
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: IYnKaelGYtzzJs2svXxH1SS2t4bWzyiNpPPBddukoQE=
Subject key identifier: 74:36:BB:F3:A2:55:E6:E3:10:B1:21:4E:36:F1:C4:4B:F3:2A:7A:57
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019F91DB2325078A8C6E501F5E02E8596217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0811
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (hash: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I=)
2: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: PwOGNvhBaVd2zsu0ColbZGmwVCmo4VZMfA4vXR1tvcs=)
3: Rqr6fCRxJV6enLCB-UduZfofMbM.roa (hash: h5NSHnBfA5qSOrZNH9wVbqTyLOV8+WaKL9GG8H3aTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:23:25:07:8a:8c:6e:50:1f:5e:02:e8:59:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=7436bbf3a255e6e310b1214e36f1c44bf32a7a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:7c:66:a2:9a:dc:6b:f4:62:f4:0f:ca:f4:
62:b7:ae:c4:a6:dc:d6:b0:26:15:25:07:59:66:38:
9e:e9:8a:d8:21:89:d1:eb:c7:af:24:40:cf:b6:33:
34:54:11:07:52:e1:42:a5:85:db:96:eb:32:49:7b:
a2:19:46:ed:d6:da:d5:96:ee:d4:b5:6c:bd:b7:d6:
99:5b:ff:3b:96:26:9d:4a:81:84:b7:3d:32:91:38:
48:cf:ab:1a:0f:15:7d:0b:e1:41:43:34:a1:c2:db:
e5:ca:f0:39:5a:ce:38:a4:0e:90:2f:86:1d:f2:33:
ca:e5:3f:a4:47:ce:8d:c6:91:1e:5a:b2:e9:da:eb:
67:ef:db:9d:5b:c0:67:3e:73:36:8f:a6:da:cf:aa:
7a:07:d6:56:f5:83:60:3a:d0:b1:8b:9d:33:54:a9:
50:91:af:a2:c6:b3:e6:0c:3d:41:03:67:0f:64:a0:
20:b8:b9:26:0e:b6:61:ec:86:67:62:a9:23:4b:07:
b6:cc:65:ed:e0:6c:01:14:d9:bf:1b:1c:e8:71:63:
39:bc:d8:f6:0b:5a:51:a8:3a:5d:25:92:44:eb:30:
9c:3f:55:2c:9b:c7:f8:93:64:6a:76:53:f7:1c:0f:
c1:4c:69:03:9b:cf:c7:e3:26:d3:fb:98:eb:f2:83:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:BB:F3:A2:55:E6:E3:10:B1:21:4E:36:F1:C4:4B:F3:2A:7A:57
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:03:9f:98:bb:da:a4:42:66:94:b9:bb:19:03:29:59:52:
55:55:48:e9:3a:2b:6d:6b:b1:56:39:51:13:7d:d1:7b:55:a7:
61:65:b6:71:d8:fc:b8:74:8f:98:42:c2:81:82:c4:a5:f2:c0:
1a:42:31:a4:fd:49:16:3d:c1:63:92:e3:95:dc:7c:bd:7e:62:
b6:17:90:cd:f2:3e:1e:bf:f1:01:3a:8d:14:2c:d8:78:73:ce:
4f:1c:f2:09:50:5a:e8:48:bb:90:65:1b:c8:49:4f:29:a0:ac:
7a:7c:5c:ad:4b:a5:c0:24:9c:9a:9b:aa:b9:22:12:f9:2f:a5:
7f:81:8b:c7:8b:ad:ce:bf:d5:b1:f1:20:ae:96:e3:94:d8:f0:
1a:f6:4e:49:df:2c:51:28:27:bd:98:48:d5:53:50:a1:f2:9c:
42:99:56:4c:b6:30:ef:ce:61:ae:ec:6c:8b:dd:78:ec:3b:54:
cd:e7:86:dd:f3:c8:ab:51:42:87:18:05:a9:75:3c:6c:a9:25:
59:b5:fc:c8:90:da:0d:e0:83:0e:7f:d3:c9:fb:47:b4:fb:46:
74:80:3a:78:30:4c:30:96:ab:a5:47:13:5c:13:14:74:c7:ee:
2c:cd:c3:21:1b:56:22:71:cc:13:16:e3:f7:18:3c:8f:3f:7c:
2a:f0:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:10 2026 by rpki-client