Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier: gITTCB8AOUjav0VjdRIroeGdKQUZlm5RU8WDShfazfk=
Subject key identifier: 52:C9:49:C9:F6:53:FC:45:EA:D2:5D:03:39:63:51:73:9A:FD:53:65
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 019D284D5FCF82D43BD13D3184A0D89E01E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number: 0A75
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: 8R7CuKR/fg2O5sj7AzjRNVYBpg8XkZM07rsCtOVtnCs=)
3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5f:cf:82:d4:3b:d1:3d:31:84:a0:d8:9e:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=52c949c9f653fc45ead25d03396351739afd5365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:97:00:5d:ca:bc:50:45:db:e6:06:b8:19:
f1:29:9b:cd:77:32:7b:49:ff:ca:7c:26:b7:de:b0:
13:1e:c9:72:56:d8:44:91:dc:de:75:47:c8:06:59:
c3:d9:ad:0c:ee:a7:b0:ed:ff:5c:d5:30:62:bf:dc:
17:3b:74:7e:b4:0b:74:61:e5:c3:1c:37:94:05:86:
76:14:bd:6b:67:f0:24:7a:2b:dc:bc:82:e1:9c:89:
69:d6:93:df:59:d7:b1:5e:cd:76:bc:47:57:88:dc:
0a:0c:ed:2a:08:74:7b:e0:09:40:e2:88:b4:de:c2:
da:a0:26:88:60:40:ab:c9:2e:31:31:60:b9:41:a8:
a2:92:e9:80:cc:61:05:28:1e:29:9b:a6:80:75:e9:
05:f3:31:93:d9:92:50:26:39:1c:50:1f:40:ba:88:
ca:6e:c0:ef:41:d4:18:a3:3d:35:be:a5:24:72:9b:
ee:fa:02:a8:6b:89:34:6a:5d:db:8d:34:e3:e4:f2:
89:23:42:22:10:37:7f:f0:f8:b8:67:c5:16:55:1b:
48:f0:ae:38:6d:31:cb:e2:e2:b6:8c:8b:af:57:2c:
1c:78:bb:f0:08:74:8b:9d:81:0e:74:a3:3f:14:7e:
f7:6a:79:aa:14:e4:39:5d:61:c7:b4:91:70:c3:20:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:49:C9:F6:53:FC:45:EA:D2:5D:03:39:63:51:73:9A:FD:53:65
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ed:dc:eb:6f:c1:de:18:88:68:43:8a:bb:e6:c3:14:00:69:
a5:cb:d8:db:d9:59:0e:44:e3:ea:1d:6c:69:79:c6:7a:08:70:
54:38:41:04:7f:9c:ac:bf:ea:b3:84:f6:bb:3c:30:df:aa:9c:
45:8a:c4:c3:61:f4:e1:bd:63:5f:d8:5d:02:2f:55:93:08:af:
90:2d:0f:82:d7:cc:ce:41:00:b1:ac:cd:7e:50:31:e0:a8:7a:
01:52:4e:90:27:09:7c:5f:61:aa:d5:e6:c9:d5:3e:50:3c:57:
00:ed:4c:76:59:cf:ab:9d:bc:6f:12:26:ef:cf:b7:82:c7:a1:
96:e1:c7:c4:bf:95:a4:d1:e0:20:4b:64:3b:fa:41:92:c9:3b:
cd:2b:4f:26:34:b2:2e:28:08:f6:d7:ea:31:46:46:b3:29:95:
fc:4e:76:75:75:27:1e:33:ed:50:66:06:48:f7:a2:df:d2:91:
d4:c8:ac:26:62:94:06:d9:d9:62:46:3d:a7:42:b5:fc:68:d5:
12:d3:04:cc:09:7f:f7:67:0c:60:01:8e:a0:77:8b:a6:b6:8c:
42:aa:ac:1b:60:29:29:58:e2:dc:62:79:a2:89:2f:51:83:c3:
45:53:78:ff:cd:f8:ff:25:17:f4:a7:aa:ce:dc:0a:ba:ee:24:
e9:57:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:53 2026 by rpki-client