Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: 4VN41YLiBLJl2dGjgAbE8ILmCnNXZZbc6g0+akpJi70=
Subject key identifier: 7C:5A:EF:AB:3C:E6:66:F2:25:4B:EE:7E:76:C2:09:5A:16:19:0D:7C
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019E1F47BEE89F0444FC495E3B91C765A73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 02A5
Signing time: Wed 13 May 2026 03:00:56 +0000
Manifest this update: Wed 13 May 2026 03:00:56 +0000
Manifest next update: Thu 14 May 2026 03:00:56 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: UvqxyINIhqAY9ubPky4Y1fm1o4gcKQbz2vrwjn/UE+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:be:e8:9f:04:44:fc:49:5e:3b:91:c7:65:a7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: May 13 03:00:56 2026 GMT
Not After : May 14 03:00:56 2026 GMT
Subject: CN=7c5aefab3ce666f2254bee7e76c2095a16190d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5a:2b:c0:38:b6:44:39:6d:b0:1a:ea:87:
15:3b:88:08:3c:f6:4d:4d:5d:ea:4d:6a:52:a4:e5:
e5:24:5c:2f:5e:07:7f:51:13:c7:ba:f3:3e:a3:1c:
39:af:a2:d5:1a:6a:d1:ac:37:f0:cd:3a:8f:f1:3b:
a1:a6:ab:5e:da:db:65:3d:9c:a8:56:59:4e:20:48:
1f:95:60:83:57:ec:aa:14:2c:4e:c3:c4:9f:09:fc:
c4:9a:10:4c:77:d2:34:60:72:25:b5:ed:c1:c3:58:
4e:67:58:fe:7d:05:8c:08:8a:a6:55:33:c2:68:cc:
57:5b:f1:e7:e7:37:a7:e4:09:63:fd:e9:48:ff:e5:
dd:b6:80:f1:75:e6:9f:23:44:86:dc:bc:6d:8f:e0:
6a:cf:2e:5c:3d:51:2f:fd:5d:cb:5c:98:29:b5:15:
1f:a1:ab:34:4e:90:40:b6:00:69:e0:50:6a:ac:34:
55:2a:b6:81:ca:56:cf:0d:0a:f8:72:ea:ea:69:a2:
68:72:99:07:4f:66:29:0f:1b:94:0b:46:5f:46:c4:
99:84:6c:9e:cd:02:59:51:32:de:89:f2:cf:a0:7e:
f0:68:44:f4:5c:6b:1e:59:96:6e:b9:eb:7d:01:98:
4c:3f:84:fd:8c:a3:4a:eb:b6:2a:69:9e:28:d5:92:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:EF:AB:3C:E6:66:F2:25:4B:EE:7E:76:C2:09:5A:16:19:0D:7C
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:f6:fb:71:16:9f:d9:58:1b:d1:d3:0d:66:cc:4e:c2:6f:
c6:0b:4b:cb:7f:5a:30:88:34:31:f5:75:73:05:30:af:8c:75:
b0:0a:13:93:07:93:6c:bc:3a:e6:be:0f:62:b5:10:f5:ac:cf:
cb:68:14:00:6f:97:38:4e:58:b5:73:5d:e7:64:c6:93:44:82:
f3:7f:ba:0a:99:49:5f:54:0b:f6:33:9f:89:c4:6c:a5:9d:6f:
cd:53:20:6c:2b:45:c3:6d:15:21:5d:b4:c2:8b:f3:9c:a5:5a:
0c:27:63:e9:5a:03:e2:70:f2:e6:97:ff:c4:ec:6e:fa:9a:63:
5a:26:ac:dc:02:0d:4a:e3:dc:9e:17:f4:ed:73:72:3a:80:73:
7b:32:b4:9d:41:24:6d:82:01:10:93:07:64:4e:f3:74:a0:52:
a8:9a:96:d9:ac:b1:72:6f:9b:89:e9:f2:6c:bd:36:8b:9a:95:
a9:59:89:0b:a3:fe:e2:ee:35:66:b9:28:a7:3e:ae:cc:b6:5a:
5f:9f:10:2e:10:72:3a:95:14:ec:9f:9d:af:9d:73:d9:15:aa:
c0:7f:e9:24:7b:e9:b5:b8:43:63:69:db:3b:17:76:a4:ef:af:
08:aa:ac:f0:43:a0:df:0f:ef:b3:6c:e0:f8:70:42:8f:bd:e6:
66:7e:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:55 2026 by rpki-client