Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: k451OcqaC+PYA5qm4XLsSAjtwbIJjNwfTsDDk5XNoIA=
Subject key identifier: D5:9C:56:43:68:7F:80:56:AA:B3:4C:EC:05:CA:2C:B8:E8:FF:8F:B3
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01A10136580906DE7098369B0EF8F1DF29FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0C73
Signing time: Sat 03 Oct 2026 10:01:41 +0000
Manifest this update: Sat 03 Oct 2026 10:01:41 +0000
Manifest next update: Sun 04 Oct 2026 10:01:41 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: NMgQOJ9VGWleMY3zLgjdeUDjdN1HnMp3G1zfD2sfOZk=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:58:09:06:de:70:98:36:9b:0e:f8:f1:df:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Oct 3 10:01:41 2026 GMT
Not After : Oct 4 10:01:41 2026 GMT
Subject: CN=d59c5643687f8056aab34cec05ca2cb8e8ff8fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:7e:68:a1:e9:b2:c5:8c:2e:7a:cc:fe:32:
42:4b:e4:39:2f:e5:20:e3:01:7f:70:3e:52:8b:9c:
3a:f0:c1:cf:eb:49:59:b4:fe:77:9d:d7:3c:23:56:
b4:0f:dd:61:e7:bc:db:cc:e0:18:6d:72:7d:d3:79:
f1:46:ed:04:26:09:93:06:b0:28:b3:23:91:e4:0a:
3f:41:cb:23:fc:c0:36:b4:0b:2b:e3:d4:bb:33:f1:
4e:11:2a:15:ce:d5:de:cb:f3:65:18:20:2c:63:8c:
37:c4:75:35:bd:98:c0:a3:26:65:5e:e4:0a:48:aa:
f7:65:6b:b1:40:f4:42:e5:a6:09:dd:ea:6f:27:0c:
88:44:36:2d:20:bd:ed:c5:48:92:11:2e:1f:89:80:
b0:8a:bb:57:26:2c:57:50:73:00:22:b9:79:b7:81:
7c:f8:62:b7:98:bd:cb:8a:29:f9:65:6d:03:2c:5e:
e5:4e:72:0f:bc:8b:6d:d8:0e:40:6c:45:4b:18:72:
e1:d7:3c:c2:ce:e2:43:9b:89:e4:b4:45:9c:58:0a:
4a:bf:a4:04:ea:64:1d:71:d3:b1:84:a6:d0:61:d4:
37:d2:d7:61:17:b4:b8:0d:d0:ba:58:c1:b8:1b:81:
d5:fa:40:7d:c1:de:c3:9c:79:65:12:e2:be:25:bc:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:56:43:68:7F:80:56:AA:B3:4C:EC:05:CA:2C:B8:E8:FF:8F:B3
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:03:38:de:a0:67:ca:50:9c:33:fb:89:a5:d8:38:71:05:
9c:ee:ec:fd:9e:61:01:30:fe:93:96:55:db:8b:42:53:49:48:
05:ca:56:7c:90:16:a1:42:c8:1f:95:c2:c1:8d:3c:26:66:a6:
db:56:fe:59:2a:06:22:aa:7d:e1:ec:b9:f2:7b:d1:30:a3:93:
4d:cb:d7:bf:a8:91:11:44:2d:1b:91:f1:02:19:45:5f:a7:da:
5c:e4:2b:4a:e9:07:9e:61:29:73:e5:3c:24:a8:c5:a6:c8:a1:
d3:6d:32:b3:4f:f5:da:c7:39:5b:3b:63:cb:f4:d5:8b:69:3e:
1f:9d:03:09:02:f8:2b:ed:34:5c:18:91:79:fb:ec:7c:24:f7:
09:92:c7:b4:cd:bc:75:21:a4:0f:9d:dc:52:c8:fb:54:ed:3a:
43:2a:8f:fb:24:16:95:51:21:3c:46:18:e9:b4:cb:43:03:81:
4c:e5:a7:8c:ae:67:c5:f1:65:c6:6b:d5:77:3b:f0:60:4c:a5:
47:e2:2e:aa:26:d0:fe:e7:f3:36:83:8e:bc:41:6e:4a:30:db:
36:66:58:7e:fc:1a:45:28:17:72:c0:4b:41:b5:f7:15:7d:dc:
bd:00:7c:16:4a:7e:ef:14:e3:9a:3e:7e:86:53:33:cf:c2:89:
84:2b:12:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNlgJBt5wmDabDvjx3yn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2
NjAwYTYwHhcNMjYxMDAzMTAwMTQxWhcNMjYxMDA0MTAwMTQxWjAzMTEwLwYDVQQD
EyhkNTljNTY0MzY4N2Y4MDU2YWFiMzRjZWMwNWNhMmNiOGU4ZmY4ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxB+aKHpssWMLnrM/jJCS+Q5L+Ug
4wF/cD5Si5w68MHP60lZtP53ndc8I1a0D91h57zbzOAYbXJ903nxRu0EJgmTBrAo
syOR5Ao/Qcsj/MA2tAsr49S7M/FOESoVztXey/NlGCAsY4w3xHU1vZjAoyZlXuQK
SKr3ZWuxQPRC5aYJ3epvJwyIRDYtIL3txUiSES4fiYCwirtXJixXUHMAIrl5t4F8
+GK3mL3Liin5ZW0DLF7lTnIPvItt2A5AbEVLGHLh1zzCzuJDm4nktEWcWApKv6QE
6mQdcdOxhKbQYdQ30tdhF7S4DdC6WMG4G4HV+kB9wd7DnHllEuK+JbxJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWcVkNof4BWqrNM7AXKLLjo/4+zMB8GA1UdIwQY
MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt
MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0
LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQQDON6g
Z8pQnDP7iaXYOHEFnO7s/Z5hATD+k5ZV24tCU0lIBcpWfJAWoULIH5XCwY08Jmam
21b+WSoGIqp94ey58nvRMKOTTcvXv6iREUQtG5HxAhlFX6faXOQrSukHnmEpc+U8
JKjFpsih020ys0/12sc5Wztjy/TVi2k+H50DCQL4K+00XBiRefvsfCT3CZLHtM28
dSGkD53cUsj7VO06QyqP+yQWlVEhPEYY6bTLQwOBTOWnjK5nxfFlxmvVdzvwYEyl
R+IuqibQ/ufzNoOOvEFuSjDbNmZYfvwaRSgXcsBLQbX3FX3cvQB8Fkp+7xTjmj5+
hlMzz8KJhCsSzA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:42:48 2026 by rpki-client