Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: mAfXwQI9JF/JWnRdq1idOB4wg0zmu+ObX1Qqog7JP5U=
Subject key identifier: 76:38:46:B0:F6:9F:27:AC:90:AB:F8:1D:B5:A1:C7:B8:BA:94:4A:87
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 019D265F12A324481554AE75805889E07399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 175B
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: ZeuRp2SKxdTlCgsj3c7KKJgHyegmZxByUWY55+rm7qg=)
2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:12:a3:24:48:15:54:ae:75:80:58:89:e0:73:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=763846b0f69f27ac90abf81db5a1c7b8ba944a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:f8:a5:f4:18:7e:d2:82:d9:c6:d1:70:a0:
30:39:5b:85:64:10:dd:89:8b:ab:a7:82:48:89:f4:
a1:b4:76:64:1f:54:4e:fb:fe:10:5f:35:78:d6:ae:
f9:d2:a4:ab:db:9d:30:6b:e6:ba:b1:43:e0:fc:c5:
f7:d9:4a:a6:c2:5a:ed:ac:59:cf:49:e2:58:43:fe:
ba:2c:ab:70:14:24:da:15:ce:77:35:56:fa:19:a5:
0a:a9:54:e7:94:8b:03:c8:96:75:dd:66:2c:41:3f:
04:24:75:bb:d3:2a:0a:ca:cf:9d:33:ff:13:34:90:
7d:60:b4:32:bf:8f:47:e0:0c:33:81:3b:6d:a2:ec:
26:4e:25:99:1f:ce:a7:10:29:3c:e0:33:45:2c:4c:
a6:39:0d:40:2f:66:fd:72:10:d5:96:43:54:f7:b6:
81:81:a1:3c:5d:51:fe:39:ac:c5:57:8c:f4:85:77:
3b:72:ef:82:b2:d3:92:8a:29:3f:30:78:c2:3d:d9:
4e:40:e7:77:9c:1d:d8:0d:67:f0:d6:88:e2:46:f7:
ca:4f:94:d8:b2:78:7d:7e:02:32:fb:8c:ec:ba:82:
eb:1c:a3:30:86:48:c8:ea:bb:8b:34:ef:2e:4d:82:
94:a0:2e:e7:02:1d:72:a5:90:45:1d:26:03:76:57:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:38:46:B0:F6:9F:27:AC:90:AB:F8:1D:B5:A1:C7:B8:BA:94:4A:87
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:90:44:a9:a9:88:c4:46:1f:82:3f:d9:8c:89:08:32:72:
a0:2e:2a:83:c0:0d:a8:5a:cf:c4:e3:59:35:f7:8c:8d:e6:fe:
5c:d0:5a:3b:75:bc:fe:16:58:3b:01:7b:81:6a:14:95:51:8f:
f5:a1:b7:d8:ff:b2:a2:09:d3:ff:8f:de:18:68:e9:de:1b:92:
b1:9c:25:2c:a3:6b:20:76:87:5d:3b:0f:41:47:2f:0b:b0:b4:
da:fb:b6:5d:d4:47:e1:48:e0:99:a1:2d:32:44:b6:a6:58:f7:
3e:a9:22:14:5b:52:cf:93:d3:a4:4f:b5:ee:52:8e:e8:1a:2b:
12:6b:5d:8e:fd:20:79:7d:cb:79:2e:65:ba:46:08:cc:4d:55:
df:73:c2:ce:c0:c1:92:a7:f9:53:77:fc:d2:51:fd:1c:f4:1b:
28:6b:b1:6d:59:e2:1f:17:f2:12:0f:bf:91:79:2f:9a:08:98:
bd:72:1b:a7:3a:29:a3:2a:ef:ab:04:fe:80:de:7b:c6:bc:56:
9e:22:81:e7:ed:37:53:fe:03:11:62:ae:54:f6:d4:6b:35:be:
6f:29:50:3e:a2:4f:53:84:33:8d:97:d0:e5:f0:f4:2d:19:49:
7a:41:75:2b:08:1d:9b:31:0c:a2:80:99:50:00:e0:76:7f:06:
b1:23:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:25 2026 by rpki-client