Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: ibZWA4OWphYKbED3DbTLlyId3d75EFFNL3RlVt0M1Yc=
Subject key identifier: 4A:14:7D:4D:20:C4:2D:A8:9C:BE:82:F1:84:D1:05:10:A1:3F:12:6E
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 019D27727F73875675E3AC50D12670B34176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 1564
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: V+CzYobHu+rGCaXJRcp6NdRw7aj49/3BNx2hN01C0KA=)
2: gL5Giy-rTCvNArfPkKAU-r2CxM0.roa (hash: jO7bXDuHY7qto41yybcOr3CvCDVLDdC+wp0YyPzuDpg=)
3: nKLfpVUcp118xFJnNk1KItDI1Z4.roa (hash: nILTBxf9pDPjeb+IYez6Oufx0RUp69esbdOKvblK8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7f:73:87:56:75:e3:ac:50:d1:26:70:b3:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=4a147d4d20c42da89cbe82f184d10510a13f126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:8d:91:40:51:38:56:37:fc:94:25:a3:fc:
83:39:15:70:0e:a4:89:cf:32:d7:d0:38:65:16:c0:
41:c5:f0:02:de:7e:c9:e2:8a:8d:60:eb:14:0d:c9:
4a:d4:47:50:9b:5a:4b:4b:a8:4b:db:bb:9d:29:83:
86:f3:12:8e:35:0e:51:90:f0:5b:c1:93:a6:7b:ee:
77:e9:c1:84:01:e6:66:fc:b5:1b:88:90:59:14:5e:
b6:f7:12:0e:25:f0:9e:7a:79:82:81:72:e5:38:4f:
54:fe:86:8f:8a:eb:89:b4:8c:b2:47:dc:12:00:7a:
cc:13:89:66:8c:29:4f:78:c0:38:f5:bd:a9:94:4b:
aa:0e:d6:0b:04:94:db:45:ee:28:58:dc:7f:48:73:
5d:62:27:68:85:9c:cd:4f:9f:b8:33:85:33:a3:64:
75:c2:99:d5:f2:91:22:cc:72:c0:ce:82:52:0a:77:
f6:a4:bc:ea:55:42:9f:6a:8b:6f:21:0e:5e:4e:ad:
c2:7c:1e:02:f9:66:2f:c7:41:17:0a:84:1f:59:ad:
88:9b:fb:96:4e:b6:3c:44:bc:31:41:92:28:a3:d3:
a9:e9:62:75:e0:2d:db:82:0d:bb:bb:21:10:8c:01:
6b:ac:51:0f:77:59:34:e2:4c:ff:b4:e8:02:de:05:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:7D:4D:20:C4:2D:A8:9C:BE:82:F1:84:D1:05:10:A1:3F:12:6E
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:19:d7:ab:10:53:3e:7b:8a:9f:fe:bf:04:6b:26:09:08:
90:5a:1d:33:f1:a3:6a:05:fd:a9:b8:e6:c4:01:de:f9:c5:77:
58:a3:62:40:a3:b4:0e:da:b6:b5:bc:c2:2f:8e:8f:8f:0b:1a:
fe:5a:15:13:0a:c1:95:68:36:fb:8b:10:50:14:87:ea:05:e6:
e7:28:9e:43:90:6f:fa:b6:9c:36:13:4c:56:be:1e:1f:02:48:
b4:d7:25:87:89:34:3b:47:97:0e:ba:6b:51:67:69:7c:6c:0b:
ac:fc:aa:26:fc:ea:41:ef:bb:fb:b3:05:fd:81:bf:16:09:b5:
1b:95:be:b5:02:68:78:23:f8:43:4b:0c:7c:c3:02:8a:32:8a:
a6:66:2a:fc:a1:d6:35:e4:0a:b1:3b:c7:ff:09:b2:af:b4:ac:
ba:12:93:8d:b4:49:3e:f3:fc:ae:4b:f1:ca:31:6a:11:4a:68:
88:08:83:c4:d1:28:56:fc:6c:5e:c9:d7:c0:1c:db:5d:7f:90:
4f:95:e4:79:f1:96:58:3b:5e:ee:5a:45:94:63:80:c1:8d:b0:
32:b0:08:2e:e3:16:69:65:fe:c9:ca:ad:6e:03:40:72:6a:71:
b6:4e:01:be:82:43:bf:3d:f7:ff:8a:62:18:7f:62:68:b0:f5:
b3:1f:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:20 2026 by rpki-client