Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: 8tSYsnGpdoDu9yfBalyVFCvu5ILjjqRbFEU1Q82o98g=
Subject key identifier: 2C:80:20:15:E7:CA:7D:13:E2:23:0D:A3:4E:16:64:3C:21:79:A4:BD
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 019D284DD3A1C91940AEC359502AD8557264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0DDF
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: l8iGSqI61BlYls4gVbKY0Z4PkB+x31EkSYtHefLI19s=)
2: LP0LDBDShk6c7B2x6Vlb-7nsEvQ.roa (hash: bcLMSmZZ+3fduWbmxkS4mikbivKQ+Mib1eYrxT+UG6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d3:a1:c9:19:40:ae:c3:59:50:2a:d8:55:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=2c802015e7ca7d13e2230da34e16643c2179a4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:48:40:75:e5:3d:1d:23:83:4a:b2:5d:97:
61:97:9b:66:7b:5c:a2:18:35:14:48:9e:1c:77:d1:
db:d3:23:47:75:b6:6b:a0:36:3f:8e:e6:84:1a:0a:
79:fb:43:ec:c8:c3:5f:23:b6:ca:a0:a5:62:04:5b:
21:bc:35:6c:09:ee:3f:80:46:52:7f:0d:d9:89:13:
b0:ff:22:19:8c:b2:9e:f7:89:06:0d:3c:0a:3d:d1:
00:75:a0:59:30:7f:a5:ec:c3:8f:5a:27:df:95:14:
dd:92:46:d9:fb:0f:a5:5e:14:ad:b7:a5:fd:5c:0c:
a5:bf:5b:fd:5b:6a:76:85:aa:f5:23:4c:17:d5:2b:
2c:03:07:94:03:0e:0f:93:72:70:e7:a5:e3:ae:17:
59:e6:ff:a7:9e:8f:77:65:da:46:3b:f0:ea:84:6d:
fb:48:8a:92:78:bb:98:5a:17:9c:82:51:0c:a1:a4:
03:ef:82:14:a0:6f:8e:7f:8a:4d:8a:c4:67:41:ce:
a7:8d:31:9b:f5:39:62:d0:24:fe:52:35:b3:fd:7f:
d5:9b:9f:e6:04:c4:96:51:c8:5e:19:b1:d2:01:10:
f3:54:8c:7b:b8:1b:21:94:c4:eb:31:91:47:26:85:
d5:65:3a:30:72:ec:0e:3f:8d:04:62:c6:17:30:ab:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:20:15:E7:CA:7D:13:E2:23:0D:A3:4E:16:64:3C:21:79:A4:BD
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:14:76:d3:e3:46:ae:ef:e7:32:8e:39:68:b8:ad:49:fd:
e6:ff:9f:6d:ab:96:ed:8d:82:16:c5:8f:82:5b:1f:50:ae:83:
92:f2:18:5b:d0:c2:36:a9:63:36:df:b3:e8:91:99:10:8d:38:
4f:04:0e:30:c8:42:f4:bd:bc:81:f6:a1:df:42:f2:64:94:62:
bf:2c:2b:99:b7:ce:9c:5f:49:ec:ef:6b:51:49:17:bd:20:99:
fa:09:2e:36:7b:a4:b3:5f:16:df:09:c4:79:6b:9f:b7:f9:51:
22:73:50:f0:fa:08:46:8b:6d:ed:dc:bb:0e:e8:1d:5d:47:f3:
35:a6:02:cc:7b:f9:c8:e2:b9:00:4a:e3:ac:00:5f:f6:8d:97:
1d:60:24:e7:7d:86:58:14:ba:ea:75:ae:01:8a:44:98:28:63:
5e:5e:04:ad:8d:3e:2c:da:5f:e8:a1:cf:47:af:f1:20:72:b8:
53:73:8e:4e:1d:fe:29:c9:89:05:dc:70:9f:a6:b9:f9:f6:78:
29:32:22:b8:9b:24:71:fd:50:5e:fd:05:46:72:07:cf:1e:60:
60:6f:e5:d4:c9:0c:1c:3f:81:48:8e:93:f6:7f:80:cc:0b:62:
5a:28:54:a0:8c:90:20:71:56:a2:68:ca:d5:cb:05:ec:3b:f9:
b9:fc:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:53 2026 by rpki-client