Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: IK0sr5lnH9XkSEjrBKK7GPpzmvGUKYIZAs73R3/FKwI=
Subject key identifier: 7D:1E:C6:E7:19:73:40:5C:09:8D:84:25:8A:21:ED:D4:15:8B:7D:A2
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 019D27729F91E9882EAA4F960C7EDF5D17D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: OW0uslrg_GEgmEZG28eR9rKF34M.roa (hash: KrRJivtezUitThQ/Pah/fHB0G7rklcjBtZ4pZk0sSHc=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: 67HFiTRZY3a1zQiPBUT71e/HoSHN1onLzak8sljNjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9f:91:e9:88:2e:aa:4f:96:0c:7e:df:5d:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=7d1ec6e71973405c098d84258a21edd4158b7da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:99:5e:ab:e3:19:ca:34:5c:c5:d8:38:92:
57:d7:4a:02:d4:c2:53:49:ba:81:ce:86:a2:6a:3e:
85:28:b2:b8:21:07:9a:7d:d0:ba:14:ac:82:53:95:
b2:6b:e5:11:33:f0:54:12:48:cf:5e:42:e0:a8:a9:
9c:2a:7a:b1:74:4f:98:1c:bf:10:8d:10:cc:db:4d:
31:b1:10:0a:5f:8e:80:d2:db:3f:e1:75:45:da:0a:
20:46:c8:e3:1e:61:1f:da:e6:59:b1:41:c1:9e:a9:
06:12:e3:98:01:f8:d8:16:e0:aa:90:07:40:f1:e6:
67:d1:64:6f:82:73:3d:14:26:a4:59:46:6c:b6:14:
f9:9b:25:11:53:29:f7:e4:53:03:a4:d7:ff:6d:af:
78:96:9d:54:c9:be:f1:75:55:6b:54:25:dc:15:9f:
bd:6e:15:31:53:5a:73:99:61:4f:a2:5c:49:2f:28:
89:d3:0c:8d:0e:eb:b5:d2:f9:45:3f:6e:3f:0f:a1:
ef:f0:5b:15:63:f7:e9:7d:d1:94:c2:4f:e3:9d:46:
3f:2d:72:1a:c7:fb:d8:ad:67:81:83:af:63:47:57:
ef:c9:e8:1d:eb:d2:59:9d:b0:00:4e:93:bd:59:04:
14:c8:1c:9d:3a:37:8e:74:24:fb:d2:c3:2f:a4:07:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:C6:E7:19:73:40:5C:09:8D:84:25:8A:21:ED:D4:15:8B:7D:A2
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1a:5d:f3:3a:5d:b1:8d:35:36:a5:23:35:d1:fc:6b:a6:36:
78:06:54:f9:b6:62:2d:6e:62:80:ea:05:6a:bf:7d:49:2f:3e:
c0:53:f5:86:ab:d2:ac:e2:8c:08:b2:c5:38:23:f3:63:7c:ec:
ce:41:2f:b5:aa:7b:92:85:4f:5b:a3:e8:4a:f0:6e:16:3c:22:
b7:72:dc:8e:3a:f7:46:a4:6d:0d:21:12:aa:94:14:4b:28:38:
76:79:da:e3:f1:36:57:50:22:62:fc:b3:77:c5:ff:ec:52:43:
3e:3b:f1:b6:79:26:a8:c9:ad:9f:7f:9c:31:30:bc:f2:ff:ce:
34:f1:17:a3:a2:61:66:b4:e1:0f:f6:e8:7a:14:f7:ca:c6:96:
fa:d1:94:f9:22:d9:23:8a:2f:d2:e4:7d:6a:e3:a9:cf:96:14:
45:66:3d:42:8e:5a:99:22:fc:8e:63:ea:48:1a:5d:74:98:52:
1f:ba:89:2c:3b:0c:21:a7:99:0c:12:78:11:da:20:0d:e3:e8:
de:d0:6f:f7:61:5a:43:e6:42:4a:10:ef:64:e7:4a:e2:37:e6:
d6:c4:d8:22:98:1e:d1:d0:a9:fa:16:f5:75:7b:ba:e7:c9:75:
3d:ff:eb:88:69:19:a8:9a:6c:0c:87:7a:42:8a:5b:52:46:00:
c2:4c:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:33 2026 by rpki-client