Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: KCHo4IKrjh2+ookZOo0kp1bcxxqLn6evqotydXdZrfA=
Subject key identifier: 3A:E4:35:E7:DB:50:2C:77:C5:1D:75:7B:13:F1:22:4A:E0:44:B2:83
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01A0EDE64EE14E63C19813B71710205C8A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0C69
Signing time: Tue 29 Sep 2026 16:01:28 +0000
Manifest this update: Tue 29 Sep 2026 16:01:28 +0000
Manifest next update: Wed 30 Sep 2026 16:01:28 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: 4UWs6G7/XEnuw/zVI2soFJff97/PIunPxLFXcLcGW7I=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:4e:e1:4e:63:c1:98:13:b7:17:10:20:5c:8a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Sep 29 16:01:28 2026 GMT
Not After : Sep 30 16:01:28 2026 GMT
Subject: CN=3ae435e7db502c77c51d757b13f1224ae044b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:10:13:53:61:40:84:4e:37:d4:18:f0:45:
24:46:9b:c6:77:f2:c6:12:5c:f3:a0:f8:10:6e:fa:
af:db:87:87:7b:63:5e:7a:dd:4f:6d:30:03:9b:1c:
24:d9:67:24:48:86:61:2f:42:d3:4f:8d:65:10:43:
f8:dd:bc:85:dc:c2:4a:2e:1f:44:1f:ac:99:87:84:
84:41:5e:13:7d:cf:30:02:e3:90:b7:b5:a5:c4:fc:
ad:0d:f1:27:6d:f0:58:35:8e:7e:4f:a8:e4:52:31:
2e:8c:4a:d1:80:f4:0e:fc:c6:35:09:fc:af:14:5b:
fa:44:61:90:c9:61:1d:79:7b:fa:c2:8e:11:ea:53:
2b:3d:c7:b5:60:ab:93:1a:76:0e:62:63:e9:08:f0:
35:de:41:a4:0b:d4:af:cd:dc:66:22:07:cf:c8:ab:
b1:44:0c:a9:25:93:ac:53:30:f9:6e:7f:92:09:c3:
a7:c3:09:95:01:0d:69:51:4d:a4:e9:33:33:44:ec:
27:95:8e:25:1b:df:ed:ce:dd:57:22:1f:08:5d:aa:
0c:64:46:44:9f:70:ae:4a:cc:fa:d2:43:3f:10:a5:
bc:51:3c:a8:4f:41:aa:cb:88:a7:3d:9a:73:f4:cb:
76:8c:9b:39:45:24:60:52:29:f1:0f:8b:41:11:24:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E4:35:E7:DB:50:2C:77:C5:1D:75:7B:13:F1:22:4A:E0:44:B2:83
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:12:9b:13:b8:c0:92:1f:1e:6a:9a:60:2f:a1:ac:b0:be:
40:73:4b:f2:6e:18:1e:7f:db:69:3f:2e:47:db:8f:f9:54:c7:
78:e8:ad:c9:a1:a6:1a:06:92:d7:24:b4:b8:78:76:7d:e7:b8:
a7:46:a6:a5:b9:8a:68:46:e2:28:a5:68:cb:45:5d:ec:71:b6:
4a:64:11:a0:ce:3f:60:23:69:a5:3a:ef:09:c6:38:27:4e:30:
b9:ac:cf:93:5f:da:12:d5:d4:a7:0a:06:e6:a1:f9:a4:1f:1b:
49:60:73:cd:ce:6d:8a:e0:28:22:48:b1:7f:c1:93:7d:15:54:
36:c7:25:2a:1d:e5:f1:0a:51:54:3f:57:4c:d6:f8:23:51:a0:
58:e4:f8:16:5c:3c:a6:93:30:de:83:e7:bb:5d:e8:62:9a:ef:
d5:dc:58:4c:b9:1f:b6:05:44:b8:2c:8a:22:e2:74:3d:f8:88:
e5:71:d1:7c:38:3a:78:30:38:6f:1c:60:eb:c0:ed:b7:fa:d9:
54:82:3b:91:42:72:b6:22:3f:ad:c3:fd:81:ca:86:db:ce:e1:
9f:48:2c:bd:c0:97:a6:b6:f8:77:98:74:97:93:fd:2b:0a:a0:
71:c3:ee:04:2f:28:1b:79:cd:e7:18:98:72:bf:5d:c3:d8:a8:
d7:e1:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:34:01 2026 by rpki-client