Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: NimQWz8bxh6nDu/2rGFg2QY+toAsx+lL4T5x7NhvEpg=
Subject key identifier: DA:16:15:42:A8:6E:D6:DE:B7:14:F0:DF:03:15:52:BD:68:A6:8A:80
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 01A0DC177810DA5BCA6DF6372E53F7A928E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0F03
Signing time: Sat 26 Sep 2026 05:02:00 +0000
Manifest this update: Sat 26 Sep 2026 05:02:00 +0000
Manifest next update: Sun 27 Sep 2026 05:02:00 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: OkFQQWkruKYrztoliWNlJuu1PawwFTIDFNM1Efe8AL0=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:78:10:da:5b:ca:6d:f6:37:2e:53:f7:a9:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Sep 26 05:02:00 2026 GMT
Not After : Sep 27 05:02:00 2026 GMT
Subject: CN=da161542a86ed6deb714f0df031552bd68a68a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ec:02:50:46:f4:86:7c:d0:c5:54:f8:0b:7e:
ac:d4:8f:df:c5:46:64:e0:55:89:8e:63:7f:57:8d:
14:0f:f3:67:f9:68:47:4a:d7:58:97:89:25:46:a9:
35:16:12:c2:19:23:80:5d:0f:1e:91:96:05:3b:14:
1e:60:f8:8d:21:6c:e1:a4:a2:18:1c:2a:71:77:f0:
73:61:d4:c8:65:6a:1f:9e:4b:be:78:45:3f:25:d9:
5e:0c:ae:50:02:f0:76:09:fb:07:e2:9e:fe:aa:18:
fe:8d:32:6f:21:9a:33:a4:44:59:de:2b:10:9a:2c:
f2:ef:a1:9d:7c:82:ed:cc:15:17:b5:11:f8:0d:27:
70:c8:a8:aa:1c:b7:a9:30:15:62:2a:8b:74:66:0e:
10:c9:b9:8f:22:d5:9c:52:7b:6d:dd:fc:c1:0f:5a:
58:59:9d:5d:04:2c:8f:88:4b:4e:d5:15:d1:3e:9f:
43:93:72:c7:05:2c:cc:e2:ce:6c:79:d9:b7:7c:31:
df:60:ca:d2:c5:f9:c4:c8:de:0d:18:9e:64:ce:b6:
2e:b1:85:af:88:39:21:0a:33:16:de:6b:39:f0:32:
5d:17:1f:03:32:60:de:24:61:86:1b:99:8c:14:44:
6b:3a:aa:8e:cf:46:67:17:bb:05:4b:d2:c8:af:ea:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:15:42:A8:6E:D6:DE:B7:14:F0:DF:03:15:52:BD:68:A6:8A:80
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:14:4c:b0:62:c9:32:af:43:0b:a2:d1:8a:22:57:42:ac:
da:29:63:90:4e:cb:37:45:ec:21:19:8a:7e:c5:9d:a8:72:04:
9c:08:6e:10:c4:af:06:17:d4:41:5b:79:2a:91:c4:33:74:77:
42:49:7e:52:a9:1c:10:16:16:a1:67:fd:20:77:ea:d8:08:08:
4d:b8:67:70:29:5a:dd:71:35:c4:f4:65:24:fe:f7:ff:dd:b6:
56:06:d3:22:f7:cf:84:1b:de:d1:0f:23:c4:86:3f:c6:ea:87:
59:c4:45:54:48:fe:b3:0f:ba:15:5d:0c:05:97:43:81:66:67:
9c:68:1b:16:74:46:fd:4d:38:6e:ef:96:78:76:ff:a4:31:63:
e1:4b:10:87:3d:d5:b4:fa:12:3f:5a:d4:5f:a6:0c:ed:45:c3:
38:fb:cb:80:dd:dd:1a:e4:8b:f4:4c:8c:34:fd:e1:61:d0:93:
42:8e:eb:88:e5:f5:33:13:d4:6c:bc:89:f4:b6:ef:32:ed:e8:
04:3d:5a:fb:35:4e:6e:10:ec:1d:9f:d0:48:5f:f6:f8:70:bb:
bb:ba:75:63:de:45:a6:7c:76:19:2d:7d:48:1a:14:5a:ca:c9:
a5:6e:2a:aa:2c:63:41:65:fa:4e:dd:c9:3f:93:15:f2:0a:0e:
44:04:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:16 2026 by rpki-client