Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: AEVWlYJM1jyT9ovGGBhvKaZHP2ZniZUsQXPc2rz3Hx0=
Subject key identifier: 9A:72:D1:F9:F4:1C:85:6A:0B:C3:12:7C:A1:58:58:08:F3:E9:BA:FE
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019D28166BE2C95983D93601906A7C205563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 0225
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: hXWqD7/eJF1FSROxpNZ9I9U5IgMl/wqvlawLuEFfTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6b:e2:c9:59:83:d9:36:01:90:6a:7c:20:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=9a72d1f9f41c856a0bc3127ca1585808f3e9bafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:c5:1d:f5:49:a8:fd:e4:39:cc:d5:a0:ed:
cd:e8:2a:6c:0f:7b:29:44:ae:a8:b9:6b:b6:07:ab:
ce:fb:7e:15:11:dd:fa:48:8b:c5:d6:f4:81:df:87:
e1:d0:78:ac:5e:46:a8:c2:68:b7:d3:a9:b9:a8:bf:
42:80:aa:b0:20:75:8f:03:dc:87:2b:7d:10:5e:bc:
75:31:88:9d:8b:75:41:0e:51:f4:5e:b7:12:de:57:
e4:e1:28:83:e8:59:bd:24:b8:73:58:1d:e4:4d:71:
26:b7:de:d9:d5:7b:c3:ba:2b:e6:3f:25:94:7b:eb:
49:f4:30:93:09:78:d6:fe:58:87:6b:5a:73:7b:b2:
05:eb:52:5b:da:bc:a5:fc:57:b4:c0:f9:58:37:c3:
bc:b8:4a:f9:6d:09:68:d4:1e:ad:11:08:07:bc:9d:
00:43:3b:1c:5c:b6:30:9b:4b:39:96:1a:12:a5:19:
29:7c:fe:4e:7f:7e:6d:4f:a4:e9:81:85:a2:48:6a:
ad:4f:c8:44:e6:12:c0:3c:ca:29:9f:59:af:3e:28:
b0:72:c9:3a:bf:4d:7b:f4:28:ab:7f:ba:e4:21:2a:
d0:b6:0b:0a:d0:12:71:e9:c5:55:8b:2f:25:8f:70:
13:65:22:0e:88:91:84:64:2e:46:1b:1b:26:73:78:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:D1:F9:F4:1C:85:6A:0B:C3:12:7C:A1:58:58:08:F3:E9:BA:FE
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:b8:50:6b:25:9e:aa:73:35:d3:d0:52:5d:41:a9:5d:c8:
45:29:48:e9:1f:bb:50:eb:5d:8b:97:21:22:4f:44:b6:12:15:
3d:b6:74:3a:09:bb:0e:43:be:65:5f:0f:c8:d6:49:5b:50:72:
bd:ea:4a:87:bc:dd:83:a4:96:b7:9e:e6:50:ce:33:5b:ba:13:
b5:65:89:24:38:e3:60:17:d0:b2:3b:1f:32:a6:70:d8:7c:5d:
9d:b8:ee:ff:88:2b:74:23:8f:00:b3:ff:67:49:bd:78:d5:fb:
3a:e1:46:d8:22:79:0c:44:c0:0e:e1:8e:35:be:da:86:b6:1f:
8d:d4:21:81:3c:6e:7d:af:25:77:18:4c:6f:db:2e:ef:33:57:
b9:4b:82:38:55:34:95:5c:93:24:1d:47:48:57:8b:f5:1f:83:
87:a4:3d:28:e7:49:38:c1:5d:01:59:61:74:9d:2a:dc:27:c4:
32:30:22:17:7e:42:88:0a:be:70:33:f4:63:59:4b:fb:0d:3a:
60:19:0f:4d:de:fc:ec:04:d3:61:9d:e4:33:86:48:88:aa:86:
38:7b:43:14:8e:ce:e9:e4:0c:4b:5f:d2:42:9e:2d:88:c7:61:
13:fb:13:e2:f9:0f:b8:13:fc:10:13:bc:13:3f:1d:a9:1e:0a:
40:16:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:37 2026 by rpki-client