Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: KStbSttYeqxwQtM1YapT+ewgXFceX/+Xf2/ZZC+C6jI=
Subject key identifier: ED:32:BF:52:A5:CC:E2:E9:0F:DA:FD:17:83:29:71:9C:1E:94:7A:9E
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019D2704D49C5169EC1D44FC1847362105DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 07BA
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: AnTUIJH+fwZjnGG5RV54kNL+fJtGJtuCQ7edC4K4vMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d4:9c:51:69:ec:1d:44:fc:18:47:36:21:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=ed32bf52a5cce2e90fdafd178329719c1e947a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:0c:64:22:db:21:68:df:1b:0b:5a:76:c2:
49:39:39:9b:ea:9c:3e:6a:8f:01:eb:8e:e3:35:54:
1d:4f:40:44:57:cf:93:98:f4:3c:8b:60:09:6e:0a:
cd:12:39:e8:24:95:b3:b4:44:c1:1e:b6:6c:4f:16:
c5:8b:a3:1f:68:d1:28:0b:11:69:e2:a2:9c:7e:4e:
86:04:97:a1:aa:22:eb:e0:96:52:8a:05:0a:d1:ce:
09:1d:eb:b1:25:bb:26:5f:d4:b7:64:1f:09:d9:35:
04:2d:c5:7b:07:dd:3b:9e:35:e4:88:05:e0:20:0c:
7e:81:cb:a6:35:a0:7a:31:11:e4:3f:6e:a2:28:85:
e9:35:95:57:64:56:bf:22:f5:54:a3:73:81:f0:ba:
a3:34:7e:c9:6f:c3:fd:68:6b:fa:93:38:31:d2:36:
4a:bd:61:ad:c0:88:8e:34:35:73:e8:e0:ef:9a:f9:
d6:b8:d8:2c:06:bc:a3:48:c2:58:b6:c3:3e:a0:51:
13:9a:e4:69:a9:db:1c:6c:c6:06:8d:6f:bc:76:45:
6d:a8:6c:01:05:3c:a9:54:b8:6d:27:6f:39:32:30:
26:db:47:4a:e7:21:77:a4:b9:01:2e:d3:79:d7:d5:
80:e9:88:d3:a7:9c:9b:67:de:13:e4:72:16:d8:0d:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:BF:52:A5:CC:E2:E9:0F:DA:FD:17:83:29:71:9C:1E:94:7A:9E
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b8:09:d2:4d:1e:77:de:4c:b1:c7:cb:9c:8d:e1:27:97:a3:
2b:4f:24:3a:cc:66:9e:ab:b4:9c:f5:45:ed:3e:20:bf:cf:dd:
29:cc:9d:5b:17:31:a4:8c:af:4a:8f:3d:b2:71:4a:f0:21:b7:
38:68:0b:86:d2:e0:82:8c:ed:b7:05:ef:1e:8e:d3:3f:62:4b:
ec:60:a3:73:2a:6b:41:bb:17:bc:35:81:87:ae:40:f1:62:63:
17:19:c5:eb:07:f3:a0:6b:e4:09:60:f6:62:f1:90:e7:d1:90:
63:8f:32:2e:5c:85:fa:f1:b7:43:a3:b4:09:86:d4:e1:2e:ae:
bc:5b:01:77:04:dd:dc:56:9d:70:96:3f:8f:81:6e:fc:e9:d1:
d3:63:d4:5f:36:85:ff:f0:2f:55:c8:3b:ba:00:6e:aa:55:5c:
c7:25:1e:ed:7b:b9:ea:ce:4e:af:00:4d:8e:c0:fc:d2:09:01:
51:a3:e6:aa:27:a8:22:c5:86:ec:9f:a9:f0:df:6a:cb:ac:92:
d6:89:55:59:dc:e9:8e:f4:b5:e6:02:58:f3:1a:f0:04:74:b4:
bd:38:72:16:71:7b:5f:32:0f:f5:8f:b3:2f:31:c4:d1:b7:bd:
f1:71:fb:18:be:e2:cc:37:b9:71:d2:5b:31:95:61:a5:d2:ff:
66:9d:fd:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNScUWnsHUT8GEc2IQXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjYwMzI1MjIwMjAxWhcNMjYwMzI2MjIwMjAxWjAzMTEwLwYDVQQD
EyhlZDMyYmY1MmE1Y2NlMmU5MGZkYWZkMTc4MzI5NzE5YzFlOTQ3YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5MMZCLbIWjfGwtadsJJOTmb6pw+
ao8B647jNVQdT0BEV8+TmPQ8i2AJbgrNEjnoJJWztETBHrZsTxbFi6MfaNEoCxFp
4qKcfk6GBJehqiLr4JZSigUK0c4JHeuxJbsmX9S3ZB8J2TUELcV7B907njXkiAXg
IAx+gcumNaB6MRHkP26iKIXpNZVXZFa/IvVUo3OB8LqjNH7Jb8P9aGv6kzgx0jZK
vWGtwIiONDVz6ODvmvnWuNgsBryjSMJYtsM+oFETmuRpqdscbMYGjW+8dkVtqGwB
BTypVLhtJ285MjAm20dK5yF3pLkBLtN519WA6YjTp5ybZ94T5HIW2A0dQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0yv1KlzOLpD9r9F4MpcZwelHqeMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLgJ0k0e
d95MscfLnI3hJ5ejK08kOsxmnqu0nPVF7T4gv8/dKcydWxcxpIyvSo89snFK8CG3
OGgLhtLggozttwXvHo7TP2JL7GCjcyprQbsXvDWBh65A8WJjFxnF6wfzoGvkCWD2
YvGQ59GQY48yLlyF+vG3Q6O0CYbU4S6uvFsBdwTd3FadcJY/j4Fu/OnR02PUXzaF
//AvVcg7ugBuqlVcxyUe7Xu56s5OrwBNjsD80gkBUaPmqieoIsWG7J+p8N9qy6yS
1olVWdzpjvS15gJY8xrwBHS0vThyFnF7XzIP9Y+zLzHE0be98XH7GL7izDe5cdJb
MZVhpdL/Zp39bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:06 2026 by rpki-client