Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: 7aUqQiIvAMdYGS6dg7LUD58XSmEdMm7doC3ZrutQ5iA=
Subject key identifier: E0:B0:52:71:20:74:45:79:BC:4F:26:EE:6D:AA:33:3A:3A:D1:53:70
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019F94DB1E7D9BAF0621F19780238CD8A499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 08FC
Signing time: Fri 24 Jul 2026 16:00:15 +0000
Manifest this update: Fri 24 Jul 2026 16:00:15 +0000
Manifest next update: Sat 25 Jul 2026 16:00:15 +0000
Files and hashes: 1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: HwSBzsr87BmCbav1zLpZLdSlm4WXKkO56nFCMK8FJ9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:1e:7d:9b:af:06:21:f1:97:80:23:8c:d8:a4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Jul 24 16:00:15 2026 GMT
Not After : Jul 25 16:00:15 2026 GMT
Subject: CN=e0b0527120744579bc4f26ee6daa333a3ad15370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:59:0b:14:36:70:90:05:31:04:4d:70:1b:
f8:4e:26:5c:48:d9:e2:20:53:d9:fb:1b:7c:ef:35:
fa:81:3f:38:da:dd:bd:fa:91:14:6b:e4:e7:52:73:
7b:57:3a:26:7b:2e:31:fb:e9:b9:19:b4:4c:d9:e4:
a4:c1:3d:f0:4d:8c:62:1a:33:c9:09:94:38:7c:56:
e9:1e:60:4a:86:da:cd:c2:7d:48:84:fa:61:f7:87:
fd:da:3e:46:b5:e5:89:fc:23:1f:17:d6:fe:e0:b1:
25:44:0f:95:69:bc:ec:c6:d9:1c:05:06:ed:03:2a:
47:d8:ef:7a:e1:12:2c:f6:71:8c:e0:1a:30:8d:6f:
6d:ba:94:94:55:ae:ed:1a:a9:1d:1b:75:c7:35:17:
e7:87:d8:40:c5:08:3a:8b:ae:ce:e5:1a:bc:b2:15:
a5:ca:d1:11:77:d5:a9:42:1c:6e:2a:8d:ad:4d:6b:
7a:91:8d:d2:3f:35:0e:5e:16:0f:9e:e3:78:db:c4:
8f:bc:46:2c:9f:39:9c:7d:36:63:de:fb:86:3e:ce:
63:00:84:d4:21:7e:77:e0:3b:30:de:ea:70:22:1a:
59:88:62:5b:7f:4c:4a:b3:59:e9:32:e3:e5:ad:d3:
f1:56:b0:7f:ab:f1:64:8a:12:28:58:bd:b5:62:27:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B0:52:71:20:74:45:79:BC:4F:26:EE:6D:AA:33:3A:3A:D1:53:70
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:87:40:64:bc:4d:06:e8:d4:bc:03:d3:2f:da:21:b1:27:
0d:31:e2:ca:66:59:d2:e2:22:0d:8c:a0:54:0b:7e:e4:7c:d9:
73:52:66:7e:8b:e2:ff:c0:65:13:e8:38:63:e6:7e:19:98:2a:
68:3f:3e:fe:36:5f:03:df:05:86:bb:d0:04:e0:8f:a0:72:15:
b6:60:26:4b:ca:3e:5c:b9:55:0e:9d:92:14:1f:4c:1c:24:45:
c9:6d:82:23:eb:b9:c5:0e:6f:5d:1d:cc:90:6c:9e:2b:d7:16:
ab:2e:7c:ee:2d:0b:11:fb:7d:78:d3:58:7e:2f:3b:ad:7d:9e:
08:fa:d4:fd:fb:e7:46:14:53:88:8c:e7:53:68:ee:7a:95:b4:
7c:14:98:22:33:f1:34:a4:32:1f:6d:e0:94:3f:4a:11:8c:34:
f0:cb:7f:27:fc:13:a5:ac:06:1c:54:c5:97:1b:ae:5f:a3:f3:
06:cf:1c:8c:f8:c2:24:c6:77:af:5c:06:f1:cc:34:ca:56:65:
1d:54:79:4b:a9:47:fe:a9:d4:8a:5c:d9:1e:52:e7:2c:6b:a5:
13:4d:d9:a4:5c:8b:9e:0c:dd:0f:59:6f:52:b6:62:ae:af:d7:
74:dd:37:cf:92:dc:97:dd:29:90:c2:35:35:2b:c0:d1:c5:3a:
78:f9:1f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:21 2026 by rpki-client