Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier: m5RpEZWjHVc4evDYba93D0l63Q+c1MbcVu/Vy53ge3E=
Subject key identifier: 5B:60:2E:1E:3C:B6:71:A2:5E:6A:13:C4:F1:F3:47:67:D3:D4:39:98
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial: 019D296140B95AF00DDE61C3E63A3B935350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: 2cbClVS4xXob8cs6ACu_LpO57kA.roa (hash: cEaz1GVKnw/Si3BKd+mDzCUn+hrl/3nYfWBCaz+jW9g=)
2: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: biOal+R9MIi5wNpIGqmDHcSbSytEjTquVQjeQn/tzmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:40:b9:5a:f0:0d:de:61:c3:e6:3a:3b:93:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=5b602e1e3cb671a25e6a13c4f1f34767d3d43998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:aa:44:53:66:fa:58:70:4c:a5:c6:00:26:
e7:59:78:3b:16:1b:48:ab:ad:15:12:20:02:5d:43:
ce:c2:98:40:5a:80:b0:6e:9a:60:41:6c:60:8d:96:
de:23:ff:37:3e:bc:00:44:7c:62:a5:30:f5:0c:93:
b6:c5:0c:27:28:3e:60:33:5c:c8:6e:74:9f:18:92:
6b:88:5e:09:7b:97:0d:41:5e:70:05:44:90:9f:d0:
f9:40:19:4f:ee:64:e2:db:ab:bc:41:6a:4c:14:26:
a4:78:25:73:f3:f0:59:b1:9d:8c:0e:91:8f:98:0d:
6f:20:05:5a:42:d4:8b:ba:9b:82:33:75:56:de:3b:
65:97:1c:25:74:1d:a0:05:db:f3:14:05:95:ae:a1:
ae:eb:ff:c6:14:50:be:8c:a0:88:00:e0:66:74:47:
25:f7:8f:e4:54:d9:d4:c2:9f:31:f2:11:b4:49:2e:
ee:10:ce:a3:be:d2:17:49:48:05:91:8b:1f:57:39:
54:5e:a0:bf:0b:64:cd:e6:ab:b8:f5:7a:36:36:84:
e1:0a:45:6c:6e:32:64:aa:3f:75:1d:75:d3:02:b7:
c8:72:22:f8:0a:c2:3a:4b:ba:1d:b0:bc:55:7c:7f:
78:73:18:f7:d4:8f:f4:38:a4:b4:d9:db:5b:35:0b:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:60:2E:1E:3C:B6:71:A2:5E:6A:13:C4:F1:F3:47:67:D3:D4:39:98
X509v3 Authority Key Identifier:
keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:51:86:79:a8:e2:0a:c3:0d:d8:82:24:c3:eb:59:bd:44:
ad:24:4c:55:22:30:5a:ed:aa:8b:39:cd:1f:25:df:c4:bd:c6:
5d:69:6f:67:83:c4:c9:b4:5b:fd:fa:34:d9:c6:da:c9:b2:50:
28:74:4c:36:49:71:49:ec:08:93:6d:04:a3:85:67:e7:b2:bb:
2b:24:95:a3:75:7b:09:ce:fc:ed:40:42:b7:fa:d8:cd:25:79:
b4:04:07:e5:f6:bd:31:22:d4:fa:8a:23:fa:2b:bf:98:90:f3:
0e:67:03:98:86:c0:cf:01:da:76:08:27:15:ff:d4:8d:02:30:
ca:c0:9f:19:d3:b3:5b:d9:55:52:29:2b:d3:6f:e1:b6:ca:d1:
8f:ea:92:98:a4:85:cf:b4:73:35:06:e9:f3:0d:63:01:46:82:
ca:12:f2:1a:43:94:13:6d:6c:c7:32:43:0f:68:d0:48:6a:91:
da:c8:d8:1e:e4:22:4a:86:04:a7:e8:f1:a3:6f:53:1d:87:0c:
4f:b0:ed:31:bd:54:de:4a:da:67:60:67:0c:7c:c0:79:5c:4c:
11:e5:75:fd:eb:e9:20:c2:9f:35:9a:6d:82:ad:37:29:db:2f:
d5:85:43:6b:0a:16:91:05:bf:64:f7:b7:01:ab:3e:f2:6e:ec:
26:2e:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:11 2026 by rpki-client