Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: rSZYQOTyJTEc8/yf0ISWhPPsV4MhWo4oRkUPsgnwHzQ=
Subject key identifier: 47:41:F9:DF:07:CD:F4:09:2C:A7:09:78:F1:A8:8D:03:81:84:27:BC
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019D29CE2BAACDC93A84FDC50BE103302E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0D19
Signing time: Thu 26 Mar 2026 11:01:10 +0000
Manifest this update: Thu 26 Mar 2026 11:01:10 +0000
Manifest next update: Fri 27 Mar 2026 11:01:10 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: d7Yd76m/WoTQ8Gm0aMoi16meoKFBpbTxGzUfOBlKJWc=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2b:aa:cd:c9:3a:84:fd:c5:0b:e1:03:30:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Mar 26 11:01:10 2026 GMT
Not After : Mar 27 11:01:10 2026 GMT
Subject: CN=4741f9df07cdf4092ca70978f1a88d03818427bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:00:5e:ad:d5:11:04:2e:52:85:1c:e3:30:
87:19:2c:61:cb:9c:58:26:12:ec:ef:4d:10:93:f0:
02:2d:ea:7b:35:ae:3f:94:af:0a:1d:fc:c8:6a:c1:
5c:52:bf:f8:58:71:c9:55:51:8c:eb:43:1a:96:1a:
8e:6e:99:9a:fb:86:8c:6e:55:49:da:f5:29:18:08:
a8:06:d1:a9:cc:9f:0c:d7:00:56:ee:0e:96:78:4b:
6e:a0:59:92:45:48:20:87:40:2d:3f:58:79:80:37:
a4:50:97:fc:8a:55:b3:68:3c:f9:f3:30:f9:f9:a8:
56:f7:22:54:d9:92:3a:b6:17:21:15:b9:ca:f8:75:
84:ca:04:2d:d4:83:76:83:c8:e8:9d:e5:b5:87:8a:
a4:a6:fc:c7:c2:4d:50:3c:f6:dc:d1:dd:1a:a5:b2:
67:0e:6c:f1:d7:6c:a1:2c:29:c0:b7:89:25:f5:bf:
a0:30:8e:80:79:a0:d1:5a:91:48:24:64:27:ed:9f:
4d:35:1d:65:9c:80:e7:f9:53:e3:bc:31:f4:2e:83:
53:6a:36:46:f9:83:d8:13:7d:05:c4:ea:1f:ca:8b:
f8:c6:9a:9b:5a:6c:5c:98:8b:65:34:27:6a:95:ba:
c2:68:9e:92:ad:12:c3:96:e7:48:14:81:3c:cc:ea:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:F9:DF:07:CD:F4:09:2C:A7:09:78:F1:A8:8D:03:81:84:27:BC
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:5c:c5:2e:75:14:69:73:ca:3c:2b:6f:d6:a9:05:ee:c4:
4f:84:bd:72:9b:59:de:3e:85:f8:8b:ed:2d:ab:91:b0:c7:db:
a6:4a:56:a6:0f:31:54:9a:d6:ab:e1:ee:59:15:09:f0:f8:b2:
67:26:a0:b1:2c:c1:b6:c8:29:af:33:1d:3f:fa:64:7e:13:05:
c3:9f:67:c7:35:23:f4:b6:19:6d:78:7f:23:6c:b4:20:50:c5:
a0:fa:76:09:89:51:3e:0a:24:12:77:39:4a:ff:21:b0:d4:02:
a3:d5:82:12:43:07:db:e9:cf:4d:22:56:b4:02:20:93:da:d4:
6b:fd:1a:8b:35:a5:de:c2:da:89:99:80:00:51:8a:98:f5:c0:
85:a2:b3:95:26:f9:80:e3:3d:57:02:59:09:7b:99:99:40:8e:
61:a9:25:d9:3f:6b:f8:4f:2b:53:15:dd:d3:ae:68:ad:be:d9:
80:13:4a:08:be:2a:dd:d4:29:57:15:25:52:28:70:23:eb:83:
bf:bd:de:fc:e1:d2:7e:df:6d:83:82:f4:14:4d:27:c1:29:dc:
bf:99:ac:6a:50:8c:b9:a3:f6:e3:2e:ff:23:fb:59:32:58:86:
e3:c9:3b:37:a5:9e:ba:24:66:ca:61:6e:cd:58:cc:ea:f2:c5:
33:49:ed:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pziuqzck6hP3FC+EDMC6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwMzI2MTEwMTEwWhcNMjYwMzI3MTEwMTEwWjAzMTEwLwYDVQQD
Eyg0NzQxZjlkZjA3Y2RmNDA5MmNhNzA5NzhmMWE4OGQwMzgxODQyN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SgAXq3VEQQuUoUc4zCHGSxhy5xY
JhLs700Qk/ACLep7Na4/lK8KHfzIasFcUr/4WHHJVVGM60MalhqObpma+4aMblVJ
2vUpGAioBtGpzJ8M1wBW7g6WeEtuoFmSRUggh0AtP1h5gDekUJf8ilWzaDz58zD5
+ahW9yJU2ZI6thchFbnK+HWEygQt1IN2g8joneW1h4qkpvzHwk1QPPbc0d0apbJn
Dmzx12yhLCnAt4kl9b+gMI6AeaDRWpFIJGQn7Z9NNR1lnIDn+VPjvDH0LoNTajZG
+YPYE30FxOofyov4xpqbWmxcmItlNCdqlbrCaJ6SrRLDludIFIE8zOq2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdB+d8HzfQJLKcJePGojQOBhCe8MB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfURcxS51
FGlzyjwrb9apBe7ET4S9cptZ3j6F+IvtLauRsMfbpkpWpg8xVJrWq+HuWRUJ8Piy
ZyagsSzBtsgprzMdP/pkfhMFw59nxzUj9LYZbXh/I2y0IFDFoPp2CYlRPgokEnc5
Sv8hsNQCo9WCEkMH2+nPTSJWtAIgk9rUa/0aizWl3sLaiZmAAFGKmPXAhaKzlSb5
gOM9VwJZCXuZmUCOYakl2T9r+E8rUxXd065orb7ZgBNKCL4q3dQpVxUlUihwI+uD
v73e/OHSft9tg4L0FE0nwSncv5msalCMuaP24y7/I/tZMliG48k7N6WeuiRmymFu
zVjM6vLFM0ntbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:02 2026 by rpki-client