Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: d6/4oGQV9Pxqc4kjgPnBaTgp4m20D6hp/2EIC7f6F7E=
Subject key identifier: AA:05:F0:BB:AE:39:56:91:6A:88:CA:99:74:B1:19:93:06:A3:EA:08
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 019E1D90AAD1788D339DB3921DDC9F2AF6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0AF4
Signing time: Tue 12 May 2026 19:01:20 +0000
Manifest this update: Tue 12 May 2026 19:01:20 +0000
Manifest next update: Wed 13 May 2026 19:01:20 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: vaDuRFiJ8wnioch5X5f7Od8fiKb4EXFLpgG5bauetr4=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:aa:d1:78:8d:33:9d:b3:92:1d:dc:9f:2a:f6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: May 12 19:01:20 2026 GMT
Not After : May 13 19:01:20 2026 GMT
Subject: CN=aa05f0bbae3956916a88ca9974b1199306a3ea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:99:e2:56:2a:e9:e9:28:b2:d7:6a:c6:f1:
f9:25:6a:12:5a:32:3b:6c:60:24:bf:ab:d0:e0:1a:
f2:1d:a4:d5:8b:f9:22:1b:5f:39:5f:aa:f8:6a:50:
e3:94:43:72:39:0f:13:9a:f9:bb:62:29:f3:9c:b3:
0d:72:fb:70:f1:9b:44:b8:10:18:11:9d:d7:82:3f:
76:8f:c8:70:df:14:06:93:01:cb:b1:e0:e2:95:29:
2d:1b:26:32:7d:20:48:f0:eb:56:64:c4:6e:9b:12:
28:a1:d1:49:08:7a:42:9c:d3:8e:27:4d:e5:1b:13:
10:34:71:9a:01:5f:8b:89:e1:a1:04:eb:87:16:2f:
19:98:c2:c9:89:66:31:10:b4:15:ff:4c:c9:25:2b:
5a:b6:25:b6:ef:c5:58:7d:45:f7:58:b9:eb:5a:9f:
cf:26:be:c2:9d:28:41:af:0b:09:30:8d:8b:de:01:
0e:2e:f5:1b:99:77:9c:4c:cf:f0:c3:13:cb:be:8b:
a5:99:6e:25:8f:86:00:94:97:98:1a:66:1a:40:a7:
23:c0:49:29:ac:ca:cb:66:2f:f8:71:02:72:c7:0d:
8f:33:0f:36:de:1a:b1:38:c0:92:35:85:51:40:f6:
03:35:2a:d6:c7:27:db:76:bd:39:d0:0b:9a:7b:94:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:F0:BB:AE:39:56:91:6A:88:CA:99:74:B1:19:93:06:A3:EA:08
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:d1:29:63:53:d4:65:a7:a2:e3:4e:11:83:ab:34:29:1e:
c7:90:7d:bc:57:da:aa:7c:9d:4c:42:1a:36:11:2a:7b:5f:42:
99:de:d5:67:32:58:61:96:dc:b9:1c:0f:4a:d6:49:e8:8a:75:
15:94:99:cb:84:05:34:b0:4e:8e:41:15:eb:52:88:5a:db:af:
53:48:db:8c:06:b8:6b:14:2b:a0:d2:ed:3e:31:47:b8:ae:26:
81:36:d6:67:f8:59:c5:48:81:3c:aa:aa:7c:dd:45:b4:20:c9:
ab:4e:72:16:04:9b:e5:6b:84:a4:d0:d3:59:96:d7:75:7c:2b:
22:76:39:8d:e9:54:32:13:81:bf:d3:4c:bd:20:c7:d4:e9:5b:
a0:fc:95:66:df:53:dc:21:c1:73:ac:1d:3a:1a:9a:3d:67:fb:
11:1c:88:76:0b:60:86:55:c5:c7:ff:74:cf:dc:48:9c:b6:91:
74:1c:5e:44:fa:ba:bc:6f:a3:9d:c1:04:14:42:fe:a8:67:21:
3c:56:25:74:d1:cb:71:ba:14:bb:c2:aa:cb:d8:10:0c:da:01:
e6:bf:5e:56:22:cb:d8:db:22:d5:af:78:71:5a:45:dd:2d:86:
ef:d6:64:43:ac:3c:e7:40:08:2d:16:91:fe:eb:3a:27:dc:68:
06:70:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:49 2026 by rpki-client