Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: ff/AyS71VEp/MKm4tKXfuvXdnPOa3kPsZonWlKWxMF0=
Subject key identifier: 9A:02:26:5F:06:CE:3E:93:86:F1:79:7A:94:FF:52:15:31:B5:45:66
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 019D29CDB354BE689D76C3D5F0742B23843D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 08B8
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: IACnmPP7ELzrYiGKPSsznmcnCHsORWqG+hR+LhThKYI=)
2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b3:54:be:68:9d:76:c3:d5:f0:74:2b:23:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=9a02265f06ce3e9386f1797a94ff521531b54566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:56:68:99:e7:74:63:f8:3a:5a:19:f5:f8:
7b:33:da:f2:0b:8d:bf:2b:4e:f4:99:49:cc:9c:2c:
3a:c8:de:7a:df:97:9a:f9:e9:04:78:f3:bf:3f:4e:
ef:a1:5a:48:73:6e:dc:bd:ce:75:87:77:2c:c3:c8:
33:61:c3:0f:9e:e9:3d:ea:e3:82:fd:92:8d:d3:ea:
be:f8:74:6b:72:fe:a2:02:11:12:f5:98:8a:bf:5a:
5a:30:1b:be:5d:4e:45:74:6e:25:41:b9:79:17:96:
a6:98:dd:55:c6:dc:57:a8:11:ac:47:4d:cd:2f:c4:
f9:d6:34:ba:38:cb:61:60:d7:80:f9:95:5d:98:6e:
c4:a3:c7:01:20:33:a1:ad:00:c6:db:3a:41:66:cf:
1d:87:dd:b2:e6:f8:b9:b6:13:ce:05:4b:b7:6e:47:
e2:86:6b:de:f4:49:fc:c9:d6:e3:79:02:4f:d6:06:
e9:55:f0:f1:94:6f:66:0d:8f:bf:e8:93:1a:d8:45:
fd:7c:20:d6:ab:fd:e1:d5:d0:7a:7f:cc:16:0d:5a:
d0:fe:47:3a:16:5a:50:32:8f:3d:17:78:13:e5:89:
8c:31:7a:90:e2:96:1d:7e:ca:45:49:54:8c:bb:16:
32:2b:b1:7f:50:05:9c:14:89:9f:ad:4f:ae:30:12:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:26:5F:06:CE:3E:93:86:F1:79:7A:94:FF:52:15:31:B5:45:66
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:3d:8f:b9:2d:e7:f7:d5:94:c2:8b:f9:db:dd:07:34:c6:
82:cd:8c:68:89:e0:d8:e5:4f:a6:e0:58:50:08:5b:07:84:63:
e3:19:9c:d6:70:08:55:e0:71:a9:16:17:cc:2d:95:24:1f:3d:
76:d6:4f:8f:55:8e:b7:f4:d1:22:f9:e9:21:0e:39:f1:c5:9a:
f8:0c:05:27:e8:49:11:65:24:72:64:05:83:42:12:e7:30:9b:
a1:53:f8:6a:17:8a:3a:54:a5:c4:df:dd:3e:92:ff:a8:17:79:
cf:a4:8d:8b:41:5c:cb:d7:59:63:68:30:66:f8:00:8a:b3:3a:
7e:4a:3b:a8:01:10:84:02:ba:c0:0d:a2:63:ad:fb:f4:67:9e:
79:a9:19:4a:17:1a:b3:bd:b7:bc:73:a7:bb:08:ec:99:e6:a4:
d7:70:5b:71:40:bc:ce:4f:f5:19:5c:36:f3:c6:05:a2:73:ea:
26:35:f9:30:17:a9:b6:fd:5e:04:b2:8a:28:a1:6b:ae:6c:07:
e3:a1:f5:a0:84:7c:09:30:ef:8f:20:a1:07:5b:15:ad:64:50:
ea:a0:da:7c:09:ed:6f:09:ba:72:02:70:83:c5:fb:0f:75:56:
7f:1b:60:53:07:6e:bb:fd:3d:51:71:d6:59:c4:85:9b:ff:24:
bf:08:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:51 2026 by rpki-client