Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: Nsw/o8TN+aACB4FL+LnutoF7xloXicx9brBZjn75FSs=
Subject key identifier: F7:DF:AA:11:9E:77:97:F9:AF:6C:70:C1:86:96:AD:B7:F0:28:FA:F8
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 01A0DE3C0A20F0D7591A47AB2F4033475190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0411
Signing time: Sat 26 Sep 2026 15:01:11 +0000
Manifest this update: Sat 26 Sep 2026 15:01:11 +0000
Manifest next update: Sun 27 Sep 2026 15:01:11 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: XI5/t0ZBSHh/EQ5LXfsj7fg+AVkkYFjf2Lb5wa0T7hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:0a:20:f0:d7:59:1a:47:ab:2f:40:33:47:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Sep 26 15:01:11 2026 GMT
Not After : Sep 27 15:01:11 2026 GMT
Subject: CN=f7dfaa119e7797f9af6c70c18696adb7f028faf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:10:1f:0e:84:e9:18:11:1f:f4:a8:e5:0f:
16:37:c6:70:b8:e5:64:22:61:77:49:51:59:ef:c2:
7c:dd:56:c6:b3:18:b2:57:04:1f:79:5b:60:b3:08:
3c:5d:7d:7b:a3:62:f9:0c:08:68:25:87:08:b8:f7:
32:60:99:01:a0:57:26:c0:54:b8:23:93:8f:ee:d2:
01:88:8a:bd:ca:9f:0c:ea:43:ec:7d:e1:80:05:3b:
f0:d3:b7:3f:d1:2a:9b:2e:e6:35:51:36:90:ec:00:
fd:da:e7:b4:ea:14:41:9f:99:91:ff:dc:2e:d0:58:
96:05:8e:00:6c:72:4d:e0:5c:e0:0c:3b:d9:6f:6f:
2a:82:76:4b:d5:0a:5b:ea:85:54:10:8f:d2:65:96:
50:83:b6:1b:7b:cf:6e:8a:04:a3:ea:5f:d4:95:c3:
6f:65:6d:9e:96:5b:0b:a8:77:1e:a4:89:f7:54:c9:
f3:20:d7:e0:78:8d:59:84:da:72:f3:38:cf:8b:d5:
a7:04:56:a2:f3:db:7f:50:29:8b:73:12:72:00:1f:
e1:71:82:f4:13:9a:1a:cd:04:88:b8:81:42:d9:6d:
ae:df:af:2c:52:a6:1a:71:6a:8f:43:28:9c:13:97:
79:11:77:91:ca:4f:b6:fe:16:16:a3:fb:f5:d7:31:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:AA:11:9E:77:97:F9:AF:6C:70:C1:86:96:AD:B7:F0:28:FA:F8
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:35:47:e4:22:b4:9a:48:73:a1:06:12:51:20:60:c6:52:
7f:64:5e:08:7f:3c:f9:89:5f:95:98:5f:50:de:f3:44:8c:6e:
e6:99:b6:46:3d:0c:42:69:91:8d:dd:fa:41:3e:a9:f5:69:50:
bd:29:eb:31:4a:a8:e1:3f:09:56:0c:74:ec:a0:32:91:df:59:
1e:d7:51:64:38:c3:e4:21:08:89:92:69:5c:4c:5e:61:95:ff:
c5:09:f2:62:f0:1f:95:cb:36:20:fd:5f:48:3f:44:8b:c3:74:
2a:c8:8f:aa:b4:3c:ae:53:e7:0c:46:23:c8:9d:83:9e:e8:b1:
aa:94:69:5d:5f:3a:47:4d:74:19:ce:7e:8f:4a:d9:06:fa:20:
02:7c:69:0b:07:97:0c:92:bd:fd:d5:e1:8d:58:2d:7b:25:3c:
7e:b5:a6:f4:a8:0b:85:d7:d0:b6:1d:51:96:62:31:f0:0f:dc:
39:c9:eb:81:cd:b4:00:a1:1d:89:53:4d:be:31:01:85:62:a3:
02:38:01:ff:12:c0:91:ac:e8:45:58:2f:fb:03:b4:8b:e7:a7:
7f:9e:2a:92:71:92:bd:8f:69:40:f7:04:88:3b:5f:9a:3f:1a:
ee:fa:e3:78:96:77:3c:7b:d3:28:77:8a:c1:41:dd:22:a1:ee:
cd:6a:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:14 2026 by rpki-client