Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: bQ5AOzmpDyJY2hMo5Lx6Sw+Fz7FwLuVocpF8h40iinE=
Subject key identifier: 44:19:02:6D:33:54:BA:55:FB:C6:F6:BE:1C:CD:32:70:49:4D:13:9B
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019D273B2F1B5A46CF7F534C7DB0191BE6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: MDqHIAQqRJ21FDOKDqd47kwVawE.roa (hash: JM0qYFhlEjOgLC0YDCxZLuXg/pZxwWeXNOdGs2yHaFk=)
2: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: m7y4bt+C6SkkrVOlzO3+1TOMnCXwca+fdduB5OMr6/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2f:1b:5a:46:cf:7f:53:4c:7d:b0:19:1b:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=4419026d3354ba55fbc6f6be1ccd3270494d139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:8e:54:0a:92:99:d4:7d:4f:b6:73:e1:ca:
71:dc:76:42:d3:86:18:a2:18:4f:5e:1f:5c:5d:ec:
38:c4:c8:7c:45:fb:e5:48:e5:21:41:6b:a9:b8:dc:
3e:9f:ec:11:9e:83:e1:9c:c7:7e:99:45:a4:93:e4:
2e:4c:d5:90:5c:52:d2:9a:f0:95:68:59:ef:ee:f5:
f5:3b:51:2e:d5:1c:ad:c8:a4:b3:48:3f:9c:fc:55:
00:4f:cc:3f:e8:7c:bd:5a:4f:de:b6:e3:a4:96:65:
c4:74:d3:ac:76:b6:ee:77:b4:2d:8e:68:26:32:01:
36:03:17:a3:40:5b:ad:f1:27:2d:52:81:27:95:e1:
dd:02:75:a2:74:a5:ff:9b:da:12:32:bc:d5:91:50:
fc:b0:1b:0e:14:1b:26:ea:da:16:18:b1:d9:c4:fb:
ec:41:6c:d5:41:37:62:33:3c:e2:b5:ce:d5:7a:1d:
6c:cf:59:19:21:55:19:d3:58:47:43:b0:48:4d:66:
8c:45:16:e4:07:f7:2f:26:69:74:b3:ae:90:90:f5:
5d:4f:f8:6d:c3:cc:72:b9:b9:70:67:ba:22:50:4a:
e3:58:a7:5f:55:87:b2:12:41:b0:90:03:86:d7:9d:
9c:af:18:dd:14:78:ad:ef:d9:97:48:5f:4a:16:d4:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:02:6D:33:54:BA:55:FB:C6:F6:BE:1C:CD:32:70:49:4D:13:9B
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:a0:28:8a:2f:48:4f:f5:d6:86:41:f9:f8:0d:a6:c4:c4:
cd:73:4e:2d:32:26:cb:d9:12:ff:d5:22:cb:fc:1a:1e:71:51:
6d:9c:fd:6b:ad:28:d3:fc:b0:fc:09:66:1f:26:fd:bc:63:e8:
50:87:64:e2:b1:73:90:06:16:75:7b:71:26:f6:23:89:94:df:
5c:82:ee:2d:0a:6f:9c:ed:54:70:ab:5e:eb:8e:f4:3b:e9:b9:
31:b3:02:d7:19:b5:31:8f:30:1b:ac:c4:7c:2e:74:d3:97:8b:
44:1a:c0:1b:65:67:56:05:cd:b3:87:8e:2e:e6:95:7e:5f:05:
9f:f3:39:c3:d0:78:86:74:20:0f:ad:a4:8e:8c:09:e1:32:d0:
6e:50:fd:65:9c:a2:00:3c:a3:72:68:ff:47:a2:d8:79:ef:74:
b2:0c:3b:db:50:32:01:bc:b4:48:ae:0c:b5:91:54:6a:f8:f6:
f2:ab:cb:36:11:ef:00:9e:00:83:e9:18:5d:23:ad:e4:f8:00:
99:2c:0f:8d:5b:3e:62:59:69:ce:61:11:bd:03:e8:73:94:b2:
51:96:60:68:9d:ec:95:28:ce:9d:34:f6:f9:8b:ce:a5:7f:10:
1a:b4:69:9f:b2:bf:17:40:d6:37:09:0a:3a:56:60:60:42:3a:
15:21:14:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOy8bWkbPf1NMfbAZG+a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4
ZTJiNWUwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
Eyg0NDE5MDI2ZDMzNTRiYTU1ZmJjNmY2YmUxY2NkMzI3MDQ5NGQxMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWuOVAqSmdR9T7Zz4cpx3HZC04YY
ohhPXh9cXew4xMh8RfvlSOUhQWupuNw+n+wRnoPhnMd+mUWkk+QuTNWQXFLSmvCV
aFnv7vX1O1Eu1RytyKSzSD+c/FUAT8w/6Hy9Wk/etuOklmXEdNOsdrbud7Qtjmgm
MgE2AxejQFut8SctUoEnleHdAnWidKX/m9oSMrzVkVD8sBsOFBsm6toWGLHZxPvs
QWzVQTdiMzzitc7Veh1sz1kZIVUZ01hHQ7BITWaMRRbkB/cvJml0s66QkPVdT/ht
w8xyublwZ7oiUErjWKdfVYeyEkGwkAOG152crxjdFHit79mXSF9KFtSV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQZAm0zVLpV+8b2vhzNMnBJTRObMB8GA1UdIwQY
MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt
YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk
LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYegKIov
SE/11oZB+fgNpsTEzXNOLTImy9kS/9Uiy/waHnFRbZz9a60o0/yw/AlmHyb9vGPo
UIdk4rFzkAYWdXtxJvYjiZTfXILuLQpvnO1UcKte6470O+m5MbMC1xm1MY8wG6zE
fC5005eLRBrAG2VnVgXNs4eOLuaVfl8Fn/M5w9B4hnQgD62kjowJ4TLQblD9ZZyi
ADyjcmj/R6LYee90sgw721AyAby0SK4MtZFUavj28qvLNhHvAJ4Ag+kYXSOt5PgA
mSwPjVs+YllpzmERvQPoc5SyUZZgaJ3slSjOnTT2+YvOpX8QGrRpn7K/F0DWNwkK
OlZgYEI6FSEUNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:31 2026 by rpki-client