Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: 8/wd7muEGPGLW/2k5iXRrAYt7rrNth5nRV7gyNfoV+s=
Subject key identifier: DC:48:C0:BD:CA:92:09:40:37:AD:09:37:48:0C:06:CA:2B:47:B0:1A
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019CAE34E87612045128EFE39B057A0CDA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0CD9
Signing time: Mon 02 Mar 2026 11:00:28 +0000
Manifest this update: Mon 02 Mar 2026 11:00:28 +0000
Manifest next update: Tue 03 Mar 2026 11:00:28 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: qJuO5F6uIntYhJn3n/OGKyVrlN5CJSo2SJLXD34emj0=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e8:76:12:04:51:28:ef:e3:9b:05:7a:0c:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Mar 2 11:00:28 2026 GMT
Not After : Mar 3 11:00:28 2026 GMT
Subject: CN=dc48c0bdca92094037ad0937480c06ca2b47b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:68:74:e2:b9:01:84:1c:2a:d7:0e:59:15:
3c:9f:6f:6f:2d:bd:b8:34:c4:11:d9:64:c9:27:cb:
95:4d:92:5c:57:49:31:78:05:43:13:96:98:f0:23:
3c:7a:d6:5e:e2:16:8e:dc:c2:5e:a7:2d:3c:83:95:
58:45:30:90:af:78:de:74:42:dc:8e:a5:1a:8d:7f:
87:fc:b2:1a:b1:41:ca:70:fa:56:cb:67:d6:19:2b:
1d:b6:08:71:c2:9f:f6:85:74:70:77:ee:ba:0e:3b:
03:9e:a6:05:04:15:f1:81:c2:8b:bc:20:93:4a:ad:
bc:c9:4a:d9:c1:4c:9c:24:2f:08:60:52:64:70:4f:
54:31:45:58:4b:1c:41:af:8a:40:dd:c5:ce:e9:22:
11:67:24:43:c8:0c:c7:c4:c4:07:08:ea:e0:30:3c:
d7:43:e4:5e:d0:a9:1e:02:36:43:24:64:af:4d:4a:
a1:6d:bf:3c:e4:3f:a9:48:43:c2:3d:24:de:88:c0:
2a:51:6d:3a:52:e0:15:a4:57:40:3b:21:07:bd:b7:
26:73:99:10:05:ad:10:ca:19:fa:af:d0:1c:24:47:
c9:f7:70:79:aa:06:93:26:a2:ea:18:4b:7a:2e:9f:
74:ee:8d:55:3e:fa:4a:02:4d:e2:91:cb:0a:4c:e9:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:C0:BD:CA:92:09:40:37:AD:09:37:48:0C:06:CA:2B:47:B0:1A
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:94:08:04:d0:ba:6d:fd:5d:21:e1:27:fe:1d:9a:a3:62:
73:3d:0b:89:ad:24:43:bb:1d:02:aa:e1:e9:0b:cb:80:01:57:
47:9d:70:75:19:ef:19:84:23:55:28:97:00:19:86:34:f5:48:
11:54:c4:63:35:82:03:f6:ec:d2:5e:7c:e1:23:0e:83:dc:05:
d5:9b:02:26:1c:f4:12:d8:2c:76:e3:97:c1:97:4e:ed:64:e8:
9e:c8:1f:b8:f0:cf:38:57:6d:e6:e7:f5:a0:98:62:e8:a7:60:
6e:07:de:e8:55:af:4e:33:4b:62:36:55:83:bd:37:34:ab:db:
66:c2:2c:4f:bd:10:5d:66:36:57:c8:ad:24:2b:22:dd:7f:db:
68:20:35:34:83:2b:6a:8b:6f:9d:b4:19:25:92:79:12:1f:c2:
55:e4:d5:41:ae:d5:c1:6b:45:74:0b:33:73:46:27:3d:3d:9b:
49:a1:dd:f7:b6:83:75:f0:13:94:88:f9:05:3c:f7:d1:b2:53:
29:45:0b:c0:cb:bf:d9:63:a3:40:6d:86:5c:c6:37:59:9c:f6:
47:b5:04:55:d5:5d:fa:df:23:d7:14:ce:eb:bd:f5:e9:6d:48:
76:ac:80:af:4f:ae:71:be:e6:bb:74:83:97:ec:0d:a4:87:0c:
a9:60:34:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNOh2EgRRKO/jmwV6DNorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwMzAyMTEwMDI4WhcNMjYwMzAzMTEwMDI4WjAzMTEwLwYDVQQD
EyhkYzQ4YzBiZGNhOTIwOTQwMzdhZDA5Mzc0ODBjMDZjYTJiNDdiMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmFodOK5AYQcKtcOWRU8n29vLb24
NMQR2WTJJ8uVTZJcV0kxeAVDE5aY8CM8etZe4haO3MJepy08g5VYRTCQr3jedELc
jqUajX+H/LIasUHKcPpWy2fWGSsdtghxwp/2hXRwd+66DjsDnqYFBBXxgcKLvCCT
Sq28yUrZwUycJC8IYFJkcE9UMUVYSxxBr4pA3cXO6SIRZyRDyAzHxMQHCOrgMDzX
Q+Re0KkeAjZDJGSvTUqhbb885D+pSEPCPSTeiMAqUW06UuAVpFdAOyEHvbcmc5kQ
Ba0Qyhn6r9AcJEfJ93B5qgaTJqLqGEt6Lp907o1VPvpKAk3ikcsKTOmuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxIwL3KkglAN60JN0gMBsorR7AaMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALASUCATQ
um39XSHhJ/4dmqNicz0Lia0kQ7sdAqrh6QvLgAFXR51wdRnvGYQjVSiXABmGNPVI
EVTEYzWCA/bs0l584SMOg9wF1ZsCJhz0EtgsduOXwZdO7WTonsgfuPDPOFdt5uf1
oJhi6Kdgbgfe6FWvTjNLYjZVg703NKvbZsIsT70QXWY2V8itJCsi3X/baCA1NIMr
aotvnbQZJZJ5Eh/CVeTVQa7VwWtFdAszc0YnPT2bSaHd97aDdfATlIj5BTz30bJT
KUULwMu/2WOjQG2GXMY3WZz2R7UEVdVd+t8j1xTO67316W1IdqyAr0+ucb7mu3SD
l+wNpIcMqWA0ww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:47 2026 by rpki-client