Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: 7YaBMkykLaP9GBfLyD3ObDRh6tajDzBvqRAWimfg4Jc=
Subject key identifier: 23:D5:60:A4:E1:8B:36:86:B8:6E:C7:44:40:AC:CB:95:B8:7D:7E:29
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 019D26CCAFA6A6A1BAE6D5FB243A8133BDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 06C8
Signing time: Wed 25 Mar 2026 21:00:41 +0000
Manifest this update: Wed 25 Mar 2026 21:00:41 +0000
Manifest next update: Thu 26 Mar 2026 21:00:41 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: WNp4KqbVZQC4wZy/yBTe3MyevKCquxTI3t8g8hrmILs=)
2: CUoKG5KBfZLY81B9VMINCtlfS6U.roa (hash: LS0KYy/ZBd62NqsUCQ3fjoY3u1OJXGmBPSRbAnObypM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:af:a6:a6:a1:ba:e6:d5:fb:24:3a:81:33:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: Mar 25 21:00:41 2026 GMT
Not After : Mar 26 21:00:41 2026 GMT
Subject: CN=23d560a4e18b3686b86ec74440accb95b87d7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:c6:c3:f1:e7:f7:ee:64:aa:7e:f1:ff:ff:
a8:e3:3e:f6:c9:73:19:3d:cc:cd:71:45:9a:a5:9a:
10:e8:e5:e0:98:d5:b1:ad:5b:82:0d:99:8e:ca:0e:
ed:42:2f:d5:18:93:97:41:8c:da:37:8f:6e:47:58:
d9:b7:50:8d:8b:ba:52:75:86:ea:a6:8f:23:2c:44:
66:59:5e:29:b9:bf:99:85:f5:b4:61:63:f0:a4:2c:
25:52:ba:72:f4:02:87:b3:e0:73:ca:1c:41:dc:0f:
05:95:8d:5f:3a:1c:55:df:67:ad:55:8a:a4:1b:69:
2a:f0:4e:ca:f3:1e:5c:94:cb:c9:84:59:6a:83:56:
78:51:0a:9f:dd:3c:bb:67:01:1a:5f:32:a2:b1:46:
1c:48:9f:3a:a3:e6:98:bf:43:02:26:e3:48:11:0b:
c8:d9:99:a4:d6:59:b0:bf:0a:57:67:19:89:ce:65:
20:9d:87:30:9b:90:c4:5d:28:21:fa:49:a4:c9:95:
a4:60:2d:d8:8e:4a:d0:cf:68:b4:bc:a5:20:df:4e:
6c:ab:7c:fd:a7:fc:84:a5:aa:32:6b:1f:ca:98:95:
0b:2b:e4:90:58:7a:6a:93:ef:6b:31:4e:76:9e:4d:
56:c5:e0:58:38:f3:33:ce:bd:e4:a4:4c:b2:52:dd:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:60:A4:E1:8B:36:86:B8:6E:C7:44:40:AC:CB:95:B8:7D:7E:29
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:a5:c8:22:dd:b7:47:75:8c:a3:b5:3a:0b:21:6e:4a:93:
40:7c:56:d0:14:23:b1:8a:cb:ef:eb:f4:7d:c8:89:5c:42:47:
c5:2c:5b:49:70:7e:9d:0e:89:01:6b:9e:77:70:9c:00:b2:cd:
ea:b4:14:84:3c:9f:aa:c4:1a:e0:dc:ab:00:02:5c:74:13:f0:
ea:e4:2b:c3:92:71:fa:ab:d6:56:8e:05:50:02:de:1a:bb:8d:
d7:31:28:b2:5c:7f:c4:17:d5:e8:cb:86:de:85:5a:fa:6c:49:
1a:4f:b0:82:1b:bb:35:09:0f:d9:b6:53:ce:16:28:fa:16:ac:
de:ff:87:cc:d7:c5:1f:8f:f7:a5:d9:e1:89:40:f1:0c:2f:e4:
df:bb:40:18:38:d0:d1:08:f4:c6:c3:9c:d5:6d:7d:b9:83:43:
10:44:3c:ab:dc:e1:13:78:02:b8:c4:9f:80:93:c3:b8:3f:21:
c8:bd:5f:1c:22:74:e6:2c:cc:59:e8:79:a0:b7:7c:73:d5:ed:
c7:0c:59:68:17:a8:2a:a9:0b:0d:6f:33:eb:00:9f:6f:75:19:
42:92:fc:81:0d:c5:df:98:8e:7e:75:75:39:89:12:53:04:ce:
28:92:2f:ef:a6:d4:81:b1:22:66:0a:cf:59:a7:8b:bc:a3:26:
bb:ea:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:42 2026 by rpki-client