Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: wz7uYR8OqD4sAEycsYj1g8FiUb4vC4ILBF1q+cuTmZc=
Subject key identifier: FC:49:62:81:40:9F:E8:B2:40:81:C5:19:FD:72:90:C4:2F:CE:32:60
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 01A1220A0A60C2A3D6B23E825A507DD61C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 196B
Signing time: Fri 09 Oct 2026 19:00:45 +0000
Manifest this update: Fri 09 Oct 2026 19:00:45 +0000
Manifest next update: Sat 10 Oct 2026 19:00:45 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: HQzPKNFYZC06NhJyAbQq+pKuoRAV+thE/SAXKQO/MtA=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:0a:60:c2:a3:d6:b2:3e:82:5a:50:7d:d6:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Oct 9 19:00:45 2026 GMT
Not After : Oct 10 19:00:45 2026 GMT
Subject: CN=fc496281409fe8b24081c519fd7290c42fce3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:e7:14:0b:95:06:21:16:d1:d0:78:7a:c7:
2d:0e:5d:f2:d1:bb:89:dd:be:b9:9e:09:51:61:55:
c3:cf:ec:c8:2f:98:19:db:1c:f7:73:b4:b5:a8:e4:
83:9d:64:27:12:26:bf:e3:b1:4c:72:89:f0:5a:43:
41:5b:da:c8:29:85:6c:ee:69:ca:fa:d8:2d:8c:c2:
a9:ca:93:7f:fa:a0:61:b2:c9:43:0f:ac:a8:ae:f0:
a1:c0:03:24:a8:96:5b:89:96:96:e6:26:9d:a7:61:
db:ab:d6:89:c1:49:e8:ee:3d:ee:c8:75:7f:1f:cc:
4a:6b:55:a5:7d:d4:f7:fd:82:55:6a:1f:ed:3a:cf:
dc:9f:2e:3f:3f:83:72:d2:2c:03:a6:ff:fd:81:37:
02:26:2b:2c:4a:1e:1a:ce:ca:b1:90:9a:2e:11:8f:
d7:82:de:47:41:a3:ab:9d:68:52:96:ab:26:03:dd:
0a:a5:91:03:f6:2b:9e:3f:9f:98:74:8a:eb:0d:9c:
9d:0b:b1:e1:3f:fe:c8:20:74:3e:be:98:d9:9a:0a:
72:3a:ee:61:fe:aa:ef:77:5b:b7:dc:41:1f:c6:20:
67:4c:08:c6:6d:3c:c1:d7:34:1c:15:85:ac:24:96:
e2:ad:36:d7:4d:cd:d6:c8:21:84:9f:2e:77:1d:d5:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:49:62:81:40:9F:E8:B2:40:81:C5:19:FD:72:90:C4:2F:CE:32:60
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:21:c6:82:4f:43:5f:ca:23:99:f6:a1:75:d2:74:52:9c:
4e:65:da:c3:0d:2d:9a:73:84:6d:41:39:bf:b0:c7:4f:09:c6:
e9:4b:77:59:d6:e5:fb:ad:96:a8:c5:93:77:6a:a5:a7:4c:91:
ea:af:d6:a6:20:e2:f1:13:c1:de:dd:e1:23:86:79:56:89:05:
04:d6:ec:3b:9f:12:23:d4:2e:4f:9f:9e:b3:be:49:04:5f:e9:
a1:60:7c:a8:d8:2c:5c:9e:d8:60:cf:d5:20:67:8a:98:0a:11:
8c:13:7d:95:52:86:e6:03:f5:4e:e2:15:c8:08:1a:6e:d7:a3:
71:0d:83:e0:2e:89:ed:53:7c:48:b8:2a:a0:97:f5:24:23:66:
b5:33:5b:e4:96:d1:e4:91:75:bc:42:86:05:6e:02:aa:7e:38:
7a:53:83:0c:1f:8d:b8:f1:82:62:99:3f:2c:6d:4e:34:51:1a:
86:55:cd:f5:e6:75:7b:73:5d:3f:86:d9:68:fa:92:38:bb:07:
2c:eb:1e:81:82:c8:85:32:f2:b7:54:64:44:98:68:84:44:b2:
c4:f5:db:9a:96:a4:01:60:0d:82:c8:18:cd:76:c8:6b:07:e7:
82:be:08:ac:57:e1:b8:da:a5:96:8f:90:e3:8f:5b:ab:9f:b8:
69:1b:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:55:40 2026 by rpki-client