Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: WrfKQlJCkkvvjZF9vvqCMJ+OsC5GHYaOP6edVnGGt8E=
Subject key identifier: 7F:5E:F1:14:E4:10:E6:90:DB:26:16:06:62:2B:A3:00:BE:8C:3B:57
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01A0DC16F628C7E1F3007D8FF8E498CA4CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 08BC
Signing time: Sat 26 Sep 2026 05:01:27 +0000
Manifest this update: Sat 26 Sep 2026 05:01:27 +0000
Manifest next update: Sun 27 Sep 2026 05:01:27 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: WEd2qDD1GwHeOaO7Q484XEtuV/gAwG8ifV7eiGQGgXw=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:f6:28:c7:e1:f3:00:7d:8f:f8:e4:98:ca:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Sep 26 05:01:27 2026 GMT
Not After : Sep 27 05:01:27 2026 GMT
Subject: CN=7f5ef114e410e690db261606622ba300be8c3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:86:5b:0d:66:c2:0d:f4:44:d1:75:17:ab:
6e:d7:4f:1c:46:29:b0:3b:a5:21:92:75:97:5e:7d:
89:0a:35:9b:38:0d:42:a8:90:6b:d9:a7:d1:4a:2f:
31:f5:9d:61:8e:af:72:21:dd:04:4b:e8:88:ae:3f:
5a:bc:ce:ca:18:11:b6:0f:57:7a:69:93:2e:cb:f4:
a4:66:14:02:16:b2:2d:63:d7:60:85:a2:c5:b0:75:
65:af:8b:d6:ae:88:57:df:1f:b9:08:fb:8b:2c:6b:
fb:e7:ee:ac:2c:b7:ea:c6:b6:a1:bf:9f:5a:33:4a:
6d:58:b0:6f:13:d2:22:3d:95:8a:15:50:bb:f1:d9:
80:16:d5:c3:73:bc:03:2e:2e:e9:7c:f0:65:6e:e6:
74:11:a3:1c:fb:d1:27:ee:db:bb:6a:83:d3:f1:e5:
62:82:55:56:40:fa:91:18:70:55:ad:f4:cf:c8:f9:
92:7d:50:4c:15:b4:85:e7:95:f5:d1:8c:12:fb:68:
94:c3:08:3e:a9:05:54:a2:dd:92:2a:b7:71:15:db:
b6:20:a6:30:40:3d:1b:79:e3:9e:e0:77:1f:dc:0f:
25:4c:53:aa:eb:2e:15:3a:d2:43:d5:67:b3:40:30:
e2:32:c6:4d:0d:18:fb:86:3a:93:71:87:a7:d5:d7:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:F1:14:E4:10:E6:90:DB:26:16:06:62:2B:A3:00:BE:8C:3B:57
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:91:56:3a:0f:d7:3f:37:77:d8:ae:a5:2b:ea:5c:13:e0:10:
82:3a:9a:8e:bd:05:f6:ae:5d:57:4a:3e:db:fe:c6:2e:eb:72:
fa:0a:10:48:84:f7:d4:9a:48:f9:8c:76:7b:18:ca:cd:8e:9c:
6c:05:70:5d:64:ae:a6:dd:5a:8a:8f:97:9b:57:32:98:13:1d:
d3:79:94:5e:c8:dc:e4:de:44:a6:bb:c8:dc:01:24:ca:7d:44:
87:ba:b5:3b:45:54:4e:43:5f:70:15:b1:fb:5a:9c:a6:44:36:
ed:74:2b:94:1d:9f:bc:eb:74:b1:c5:bf:39:50:49:72:64:2e:
48:4f:a1:6f:8c:4d:39:ef:5e:89:b0:93:09:97:4f:e3:dc:ef:
5c:a2:94:d5:00:50:73:f0:9f:58:ef:51:0c:e0:8f:4e:5a:f0:
84:ff:81:44:3a:c1:af:d2:a8:f4:5a:fe:15:20:ef:9b:ce:f7:
02:e8:70:fe:26:b2:3c:a5:bb:c4:0b:be:d2:cf:e3:40:b4:e7:
70:d6:d3:27:59:11:bf:34:c1:b3:94:e7:ab:5f:d3:19:0f:6d:
96:c4:78:28:04:d4:a6:2f:fd:75:39:e6:0e:ac:43:2d:ea:8e:
98:13:94:a2:d2:24:30:59:48:3c:a2:a9:08:4f:79:a2:ad:8c:
54:90:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:08 2026 by rpki-client