Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: XKe/Ai/MwNp8QBqsND3z9Jvo5YKgACPnrZlEtyBn6kw=
Subject key identifier: F8:F3:D1:A6:62:47:96:92:EF:E9:A1:DC:26:9F:35:C5:A2:B3:E1:56
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019CB05AE00F122BCA5FCA3C1281E8B9C2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 01E7
Signing time: Mon 02 Mar 2026 21:01:11 +0000
Manifest this update: Mon 02 Mar 2026 21:01:11 +0000
Manifest next update: Tue 03 Mar 2026 21:01:11 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: pUlmZd35bILfiWUCnR/cQnsemnq9O5Kgakgov9at3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:e0:0f:12:2b:ca:5f:ca:3c:12:81:e8:b9:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Mar 2 21:01:11 2026 GMT
Not After : Mar 3 21:01:11 2026 GMT
Subject: CN=f8f3d1a662479692efe9a1dc269f35c5a2b3e156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:0c:7a:ba:fa:19:fd:34:ef:0c:55:12:33:
71:69:16:e9:b1:f3:51:f1:da:c6:4c:60:ea:cd:9c:
f8:d3:69:5b:54:b6:73:10:9e:ee:59:ae:23:47:65:
65:f2:a9:52:77:a9:5f:75:7f:8e:d0:f1:d3:44:3f:
7f:c3:51:5c:f8:38:0e:90:54:20:fe:59:7f:8f:bc:
f2:6f:92:d7:7c:58:84:c3:bd:0b:6e:2a:28:d5:1a:
1d:6d:ef:6b:10:62:18:f6:7d:60:9c:0f:39:35:6d:
f1:ae:da:3a:0a:68:1c:29:bd:e0:13:87:c4:4b:2a:
2c:64:3e:f3:27:50:aa:5f:dd:45:8b:7c:45:0a:0e:
13:1b:18:78:8a:8c:4f:ca:13:32:64:e1:3f:31:95:
c3:d9:e9:80:72:d0:0d:1d:6f:1f:84:64:e8:8f:1b:
e5:d0:c2:b8:d4:7d:13:e4:1a:38:cf:88:ee:98:dd:
46:15:f9:0e:25:7e:12:76:c4:f3:74:49:ec:d6:55:
26:a0:62:db:c5:e4:40:01:39:29:69:de:d5:f9:46:
13:e3:89:55:f1:fd:a1:81:a1:f3:59:81:9b:b5:ed:
a1:1c:c1:d6:22:58:db:ac:33:82:9f:68:e2:d7:5b:
90:04:72:d4:cc:c2:d1:32:2f:68:9c:20:4b:26:f8:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:D1:A6:62:47:96:92:EF:E9:A1:DC:26:9F:35:C5:A2:B3:E1:56
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:73:26:16:89:d8:95:30:ea:b8:fc:a6:df:f4:f5:b8:47:
27:d1:6a:89:c2:46:11:98:b8:bd:40:16:49:7a:b8:c0:e4:ce:
60:38:d8:4a:e4:31:77:a4:f2:ac:b9:af:0e:82:11:52:24:73:
8c:5c:e8:d8:7a:9a:bb:9f:0a:fd:ce:92:8c:25:50:c0:e6:ac:
39:fe:4a:14:96:5b:78:3c:96:48:ab:44:2b:2b:66:3b:78:f9:
ae:f0:06:36:8a:1b:70:33:4e:46:5f:a1:77:56:5d:03:d3:1c:
be:44:3d:5b:5d:09:68:64:76:c1:a7:b4:a2:98:74:d5:b3:e1:
c8:f9:af:09:87:89:41:b8:99:d7:56:be:f9:fe:ff:6c:30:35:
a8:35:be:ee:7d:8b:0a:86:1d:d1:80:e6:11:24:db:1f:68:00:
91:5e:a1:5c:d0:12:b9:01:3a:56:f8:1e:37:27:7d:a3:f8:58:
00:36:7f:30:78:fb:7f:4a:00:fd:84:f2:a3:c6:72:71:79:2f:
8b:0e:41:c9:c8:33:5a:63:15:c9:2e:b9:2f:9a:be:d3:11:ba:
b5:11:22:f9:f2:07:cb:ae:08:f2:df:da:79:21:f7:74:8e:71:
7f:97:50:31:ee:e8:e4:4b:d5:e2:47:c6:87:81:45:e9:de:d8:
c4:70:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:15 2026 by rpki-client