Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: PGfE1zcId1pq+KROVd/ynfTo7gYeF7ZVoHu1P2/3B3M=
Subject key identifier: 7F:FE:04:1E:5C:7D:B4:82:F6:27:1A:CB:3F:17:93:73:53:61:D4:84
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 019F9580A5DBD3FAA7777C8355D416B2732B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 19:01:03 +0000
Manifest this update: Fri 24 Jul 2026 19:01:03 +0000
Manifest next update: Sat 25 Jul 2026 19:01:03 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 4r16e8fDsC3f/ZZQU2Q/L0fKsf04tuiE+/z5u/WP0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a5:db:d3:fa:a7:77:7c:83:55:d4:16:b2:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jul 24 19:01:03 2026 GMT
Not After : Jul 25 19:01:03 2026 GMT
Subject: CN=7ffe041e5c7db482f6271acb3f1793735361d484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:dd:66:c8:31:ba:7b:9f:cb:2e:dc:4f:ad:
91:f5:99:7b:a3:85:0f:5c:92:59:78:2a:dc:85:fe:
45:11:cd:9e:33:08:60:f3:39:87:b0:10:4f:a0:06:
60:57:d7:c9:3a:40:28:ab:c3:53:a3:b4:cf:28:da:
a4:1f:54:71:83:d4:ae:c6:de:83:91:6a:10:1f:fd:
50:cc:0b:7d:ae:49:f4:3c:98:ca:1c:66:fc:98:19:
33:53:c0:f8:a1:09:d1:04:3e:7d:6b:c2:e3:d9:57:
b0:99:48:f9:54:e7:16:a3:c4:0d:09:63:e7:ac:92:
8e:14:d8:dc:c3:43:03:5e:87:c8:fb:08:8f:48:df:
de:d0:a2:03:4c:5f:74:7f:2a:3d:70:1c:64:4c:1f:
e2:6c:f4:87:12:fc:32:43:47:e6:f1:2d:05:0d:b4:
0f:f4:8b:7b:c3:36:67:0c:c5:59:40:b2:d9:ee:8a:
1e:4d:95:13:e9:b6:48:58:20:e1:dc:42:3d:f8:a8:
bf:68:37:d0:f3:8e:4e:5c:15:2f:f1:b6:0e:a3:23:
06:e8:d6:8e:30:15:1e:16:a6:65:1a:ad:0c:48:15:
c8:3f:5d:82:8f:35:8c:2b:03:76:5f:84:25:25:c7:
2c:06:cc:fd:e6:b0:29:a1:3c:ed:4e:52:46:f6:37:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:04:1E:5C:7D:B4:82:F6:27:1A:CB:3F:17:93:73:53:61:D4:84
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:56:87:1a:cf:ce:c0:9d:f9:5d:69:77:49:2a:f4:42:85:
bb:20:29:a4:88:85:88:45:98:6b:f8:48:08:c9:18:94:55:6d:
83:b5:74:e6:4b:a8:87:f5:03:18:f6:a9:85:34:b4:6d:e9:bb:
9f:50:72:42:6d:9a:1f:53:fe:12:a8:ea:00:b3:49:0c:74:a2:
28:9b:da:24:2a:a2:be:47:82:9b:58:70:fe:e9:35:94:80:3f:
1d:01:a2:8c:98:be:8f:69:ed:48:00:a6:5d:ac:85:94:fb:5b:
b6:d0:47:0f:e3:1f:f0:a2:f3:42:9d:46:d9:cb:3e:2e:d7:e1:
e5:89:78:cb:03:f7:c1:2b:c1:85:71:0c:90:50:87:c5:3a:da:
7b:bd:71:6c:f3:b5:81:c4:7d:7e:84:40:9b:6a:e6:40:75:9c:
4e:12:a2:b3:41:cc:95:49:2f:80:19:b9:70:13:3d:1c:d8:75:
12:7c:72:e0:30:10:80:ed:36:b1:c1:1a:9f:25:0a:f1:ac:6d:
46:bf:55:96:c8:66:8f:59:78:2d:62:77:d8:59:23:41:4d:1f:
e8:d7:ec:b0:81:1b:ab:ef:4a:8e:eb:c8:04:c6:f1:b2:8a:57:
5d:2c:5d:10:57:10:e5:2f:d6:f6:87:51:eb:90:cd:8a:89:a2:
a2:14:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:16:46 2026 by rpki-client