Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: axZmAymQMObKSAUnU2ph2bpKU4/F8E1HoSLyVSI5OzM=
Subject key identifier: 22:CC:0D:B6:AE:72:0E:08:FD:35:46:5E:83:3F:C7:6A:2E:D9:57:1C
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 01A134105D570683AC3308D3D87FAAD9CE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 043B
Signing time: Tue 13 Oct 2026 07:00:50 +0000
Manifest this update: Tue 13 Oct 2026 07:00:50 +0000
Manifest next update: Wed 14 Oct 2026 07:00:50 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: +34R9nzS1wH0C78b5yN9K5DaYMcEwfCCWuHgWcdTfkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:5d:57:06:83:ac:33:08:d3:d8:7f:aa:d9:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: Oct 13 07:00:50 2026 GMT
Not After : Oct 14 07:00:50 2026 GMT
Subject: CN=22cc0db6ae720e08fd35465e833fc76a2ed9571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:99:a3:c4:69:7f:5e:5c:2f:6a:4f:51:1e:
5a:cf:3a:54:34:dc:09:ba:b5:dd:8d:2a:eb:c6:35:
a6:db:f5:84:46:98:93:33:33:74:66:2a:18:1e:f9:
18:ed:d3:4b:44:f7:2e:c6:c1:9c:aa:b2:fc:22:cb:
47:bd:7e:9f:32:8e:fb:f2:6e:58:fc:70:03:56:25:
61:94:aa:9e:b1:a2:e2:a4:92:27:c9:01:14:83:7b:
9b:92:74:c4:1e:03:0d:eb:f1:b1:15:c1:ea:43:f9:
86:7d:00:aa:7e:35:c6:7e:90:42:e7:0e:28:62:01:
99:fc:0a:ae:7d:23:9a:d0:66:63:7b:44:1b:76:3c:
e0:12:d7:25:f0:51:68:b5:58:b3:ff:89:a7:b8:ef:
99:f4:5d:7b:78:9c:0d:04:43:af:d1:e7:5d:31:ac:
4a:d5:a7:92:a4:d6:85:e8:f5:53:17:5e:42:f4:62:
80:48:23:1b:93:d4:b7:47:12:92:85:9c:fb:af:a6:
c0:01:bb:1d:71:59:2d:5b:aa:a1:ea:8f:1a:4e:74:
68:1a:3d:17:45:7a:ba:54:c8:f6:f5:75:54:59:91:
f0:48:1a:a4:c0:9d:75:6b:93:e8:5a:d6:c8:9f:5e:
14:5a:0c:5d:0e:4e:dc:d4:0c:94:49:eb:a7:59:96:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:0D:B6:AE:72:0E:08:FD:35:46:5E:83:3F:C7:6A:2E:D9:57:1C
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:7a:76:70:4e:6d:d7:fc:dd:fd:bb:90:03:b5:8b:53:e6:
43:f5:be:14:6a:f3:ec:af:e8:72:71:42:6a:7f:bf:20:93:63:
a9:2f:2a:3a:f7:b0:95:55:11:65:a6:f7:64:1d:e1:38:01:13:
c4:4b:e4:c2:35:94:f6:75:4a:a8:b3:c0:73:a9:c4:c9:7d:e9:
28:26:ad:01:13:02:dd:c9:e6:df:d3:ca:b7:d6:f7:ff:b0:ff:
fb:9e:a2:49:1f:4c:54:e5:64:4f:b0:6d:58:b6:99:c1:98:8d:
09:05:d7:2d:83:86:1d:84:5d:56:ff:d3:4a:1c:24:37:1b:56:
17:17:e1:0c:a5:d7:93:a0:d3:de:d9:61:9a:ff:2d:1f:9f:7a:
ac:5b:22:20:5d:69:77:f5:81:3b:b0:6a:0d:7b:b1:e7:65:c9:
d6:3e:70:7e:76:bc:22:72:69:e8:b3:0f:ca:ad:0e:5d:be:11:
e8:b1:69:4c:08:97:37:8d:1f:3f:e5:e4:97:d9:e5:dc:c3:d0:
03:8f:18:29:72:4c:d5:45:0a:c1:82:19:ab:5b:d9:93:1d:19:
3d:8a:0d:61:dc:04:59:38:1e:51:48:d5:59:ea:3d:a6:6c:3b:
ef:f7:27:0f:34:69:aa:da:a3:45:5c:4d:8e:06:8a:fc:5a:1c:
ee:57:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:53:03 2026 by rpki-client