Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: wdgLOgdS9UHJvAIVeXvrWkoNqt7KNfbri3re7CltL6Y=
Subject key identifier: 3E:47:61:C0:A1:FB:D6:3E:0C:09:89:1B:A1:CD:61:5E:2E:22:C3:28
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019E1F119BF78EF92EED0BC40B5A54B01CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0D98
Signing time: Wed 13 May 2026 02:01:48 +0000
Manifest this update: Wed 13 May 2026 02:01:48 +0000
Manifest next update: Thu 14 May 2026 02:01:48 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: 98ELG1pthImCMYeLKjJfRGRbKojraKQ3lbenvL1/Htk=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:9b:f7:8e:f9:2e:ed:0b:c4:0b:5a:54:b0:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: May 13 02:01:48 2026 GMT
Not After : May 14 02:01:48 2026 GMT
Subject: CN=3e4761c0a1fbd63e0c09891ba1cd615e2e22c328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:75:3a:67:74:f9:51:a3:7e:52:27:2c:51:
54:1a:c2:0f:93:39:52:8f:8f:e7:d2:9e:ee:fe:44:
70:14:2d:a3:3f:e7:00:e3:e0:1e:61:2d:9b:10:1d:
17:db:db:ac:9f:11:2e:71:21:a7:70:bb:fc:d2:5b:
02:fc:d4:30:27:89:60:38:18:77:a6:bf:f4:06:97:
d0:ac:fd:9f:e0:68:a3:bc:09:1c:9b:28:c0:70:7d:
3c:6a:05:63:29:f8:0b:87:a1:c4:ed:38:02:61:67:
11:09:00:57:d3:e9:3e:d1:aa:43:30:e0:89:22:17:
f0:a3:88:2a:36:9f:5e:97:f8:80:4e:ad:14:f3:62:
49:b9:31:ca:3b:78:a1:ea:ab:a9:71:dc:f5:02:8a:
0e:fb:d8:96:4c:ed:d0:e0:4f:e4:bf:40:e0:ed:24:
2c:7f:16:f8:fb:86:18:a2:4d:24:ca:da:6a:8e:09:
18:97:d0:7f:2e:8a:76:03:40:77:e7:a7:67:24:e3:
5a:c5:b5:07:cf:85:c1:68:cb:94:63:20:6c:89:eb:
91:9e:16:0a:ea:a1:50:46:d7:de:2a:63:c4:a7:d6:
cf:be:0f:8a:f7:bd:95:77:d2:a3:13:f9:df:46:46:
0a:cf:4d:10:8d:0d:47:df:58:44:56:c7:dd:0a:ba:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:61:C0:A1:FB:D6:3E:0C:09:89:1B:A1:CD:61:5E:2E:22:C3:28
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:32:5d:e8:7a:c7:ac:d8:9f:3d:62:e4:19:05:22:16:d8:68:
3b:3f:9f:b3:57:20:41:51:d7:b7:22:d6:ac:dd:73:74:ab:89:
8c:ea:b3:df:26:41:c6:b5:3c:96:14:14:72:30:d8:07:ee:49:
7b:e8:38:40:4a:c3:e7:9e:45:c1:db:ab:b9:cb:23:ef:0b:2b:
5b:5d:61:10:11:d4:38:7b:c7:b7:6d:ec:8e:00:6b:15:49:64:
42:c9:c3:a7:cb:ef:ad:3f:bb:69:26:dd:3d:42:4f:09:ea:21:
20:63:b0:b9:31:cd:8f:33:0d:a4:ba:b4:20:c6:51:71:fa:96:
90:76:5e:81:13:bb:20:cd:8a:52:7f:3e:73:e0:33:64:6f:3f:
fa:03:2e:d5:88:f0:7a:91:46:95:c1:23:23:bb:7a:b6:a7:2e:
58:39:23:d2:e8:be:05:14:22:72:d8:20:0d:0c:17:71:4a:80:
6b:e3:28:0f:28:e6:f7:bb:6c:41:5c:d7:43:8c:1c:3d:fe:e0:
2d:7a:ee:53:c6:6e:e6:c5:44:48:17:79:f5:d7:cb:39:a4:65:
fb:89:6e:6a:81:46:ab:66:b3:a2:d9:7c:84:58:2b:7e:6f:09:
b1:4b:9a:cf:b6:eb:1f:24:66:cd:8e:c2:8d:f7:9f:1e:85:d5:
87:b1:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:17 2026 by rpki-client