Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: QVKTuTvksKRhVcjxaXxloWEJ/2iWSgfra104jbtX78w=
Subject key identifier: 43:2A:8B:7A:97:D9:37:F8:AC:82:B3:CE:90:C8:B9:78:1E:A8:26:59
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 019D2A3B54F192D098DA9FAD3AB552E8E827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 0492
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: suucMto309MNMz9iQXjAWx/Obr/nD2WbLdOp9OIcOV8=)
2: r8t5jSQk5lFlDxv7c6ibzUYCg64.roa (hash: Wn/9Zc0Zbqrrz8vzDzG060ISIulF2mhJvZxaset/d+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:54:f1:92:d0:98:da:9f:ad:3a:b5:52:e8:e8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=432a8b7a97d937f8ac82b3ce90c8b9781ea82659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:ef:7f:2f:f5:18:b6:1c:71:b1:39:01:52:
5e:2f:c9:5e:fe:4f:c8:4d:8f:30:f2:2d:75:40:52:
c7:b3:bf:bd:d2:04:de:18:b2:5d:20:8b:ec:82:15:
ba:12:50:51:51:68:64:e6:39:b6:27:4f:01:4f:6a:
61:36:14:ca:aa:e2:cf:d1:7d:30:43:fb:79:39:4f:
06:b9:45:4c:ba:b9:c7:36:19:c7:2e:ac:a4:16:06:
f2:40:06:da:b7:a2:42:f0:3f:51:89:18:b5:37:f3:
d4:21:22:22:77:66:6c:d6:e4:6f:4d:2a:83:5c:6a:
c9:37:3c:f2:d9:ed:dd:76:ec:01:db:6a:78:d3:ba:
81:93:89:c2:61:fe:bf:e4:5e:88:c3:89:a3:f3:37:
40:6b:63:e2:f6:57:9a:ea:99:f3:2e:e7:54:c5:03:
d6:e2:51:e7:a2:4d:97:25:76:5f:78:a4:98:16:46:
aa:0e:b5:94:be:be:6b:43:59:2d:7b:f6:16:54:5f:
70:e8:9b:20:b9:78:54:fb:39:64:70:1b:a2:f3:cb:
6b:bb:53:11:90:a8:40:a9:0b:82:e5:19:b3:c2:f9:
f0:85:e8:5b:d1:fa:b0:b4:15:24:e5:79:53:11:b2:
16:3f:5e:e4:eb:c2:c3:c2:48:97:2e:1a:3b:2e:f5:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:8B:7A:97:D9:37:F8:AC:82:B3:CE:90:C8:B9:78:1E:A8:26:59
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6e:38:a1:77:9c:8c:fd:64:3d:02:b5:02:41:88:7d:5d:f2:
e7:71:d1:dc:32:25:8e:74:e1:dd:28:e9:ed:d3:59:89:05:46:
97:d6:b3:e0:61:9a:88:d2:e6:32:7f:cf:96:de:87:bd:8a:6b:
6a:f4:00:69:cf:06:d0:59:02:82:cf:0d:f9:9e:b0:87:ea:f6:
56:cc:f1:7f:b1:c3:35:cb:0b:52:6d:5e:9a:3f:9e:3e:4b:c5:
ac:fe:48:c4:5d:21:7b:33:39:1f:e6:31:84:f4:39:7e:8b:3f:
c4:ee:c2:0d:e7:a7:b3:c1:96:23:92:92:e4:85:5d:d0:c4:67:
3b:21:45:00:17:26:61:50:56:98:4b:a7:ec:33:07:3b:5c:2c:
c7:e6:34:fe:21:e0:14:51:0e:35:a7:f2:37:e8:d1:8c:15:8f:
6a:08:b7:e5:f1:2f:05:a7:36:57:61:25:f4:98:a6:7f:ce:d0:
0a:4d:7f:00:23:39:6b:98:27:15:b9:da:b4:7e:96:c8:ba:2b:
4b:a1:81:21:11:58:82:25:2d:f8:93:5d:26:ed:58:6b:69:d2:
03:6b:2b:90:04:3b:07:99:27:e3:69:59:73:e4:6c:cf:6a:4d:
ff:28:50:34:d6:b3:c3:36:62:cd:af:c3:c8:72:8b:04:1d:d9:
d7:22:4f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO1TxktCY2p+tOrVS6OgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjEzOTEwYzFmOTg3MzVlNDAxNjUwYjFkMzRiZjhiNmEw
YTA2OTYwHhcNMjYwMzI2MTMwMDI0WhcNMjYwMzI3MTMwMDI0WjAzMTEwLwYDVQQD
Eyg0MzJhOGI3YTk3ZDkzN2Y4YWM4MmIzY2U5MGM4Yjk3ODFlYTgyNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1/vfy/1GLYccbE5AVJeL8le/k/I
TY8w8i11QFLHs7+90gTeGLJdIIvsghW6ElBRUWhk5jm2J08BT2phNhTKquLP0X0w
Q/t5OU8GuUVMurnHNhnHLqykFgbyQAbat6JC8D9RiRi1N/PUISIid2Zs1uRvTSqD
XGrJNzzy2e3dduwB22p407qBk4nCYf6/5F6Iw4mj8zdAa2Pi9lea6pnzLudUxQPW
4lHnok2XJXZfeKSYFkaqDrWUvr5rQ1kte/YWVF9w6JsguXhU+zlkcBui88tru1MR
kKhAqQuC5Rmzwvnwhehb0fqwtBUk5XlTEbIWP17k68LDwkiXLho7LvVccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMqi3qX2Tf4rIKzzpDIuXgeqCZZMB8GA1UdIwQY
MBaAFCCxORDB+Yc15AFlCx00v4tqCgaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUt
ZjcxM2FkNTE2MTg1LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUtZjcxM2FkNTE2MTg1
LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX244oXec
jP1kPQK1AkGIfV3y53HR3DIljnTh3Sjp7dNZiQVGl9az4GGaiNLmMn/Plt6HvYpr
avQAac8G0FkCgs8N+Z6wh+r2Vszxf7HDNcsLUm1emj+ePkvFrP5IxF0hezM5H+Yx
hPQ5fos/xO7CDeens8GWI5KS5IVd0MRnOyFFABcmYVBWmEun7DMHO1wsx+Y0/iHg
FFEONafyN+jRjBWPagi35fEvBac2V2El9Jimf87QCk1/ACM5a5gnFbnatH6WyLor
S6GBIRFYgiUt+JNdJu1Ya2nSA2srkAQ7B5kn42lZc+Rsz2pN/yhQNNazwzZiza/D
yHKLBB3Z1yJPKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:29 2026 by rpki-client