Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: HI1/N1ebnz2/hhxRpxX9qqxzmrrFhuDvH6UIl3NKIWM=
Subject key identifier: 3A:C3:46:34:BD:4A:31:C0:56:4F:50:18:1B:95:0F:A7:37:D1:0B:09
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019D9BF5857AB4F2CCE90459F1E2BC600724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0261
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: kTRMxNJmOwe+lVZtRL2KcYvWaGDnhv/+mqfjRxNLOuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:85:7a:b4:f2:cc:e9:04:59:f1:e2:bc:60:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=3ac34634bd4a31c0564f50181b950fa737d10b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:ee:6e:6e:2a:67:51:3e:dc:a9:c1:91:2a:
b0:12:1b:d8:34:17:07:b1:bf:f9:a4:45:8c:d0:45:
fe:30:16:e6:22:c4:80:6b:d2:69:4f:18:0b:4a:c4:
97:5c:18:f1:da:c9:7e:a9:a9:1f:a7:cc:36:c0:fc:
ba:4b:0b:0a:dc:7e:5e:a0:8c:7b:70:ef:30:80:d4:
0a:2d:54:07:b6:c3:90:98:0d:ea:f1:1f:3d:94:35:
4c:6d:5d:c4:67:d5:74:33:be:72:d8:b7:84:28:48:
0e:28:78:a5:28:46:8b:51:de:7c:a7:39:2a:c0:a0:
49:a7:0c:e1:98:04:30:93:a8:2a:4f:6a:56:2a:2b:
b4:2d:7f:7f:0d:6f:21:a1:bc:d3:c5:a0:29:19:b5:
45:82:a0:63:4b:6b:85:e5:10:4b:a4:7f:aa:5f:55:
44:43:0c:36:d7:9e:ed:10:f1:9e:c5:7a:e1:b1:39:
a8:d3:db:30:b3:65:13:41:96:c4:39:26:4f:bf:2a:
7a:bf:15:f2:48:be:1b:38:97:7f:ec:17:3a:a2:f7:
81:b4:58:46:5f:1c:6f:e2:f2:12:10:6a:1e:a7:51:
75:69:b3:b0:e0:e9:73:d7:04:77:1e:f2:be:4a:b2:
32:fb:96:85:e0:69:cd:c3:4b:02:d7:f5:68:0b:bf:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:46:34:BD:4A:31:C0:56:4F:50:18:1B:95:0F:A7:37:D1:0B:09
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:87:9b:09:c4:26:90:9a:6a:25:90:48:44:41:f6:a3:c5:
6f:03:3c:fe:72:5f:5a:c1:04:22:6a:64:b6:45:dc:b0:17:c8:
a6:19:21:0a:f9:76:93:28:4f:63:06:6c:83:2d:f4:62:3a:10:
9e:94:fc:49:3d:26:6e:1a:26:52:ee:f1:c9:6f:4c:15:0a:75:
3e:b6:ee:83:ef:64:e3:80:98:3b:36:7e:05:43:f7:c8:6d:28:
30:8f:9c:a1:c4:e3:d8:97:d0:a4:33:d7:02:35:9d:de:a0:93:
51:cb:7c:d2:e8:d9:b2:07:bc:d9:ec:d0:11:1f:6f:34:73:7d:
97:06:bd:8c:4b:07:f8:af:1a:c9:a6:25:7f:4a:54:72:ce:42:
de:7a:1b:00:1c:61:2f:e8:52:29:12:66:f4:2e:e8:53:50:52:
5e:95:e8:75:ff:9c:0f:fb:1c:b5:b2:02:d2:0f:9d:2a:f2:09:
8c:3c:3a:c6:31:f1:c1:b6:da:f0:86:8f:4e:df:45:16:d4:52:
94:6c:dc:25:d7:27:2b:e4:2b:4d:ca:e2:79:54:5f:38:b8:ee:
2c:64:6c:c1:e2:9d:a1:d0:8f:b6:46:57:6f:00:15:20:d8:5e:
fe:c7:2d:99:b8:6b:b4:23:fd:b8:21:81:6d:e6:82:6a:97:13:
20:14:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:02 2026 by rpki-client