Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: dHtrN3AZBm86oxqjfXKOKkMnm76Zt27GlwDef9u4nTU=
Subject key identifier: 55:5F:0D:E6:F7:BE:6A:94:BC:0F:85:CF:FB:2C:80:53:78:AA:0C:AE
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01A0DE73C2CEFC6A404C8929F4C966AB25B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0C61
Signing time: Sat 26 Sep 2026 16:02:03 +0000
Manifest this update: Sat 26 Sep 2026 16:02:03 +0000
Manifest next update: Sun 27 Sep 2026 16:02:03 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: VLjMYjbRm7d55b2ZgSkPJuxcAihhmxTD15jwIOjO1hU=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:c2:ce:fc:6a:40:4c:89:29:f4:c9:66:ab:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Sep 26 16:02:03 2026 GMT
Not After : Sep 27 16:02:03 2026 GMT
Subject: CN=555f0de6f7be6a94bc0f85cffb2c805378aa0cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:53:6c:84:6e:20:e7:45:2c:e2:cf:41:9e:
eb:84:9c:3e:c6:5a:d8:56:b3:62:c2:3a:ee:b5:ec:
5c:9e:b1:19:91:de:21:b3:ee:03:0a:f6:68:65:05:
b7:02:ca:50:e7:44:6d:75:80:57:af:18:9d:6e:54:
70:98:3f:99:d5:53:ed:bf:45:19:f2:3a:aa:55:4b:
cb:7a:d1:09:ec:91:89:47:1b:5c:73:c3:3e:76:0c:
20:cb:e8:73:4d:83:37:89:7d:3a:d2:fe:bc:61:d5:
1d:43:ec:36:e8:ba:ef:c4:03:2c:d8:6f:15:10:fc:
f4:89:2b:cb:bc:75:2b:9d:fe:c3:33:1c:89:ab:7a:
0f:9a:27:b4:01:11:36:2b:12:f3:36:89:c4:0f:cf:
aa:04:bc:14:29:60:fd:9f:3b:0a:76:15:be:c6:19:
7b:3b:dc:be:d6:e4:db:18:36:f3:b9:c4:67:be:b9:
0f:9e:29:bc:b2:20:39:86:04:ac:51:27:71:12:18:
a9:ef:1a:4e:3b:3b:ff:4b:ed:d3:10:bf:e2:7b:28:
6a:90:53:b0:04:69:06:e0:9c:3d:7b:be:42:2d:67:
cf:76:f1:1e:b3:a1:4e:84:6c:37:fd:54:59:ff:24:
5c:26:ed:f8:91:a7:f1:a1:e1:23:9c:50:05:61:1e:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:0D:E6:F7:BE:6A:94:BC:0F:85:CF:FB:2C:80:53:78:AA:0C:AE
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e7:0e:b2:22:0b:29:1f:6c:8b:51:87:ce:35:5f:e7:35:f2:
0e:8c:05:21:01:99:d2:77:d5:49:c4:dd:50:d9:af:70:00:a5:
6f:4f:6c:5d:ca:1b:c9:bf:39:bf:2f:e0:53:4f:10:50:1d:31:
f8:8d:a7:cd:94:28:42:c5:3f:4b:0e:a2:3d:5a:4c:03:dd:22:
ba:95:c9:32:48:28:f3:9b:fe:14:29:93:9d:a8:02:4a:e0:12:
a7:8d:10:3d:7e:eb:2e:22:c5:f4:08:ef:9b:f2:a1:84:b7:8d:
c1:76:b9:e2:0c:7a:cf:a0:92:50:a5:26:9a:39:fd:5e:ac:f5:
76:77:61:a5:05:95:16:0a:f8:6a:5a:77:af:ed:02:d5:79:34:
0a:74:4c:1f:1e:60:3e:56:5e:34:d1:0a:5c:81:68:f4:5a:32:
4d:4f:6b:d6:97:f6:da:1b:b0:11:e1:ff:75:cc:50:d3:10:7b:
35:21:6e:fb:d4:2e:8f:bf:6f:52:af:1d:fc:ee:83:a9:e4:30:
d9:91:de:7e:9e:76:18:20:f7:8b:58:55:51:b7:db:8e:c4:0a:
4c:87:25:c7:28:10:59:9d:44:7e:63:b0:a7:d3:99:25:bb:41:
03:a4:09:b7:8a:88:47:5b:4d:13:3d:82:0d:08:bb:95:c1:17:
b4:df:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:48:42 2026 by rpki-client