Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: IZYoN9yAiSbRm9eIbSOgFocjAYUOKhvv0SMFyw/aAgo=
Subject key identifier: 96:9D:5F:51:37:5E:FE:65:01:4A:1A:D5:FC:15:05:4A:A9:44:7B:F9
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 019F976E6868B04968A458EF0207203EA2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 19CB
Signing time: Sat 25 Jul 2026 04:00:23 +0000
Manifest this update: Sat 25 Jul 2026 04:00:23 +0000
Manifest next update: Sun 26 Jul 2026 04:00:23 +0000
Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: N/ZXfp9MphSoExSkTtOlaM1pS1I9k6rnP9/+UX8aclU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:6e:68:68:b0:49:68:a4:58:ef:02:07:20:3e:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jul 25 04:00:23 2026 GMT
Not After : Jul 26 04:00:23 2026 GMT
Subject: CN=969d5f51375efe65014a1ad5fc15054aa9447bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:57:cb:fb:2e:bd:b7:55:75:70:b3:d7:14:
78:34:23:f0:27:ff:fe:b2:50:49:89:8f:13:73:43:
c7:f0:8f:8a:82:fd:3e:c0:73:11:10:98:74:a9:f0:
f1:20:3f:87:3e:a7:9c:1a:3c:9e:8a:1a:72:a5:c7:
09:0e:15:6b:de:56:a4:79:29:03:54:9b:87:ab:fb:
2f:b2:66:70:68:ee:02:eb:cf:28:4b:51:ea:9b:0e:
e9:d4:bd:bc:8e:62:ba:19:aa:af:78:35:5a:1f:0a:
d4:f2:6e:b4:d9:d0:46:39:44:4b:0d:fb:b5:79:8a:
a5:a2:a3:ed:8a:74:1b:44:8d:88:8c:79:ff:90:50:
c5:66:17:aa:11:89:0f:cc:45:46:6a:4d:24:72:5c:
07:79:6d:4c:fb:5c:d5:1c:f2:ef:20:bc:48:0e:3d:
f8:88:be:19:5f:73:8a:c8:1c:75:6c:37:89:66:d2:
92:fb:87:24:12:f8:26:0b:ed:41:1c:dc:7c:75:a2:
4c:df:f8:2b:ce:32:e7:bb:ba:a1:f3:28:51:fe:bf:
51:87:3e:e7:78:02:e2:72:42:8f:7a:21:cf:d3:1f:
f4:da:75:b1:71:74:1a:f9:7b:a1:dd:4e:8f:fb:ea:
5b:a8:d9:1c:0a:18:86:5f:0a:e8:a4:d9:0f:a5:a7:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:5F:51:37:5E:FE:65:01:4A:1A:D5:FC:15:05:4A:A9:44:7B:F9
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9b:d2:37:e1:29:b0:a2:af:3b:72:1b:2e:39:d8:24:4d:37:
4f:54:56:14:49:0f:f9:ac:f8:9b:03:49:cb:04:92:13:40:46:
cc:14:b3:2d:44:8e:a7:d7:bb:43:64:07:b7:22:f2:cc:2b:01:
99:c2:c8:3c:d5:e1:89:b4:67:47:38:3f:b0:41:36:26:d8:dd:
1e:f1:2b:23:00:74:da:e6:a3:de:30:06:ee:8e:b3:d1:bd:9a:
c5:41:cc:45:8f:5f:d0:e2:1c:bb:eb:67:0d:de:b8:6b:53:c7:
12:1f:63:88:75:2e:7e:d9:a0:66:81:f1:cc:66:a5:db:13:f1:
ef:45:25:f7:c7:dd:90:e8:45:3e:36:40:39:98:4f:f8:2a:15:
4c:1e:b6:34:46:dc:ac:cf:7c:a8:69:79:d2:63:2c:5a:0c:d4:
26:09:ec:0a:5b:fb:e6:ca:0d:47:ef:16:52:21:d2:4e:95:fb:
f5:2c:a8:75:29:6b:96:ce:f3:a8:c0:f8:78:69:c8:39:9c:d6:
71:d0:22:cd:b2:5c:ab:c4:d7:7c:49:4a:7b:3a:10:0b:31:91:
f5:86:89:a4:13:9f:8c:71:f2:b8:55:ca:6a:18:c3:6b:48:42:
c6:ca:90:36:64:61:57:a6:ed:5c:39:65:0b:1e:63:58:df:9f:
4b:2d:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:35:55 2026 by rpki-client