Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: avD/Bq7eKMxcluJbIqxYAExIcaMzl8lnGLhoW16zcAw=
Subject key identifier: 2D:AF:11:F5:BC:B5:38:AC:08:CB:54:D2:40:31:D2:BE:5E:4A:27:33
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019F93FF674B5F2A18F9B30F1EC1E2CB6A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0366
Signing time: Fri 24 Jul 2026 12:00:16 +0000
Manifest this update: Fri 24 Jul 2026 12:00:16 +0000
Manifest next update: Sat 25 Jul 2026 12:00:16 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: PjH31thaOsFl22P6XYJjdbuWwvuY/xQI0vvQ/PSMERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:67:4b:5f:2a:18:f9:b3:0f:1e:c1:e2:cb:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Jul 24 12:00:16 2026 GMT
Not After : Jul 25 12:00:16 2026 GMT
Subject: CN=2daf11f5bcb538ac08cb54d24031d2be5e4a2733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:21:f0:4a:18:ef:2c:8b:52:72:34:fe:de:
94:89:c3:29:31:9d:79:80:ad:b3:f8:70:04:89:89:
0c:8b:68:0c:c3:aa:81:35:7f:cd:a3:11:62:96:e4:
8f:a6:94:4e:6a:97:46:ba:b5:f7:3c:a9:7e:91:37:
79:e3:ad:1f:df:73:cf:10:65:00:8f:c8:13:06:98:
be:61:0b:61:b8:ef:3a:3e:a6:65:55:bc:91:49:56:
f1:6c:04:9b:23:da:94:88:c6:65:61:21:c6:93:94:
13:89:1f:a2:1f:4b:60:3f:f8:34:fc:b7:c3:bf:d1:
22:03:f0:1b:69:86:f5:b7:68:40:9d:3a:65:57:1c:
90:98:da:63:6a:2a:2c:8b:a7:02:9e:84:fa:18:87:
1e:37:f3:f3:d8:b1:08:52:63:ec:9b:e1:31:fb:52:
f1:ac:d2:c9:36:bd:06:2c:9e:c7:46:72:6f:2c:c0:
89:9a:ba:6e:70:c9:83:48:c3:ef:62:99:7e:ea:da:
cb:c5:82:7a:d7:bd:d7:a1:9f:ac:4d:5a:da:90:2a:
eb:80:24:57:89:4b:66:45:e4:2c:df:9f:53:35:b4:
0c:b5:9d:53:0c:75:ca:d5:20:5f:8d:42:77:1e:db:
bf:61:3e:08:34:31:8a:25:7b:93:9a:40:7f:c6:23:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:11:F5:BC:B5:38:AC:08:CB:54:D2:40:31:D2:BE:5E:4A:27:33
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:99:60:fc:2d:5f:aa:38:ac:39:b5:6a:1e:2e:ed:77:6a:da:
c8:f4:f0:ac:83:a1:64:39:6d:fe:6c:18:47:43:e4:d5:dd:52:
c2:b7:a7:09:2f:da:ec:28:e5:5c:28:1d:6a:9d:f5:fe:2b:0e:
c2:03:c0:c8:d2:72:5d:d8:93:66:6a:d3:49:24:de:72:9e:0a:
4d:e5:f7:4d:97:c6:cd:b1:39:20:21:0a:1e:fc:fa:3e:ad:75:
2b:8a:5f:12:88:75:ed:54:77:0f:ac:97:e4:b3:ca:8e:22:c4:
c3:53:28:86:be:97:6c:01:8f:9e:09:64:15:83:27:66:a9:c5:
f3:1d:08:a1:63:5c:dd:35:2b:f7:96:13:19:28:03:c6:d6:89:
dd:9b:d5:5e:34:8c:e1:64:50:f2:10:a2:26:e6:bf:45:5d:f8:
4a:0c:4a:8e:47:c0:a6:85:a0:0b:76:f7:4c:16:7b:2e:32:c7:
a0:b6:dd:0a:e4:ed:f7:4d:62:24:6d:46:ca:c7:24:40:38:ed:
b8:fb:0b:1d:d2:14:c1:34:fa:24:bd:83:cf:b6:8b:03:5e:3d:
09:85:61:e4:ff:24:c0:e8:df:f9:cc:ae:da:f0:f6:3b:d0:8c:
6f:c0:5e:c4:df:7e:7b:9f:94:91:c1:1a:6a:19:c2:24:76:63:
ec:5c:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:05 2026 by rpki-client