Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: 07JfnSp5BCwIk47xiH6TxwZS1Bf+pASnp8uBHWXqjdI=
Subject key identifier: 3C:EA:84:12:09:D1:56:B0:69:C5:A6:D9:CC:4D:25:43:A8:D4:C9:47
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019F94DB26CA4E35CFC5D4ECFC2283D9A4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 0364
Signing time: Fri 24 Jul 2026 16:00:17 +0000
Manifest this update: Fri 24 Jul 2026 16:00:17 +0000
Manifest next update: Sat 25 Jul 2026 16:00:17 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: ttx+uVxDXS9SXeLW4ogJ8miSZxLR3+r05O070sf1TdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:26:ca:4e:35:cf:c5:d4:ec:fc:22:83:d9:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Jul 24 16:00:17 2026 GMT
Not After : Jul 25 16:00:17 2026 GMT
Subject: CN=3cea841209d156b069c5a6d9cc4d2543a8d4c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:09:67:5b:7c:c0:77:cc:77:5a:5c:d5:5f:
8e:83:aa:92:7e:f2:a3:bb:c4:91:9f:ea:b7:68:02:
84:fa:46:5a:cd:9a:95:80:dd:62:9b:94:fd:fe:a1:
20:39:c1:75:ff:e1:ce:a1:e4:2d:c8:67:41:22:6d:
aa:b5:ae:42:ab:59:c4:de:19:3e:6f:53:ef:a5:29:
7a:37:2a:6c:c5:3c:19:24:7c:ba:61:da:71:70:c8:
51:8c:70:2b:99:03:c4:0b:cd:b8:13:a3:2b:44:e2:
7a:ea:37:3f:7c:02:91:b0:9f:4c:75:a4:ab:11:4d:
21:8e:33:50:77:86:83:55:66:9b:b4:62:5d:47:22:
68:fd:95:5f:26:81:71:09:2d:62:04:46:ef:78:bf:
09:65:0c:64:19:10:ca:d4:6c:c2:70:4f:79:ab:c0:
8e:2d:2f:c2:d9:7a:2f:7b:ef:b3:de:8c:08:4b:72:
42:cd:0b:09:a0:0c:ce:67:c5:7d:c7:af:f3:4e:5f:
8e:8f:57:a7:5e:1d:09:ce:d8:b0:25:68:26:b5:29:
a3:14:25:7f:21:b1:0a:74:69:2a:22:db:5c:c7:e2:
d3:f5:9d:a4:1a:e2:13:3e:a2:5e:e3:bd:cb:95:45:
d1:69:3f:db:3b:f2:d5:9e:dd:cc:6b:4d:3b:ae:24:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:84:12:09:D1:56:B0:69:C5:A6:D9:CC:4D:25:43:A8:D4:C9:47
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:49:9b:77:5a:e5:fe:1f:24:00:48:0d:a8:80:af:cb:23:da:
cc:0b:dc:09:b5:81:7c:35:a8:e8:f3:96:06:06:a3:6e:61:8d:
8c:75:30:c0:ab:e9:d5:54:dd:37:4f:7e:cf:4a:5d:08:f5:5c:
0e:80:11:7a:aa:f0:d6:dd:e3:28:b6:20:7e:9f:d0:4d:66:78:
96:11:90:cf:6d:5a:b6:15:b3:27:c2:dc:a6:db:08:30:c1:2f:
2d:fb:3e:07:d1:6f:5d:85:2e:28:96:64:39:c8:31:bc:c9:01:
c7:17:e4:b5:05:f1:39:77:f8:77:38:c1:5f:59:09:55:ae:b6:
0e:96:e9:8d:34:a3:ad:05:bb:e7:4e:3b:ae:4f:0a:20:d9:2c:
b6:04:02:94:3d:61:d5:aa:35:ff:df:a8:75:9b:5c:38:2e:cc:
25:21:0a:2f:d8:bc:7f:d5:9c:bf:1f:01:1f:44:a9:5b:db:50:
f9:4d:59:87:85:87:d9:52:de:09:30:4f:57:7b:16:84:cf:e9:
82:02:78:54:d4:c1:ff:c0:98:91:19:f1:df:6c:04:28:3a:95:
3d:9b:ea:e1:bc:ed:57:2a:e9:c6:c3:8d:25:c9:de:53:99:5b:
be:9a:9b:a1:f0:29:14:bf:8e:d4:8d:c1:f8:c4:71:72:31:d0:
ef:cc:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:54 2026 by rpki-client