Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: EVR2QbukBPnDUGG+mRgYu4H8HYVcJ2V5PlMcchjnlFo=
Subject key identifier: BD:A0:FC:CF:6F:EE:9B:B2:B0:07:24:74:08:FC:7A:A9:1F:B0:09:90
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019D27DFED59007DFF3C7744F995A5728139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 06D1
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: fm68ZgosieJZPFXZIH3mcep53q2IquLrt9ppMfyckjk=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ed:59:00:7d:ff:3c:77:44:f9:95:a5:72:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=bda0fccf6fee9bb2b007247408fc7aa91fb00990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:b2:d1:5e:14:07:1e:2b:c6:3e:2d:15:fa:
1c:d5:82:4d:30:c9:57:74:68:b8:c7:3b:0d:f0:e8:
80:ad:fb:ad:21:f0:8c:69:22:36:00:40:64:c2:ea:
cb:cb:71:47:d6:f3:b5:0a:bf:73:6e:bc:29:22:14:
f9:1f:fb:f8:9c:31:d7:c3:c5:f4:d9:db:00:da:b1:
e2:d8:44:17:d6:72:67:f1:2c:e2:c1:b4:c8:20:be:
2e:a4:22:f7:c9:87:77:c0:89:9c:ef:b5:b8:f6:86:
da:9d:0d:85:16:a2:af:41:ad:53:87:8e:d6:98:f8:
44:a1:c1:9f:e4:58:0a:07:76:2a:01:02:c8:c3:35:
6e:12:01:c1:90:67:9f:45:b6:4e:c3:28:a2:aa:31:
94:07:0a:9c:05:8f:75:de:c1:0c:84:d0:98:01:da:
44:28:88:a2:7b:79:9c:06:8e:14:73:05:9b:95:65:
74:6c:1a:d6:f5:4c:fd:22:9d:c1:45:24:62:5b:00:
10:78:07:0a:e8:6c:60:27:3a:ef:7f:0a:c4:67:4e:
db:ab:92:ec:0d:01:84:ff:51:23:a3:1f:42:0e:2d:
e3:ac:6a:51:57:65:c3:e3:c2:a5:f1:c6:01:fc:22:
8f:06:74:07:e2:d4:24:18:c2:c9:96:07:8b:b2:96:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A0:FC:CF:6F:EE:9B:B2:B0:07:24:74:08:FC:7A:A9:1F:B0:09:90
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:5e:76:ae:f3:8e:c9:36:1b:26:81:1f:52:a3:62:bc:f4:
85:73:61:98:67:61:05:42:1e:41:d3:c5:4b:5e:bc:cf:f8:0c:
89:04:5d:80:b9:51:dd:b4:f2:3b:a6:62:0f:e5:17:a9:55:ef:
8b:9a:f8:32:08:32:ab:f9:eb:6c:cc:c1:95:47:d7:2d:f0:cb:
12:f3:cc:47:79:ba:17:0c:d7:32:54:2d:30:66:3c:db:56:ab:
8d:bf:dd:49:5f:35:50:1b:71:32:85:1b:05:79:0d:68:2c:e4:
2a:ed:15:13:09:b5:37:f9:48:82:58:51:ad:57:29:5a:6f:db:
c3:eb:16:ac:ba:da:a4:d9:fa:8f:4f:da:e5:93:ec:01:3e:37:
1b:fe:81:72:69:fb:7d:c0:11:4c:49:55:ec:a0:0a:0b:03:51:
5b:1e:8a:50:26:3e:44:ce:45:2b:37:5b:32:db:d4:20:90:15:
73:62:4d:d9:cd:a1:d8:57:1c:b5:ca:19:e1:4f:d1:57:b4:c1:
b5:44:60:68:10:e0:ba:51:96:76:a1:1a:42:d4:3c:0f:ce:09:
55:f1:89:e0:52:20:18:b0:2a:42:b6:84:65:8d:f0:80:b2:74:
3c:6b:c5:38:f0:a0:3c:b9:15:86:3f:f0:62:28:34:57:ff:e8:
f2:06:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:30 2026 by rpki-client