Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: dTJCyZvv5yZHZpYZpnunWLDE67iCKP8xLoTn95Q0oTg=
Subject key identifier: E5:85:38:08:F6:00:B9:14:8A:3F:1B:A5:B8:EA:0B:14:A1:C1:0A:7A
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 01A0D87243A439C87CE880F372847D632A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 040E
Signing time: Fri 25 Sep 2026 12:02:42 +0000
Manifest this update: Fri 25 Sep 2026 12:02:42 +0000
Manifest next update: Sat 26 Sep 2026 12:02:42 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: 15KUsd0Q78Z5a5kaNekYfXX5Bku8yPxIlx0gMzZ1djc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:43:a4:39:c8:7c:e8:80:f3:72:84:7d:63:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Sep 25 12:02:42 2026 GMT
Not After : Sep 26 12:02:42 2026 GMT
Subject: CN=e5853808f600b9148a3f1ba5b8ea0b14a1c10a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:04:6f:2a:de:76:54:73:9f:8b:67:4f:2a:
a6:18:c6:7b:12:bd:8e:e6:7f:bc:de:c3:cf:cf:bb:
3c:2f:7f:8d:3c:93:d6:6c:7f:92:7e:28:34:4d:c5:
bb:ee:51:3b:7f:d1:0f:98:59:f8:76:7c:b0:7b:7b:
1c:8b:37:21:dc:c7:59:6b:98:6d:82:82:94:50:df:
ab:4e:3d:67:1f:b6:1b:ca:97:6e:e6:7c:5f:e8:ff:
50:9b:c6:b9:1c:bd:36:57:d2:0d:6e:d9:2b:aa:14:
5b:f2:e9:dc:c8:51:b1:33:3b:6e:89:a2:c9:52:c7:
17:40:5c:be:2a:eb:5e:74:90:c4:d0:b6:6c:1b:a9:
9d:28:ff:e7:5d:2b:6b:36:68:b8:84:7e:fd:25:4e:
ad:77:b5:d6:c6:2d:1c:8e:3d:dd:69:7f:d5:5c:ef:
39:97:7b:f2:cd:6f:4e:04:57:a6:08:f6:27:25:9a:
a8:92:61:92:56:3c:f7:49:9a:e7:36:b3:0c:48:1e:
e7:4a:bb:8e:d8:e4:29:dd:4e:87:b1:7d:ae:76:63:
b5:5e:e7:dc:43:5b:67:12:3d:e8:9a:19:82:2e:a1:
7e:c6:4d:5a:24:a7:24:26:5f:75:39:e7:5d:54:5e:
02:a5:df:45:33:76:50:ad:11:e5:1e:1c:1f:16:f0:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:38:08:F6:00:B9:14:8A:3F:1B:A5:B8:EA:0B:14:A1:C1:0A:7A
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:13:4b:42:62:2b:e6:6f:3c:77:47:2d:83:1c:11:1e:45:
95:fb:b7:fa:d2:86:fc:26:0e:54:3f:3c:4b:d5:09:e1:f6:ff:
a0:59:f4:56:93:b7:2c:a7:2a:25:82:76:b5:15:33:9a:fe:24:
32:03:d8:7f:c1:aa:28:d2:b7:d0:a6:d1:46:e3:f6:b2:10:56:
2c:ea:b6:9d:96:da:00:74:9b:df:c3:14:a6:54:5d:8c:80:20:
91:72:31:f7:4c:6c:25:d4:a7:ce:7b:9c:4a:d5:bb:4c:97:7f:
79:2d:2b:99:5d:16:d3:fc:9e:44:6d:b8:66:ca:b7:df:0d:09:
68:1f:d6:70:90:f0:08:19:dd:4b:15:44:19:f5:22:de:03:cf:
65:fb:b3:62:77:d8:33:f7:14:38:43:5a:c8:c6:6a:8c:76:55:
c1:53:e1:3f:1d:d9:d1:5e:e4:90:aa:69:9f:2c:58:4e:57:24:
ce:fd:50:7b:9c:15:c7:a4:a3:03:67:5b:4d:ef:b9:88:0a:5b:
0e:ce:ba:34:ab:91:2a:be:61:af:1f:74:56:63:8e:82:d5:39:
c7:b1:c7:f3:f3:6c:64:48:3a:ec:58:9b:77:6b:5e:92:17:b6:
51:5b:c6:72:20:2d:8a:44:67:0c:a8:2c:6c:79:a2:45:5e:31:
ee:2a:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:58:25 2026 by rpki-client