Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier: i8pi6jfxjg0iMXp29OS3DLXgNf79n2KH/S8aTXHxlD0=
Subject key identifier: 73:8A:F8:40:A2:4F:E5:4E:2F:59:EE:98:15:89:7F:35:A2:D6:E6:0A
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial: 019E2023E42787FB60E049FCE082A47D6760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number: 02A3
Signing time: Wed 13 May 2026 07:01:23 +0000
Manifest this update: Wed 13 May 2026 07:01:23 +0000
Manifest next update: Thu 14 May 2026 07:01:23 +0000
Files and hashes: 1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: iOLPZgHq0KWOXHDwD4xV3bwuYdp3CHsdQDur0lZ1i7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:e4:27:87:fb:60:e0:49:fc:e0:82:a4:7d:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Validity
Not Before: May 13 07:01:23 2026 GMT
Not After : May 14 07:01:23 2026 GMT
Subject: CN=738af840a24fe54e2f59ee9815897f35a2d6e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:c4:0f:23:4c:c0:32:05:90:7d:b6:a2:85:
72:8b:92:17:31:7b:3e:43:f9:ac:c2:6c:93:c8:d3:
38:5a:2d:7a:6e:98:87:dd:b5:66:e2:2f:49:a4:8a:
e2:ce:2a:2e:23:fe:8c:9a:7f:88:5f:73:98:e4:cd:
0a:3a:07:4a:4b:98:83:19:6f:f4:05:72:21:3a:25:
56:4f:d7:7b:1e:a1:cd:54:40:2b:9c:d5:30:e6:b9:
d1:7d:bb:6a:15:74:13:90:88:26:de:68:4f:db:76:
1c:65:08:e1:45:6a:95:35:ad:12:79:1f:a4:11:97:
86:bc:ed:b0:2c:1e:32:a6:c2:d5:f7:3e:07:fc:a2:
09:e8:40:1d:7b:62:86:ea:f6:86:dc:8e:ba:c9:e6:
bb:00:ea:90:72:6e:e7:48:d3:9e:47:bc:31:cf:b6:
ec:99:9f:e4:49:7e:46:55:75:d3:32:ae:9a:a9:4d:
99:4a:f2:9a:6d:b9:ea:c2:22:f4:11:7d:3f:71:56:
c2:75:9f:e4:68:4d:f1:58:77:69:5f:48:36:a8:fe:
09:0c:28:7b:70:9a:19:b9:0a:11:a1:b0:18:f0:6f:
ce:b7:e0:40:3a:1b:e4:55:21:6a:cf:8d:6c:5b:bb:
87:fd:a7:b4:ac:7b:6f:4a:21:95:1b:8f:34:f6:c1:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:F8:40:A2:4F:E5:4E:2F:59:EE:98:15:89:7F:35:A2:D6:E6:0A
X509v3 Authority Key Identifier:
keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cb:4d:15:4a:d8:99:c2:01:dc:90:d5:ca:db:e4:af:16:35:
70:23:87:11:d1:8b:01:b2:83:3f:28:b5:57:29:d9:86:a6:8a:
78:2a:5b:1e:09:be:0f:3f:ff:9a:92:f7:08:de:70:c8:98:3a:
8a:af:c7:a6:c5:e6:fc:aa:5f:b1:14:22:09:be:4a:b5:8a:02:
b9:1a:2d:d4:1f:a3:25:a8:ab:ff:b9:28:e4:5c:ef:e3:49:f8:
bb:ae:f2:fe:50:7b:2e:ba:1a:7b:7e:fb:14:be:18:94:98:c0:
48:22:77:c4:e9:dc:b0:2f:5a:f7:6f:aa:d1:41:91:56:51:54:
5e:0d:22:a6:e3:ca:24:2d:fe:aa:90:71:74:5f:72:dc:db:26:
45:56:cf:fe:b9:d7:b1:68:2d:4c:05:55:43:5c:2f:25:2e:58:
68:d1:04:57:31:f7:b9:30:65:13:ae:2e:dc:f1:e2:5f:4e:b5:
1c:ba:1e:a0:ca:15:28:9b:19:b0:b5:7f:f5:94:a3:92:ee:da:
78:8a:ad:cb:f1:60:b8:61:30:ef:62:40:83:31:56:c4:da:38:
66:96:9f:e3:a3:cf:f9:37:ef:cd:bb:c7:20:a5:34:54:a6:1c:
e6:70:7b:2e:c3:47:9c:1a:49:47:01:a5:12:f8:dd:9f:15:a8:
e2:3e:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:27 2026 by rpki-client