b:
97:ee:35:63:1c:60:1f:aa:ae:e4:10:be:36:48:89:59:aa:74:
88:b8:cf:08:dc:cd:6f:31:2e:6d:a3:d7:1b:21:6f:c4:12:d9:
8a:46:c0:4f:6e:85:f0:8d:81:78:3f:52:61:af:49:1e:d3:7b:
69:d4:ef:b6:e4:1f:4a:ef:c7:37:da:9d:63:37:a3:56:8c:53:
4c:4a:e8:1a:21:f9:f8:13:3e:35:3a:6b:53:ce:a3:e0:af:4d:
19:32:2b:5e:2b:4b:f1:e2:44:3e:67:a9:e8:9b:8c:49:1a:60:
75:94:ed:af:cc:70:e9:7f:9d:09:8c:55:50:f2:d4:b6:71:7b:
21:b1:a5:95:c9:f4:a8:eb:37:9f:14:85:eb:db:fb:81:88:a5:
61:d1:4e:a2:39:d0:d9:a8:5a:70:2b:8c:78:fd:e8:e8:16:cd:
3f:5a:ca:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpnAuFli96sw1MM3abh3CUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwOTI4MjAwMTUyWhcNMjYwOTI5MjAwMTUyWjAzMTEwLwYDVQQD
Eyg0YjkxY2JjYjBlYmQ4MDEwYTAwNTM2NWJkZTgyNzYyYWQ4MTMyNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTp5j4ps1SeLz9KD5dAPCd9Z3KFe
RxNyoRUMpYGaTXYNzrF919u25Jed2d5q9PFm+3wosnG7moRiXFKiiMJJi5j7AoxZ
tHwSVYloMoOcVgA6d0fSba2GD4D/yiQIKQmwSEcOS4WFURgMNlBGWpjKi3IviKjI
d5UsyeaxbqWwfAkZMBRD3S1vl/Sv21Oytx4K+j/JwuysWXk4wrYBKwcXJr+eQ6Bc
riL+8syvO79Zie4fGbnFLvZH7yqlw870Wwn6OyDdPbeychTiyL+dJwtaxmEh0SAz
ft4hv/b4mXjtZ9Qj18uXMyqHglerm6UgNalO9RfnQuUx+iuyKpf52RKXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuRy8sOvYAQoAU2W96CdirYEyX7MB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2+kZRJ0
rfe2rygf33nWPI3JvK19+cyl4P5OOaaLAxXvusyt7jDm6i5a67OmFaN4ttz/zsa/
RQn/03DjK1S6fSa2hbDpkyRrujMjS/crPj+E0yrJ0Xk+AQALl+41YxxgH6qu5BC+
NkiJWap0iLjPCNzNbzEubaPXGyFvxBLZikbAT26F8I2BeD9SYa9JHtN7adTvtuQf
Su/HN9qdYzejVoxTTEroGiH5+BM+NTprU86j4K9NGTIrXitL8eJEPmep6JuMSRpg
dZTtr8xw6X+dCYxVUPLUtnF7IbGllcn0qOs3nxSF69v7gYilYdFOojnQ2ahacCuM
eP3o6BbNP1rK5w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:41 2026 by rpki-client