Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
File: iT19gAU9AYpRb_UWSNFp8DjIlyo.mft (raw, json)
Hash identifier: dRpDU9jjcJp9rJbxpCD62I9JZDof7qZKe/Sa9EISND8=
Subject key identifier: 28:F1:1A:00:8E:C5:D2:F9:B8:A4:54:8D:D1:51:62:8B:D1:44:0A:A3
Authority key identifier: 89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A
Certificate issuer: /CN=893d7d80053d018a516ff51648d169f038c8972a
Certificate serial: 019D27724FED28C7613172ED06DDED57BC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
Manifest number: 7D
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: iT19gAU9AYpRb_UWSNFp8DjIlyo.crl (hash: UTP12uU63OOz9k6jK38h0thXjf/IgEWnDRoUeIlHpIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4f:ed:28:c7:61:31:72:ed:06:dd:ed:57:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893d7d80053d018a516ff51648d169f038c8972a
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=28f11a008ec5d2f9b8a4548dd151628bd1440aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:8d:ca:98:b1:68:4b:85:ce:a5:e3:21:d5:
29:8b:cb:65:00:c8:f9:f6:54:11:6a:44:bc:3a:bc:
18:73:0a:08:67:e0:8c:da:db:12:b2:7c:84:b0:3a:
e9:72:01:0d:a9:92:bf:ac:04:17:8d:bc:9c:aa:08:
45:6f:81:db:ee:c2:1f:80:59:c3:8a:3f:45:e1:62:
1c:b1:1a:92:78:4c:e7:2d:bc:d5:21:33:aa:c6:55:
a6:81:85:db:49:be:fe:6a:1d:ce:88:99:a5:21:df:
93:da:40:ee:20:1b:b3:af:f9:65:01:77:18:54:f3:
8f:53:4b:03:8b:95:b8:8c:6c:66:3a:b0:6c:d4:70:
fb:49:d1:64:b2:93:37:dc:cc:f6:96:71:6b:c5:50:
66:c5:7f:8e:4a:c2:a3:f6:73:59:e8:a3:ac:75:64:
d4:c1:b6:a3:6b:ef:67:01:cf:02:21:96:40:2f:a8:
4f:15:c9:98:8f:72:da:f0:a0:ae:49:3d:37:c3:a5:
7d:bd:3f:e7:f8:3b:8b:49:95:5e:18:04:22:be:dd:
6f:85:af:bb:17:b6:e5:fa:b6:13:c0:89:5d:e0:7f:
7d:56:b3:c7:29:af:9b:20:28:bd:3b:74:c6:9f:cd:
62:c6:5e:bc:7b:63:d2:eb:71:1f:e6:a5:58:2d:e1:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:1A:00:8E:C5:D2:F9:B8:A4:54:8D:D1:51:62:8B:D1:44:0A:A3
X509v3 Authority Key Identifier:
keyid:89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:59:3c:c1:df:b5:a4:d1:ed:7d:f7:68:cc:25:6a:2c:9d:9c:
6b:6c:14:80:58:e1:0a:fd:f5:1f:2f:b8:9c:28:a7:1a:48:16:
cd:25:3f:f3:54:95:f8:4a:36:30:06:27:58:c6:6a:3f:c0:76:
78:86:a9:ed:64:1c:16:9c:c0:cd:c4:86:d4:ea:3b:6a:a1:7f:
9b:18:d1:58:d6:52:9a:28:e6:74:ef:7f:66:7b:85:5d:93:d3:
aa:fd:63:6c:d3:af:c9:60:08:1b:8a:60:c8:3d:b2:42:6f:9a:
a6:6d:90:8c:3f:8b:ae:a0:df:6a:22:60:c5:70:67:9b:54:da:
cd:a8:1e:ed:62:88:4e:58:31:d9:32:07:76:06:65:0e:3a:3f:
79:7d:c8:5b:96:87:40:80:a3:ed:b0:d5:97:cf:b1:0a:c5:ad:
39:6b:1a:f6:07:cb:c2:9e:a0:09:06:e1:01:82:1c:7e:e6:f6:
64:c3:bb:0a:3c:b1:ee:41:69:a9:ce:d8:90:61:2d:0b:87:94:
47:3c:e6:e4:22:5b:f4:de:e6:1e:70:35:a0:da:4a:7b:08:53:
fc:50:87:0a:75:90:7b:e0:ab:8b:02:4a:f6:a5:76:85:0b:59:
46:a8:05:d6:a7:47:6b:44:b8:67:4b:fc:69:ff:1a:0b:1d:8b:
dd:a5:a6:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck/tKMdhMXLtBt3tV7xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2Q3ZDgwMDUzZDAxOGE1MTZmZjUxNjQ4ZDE2OWYwMzhj
ODk3MmEwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EygyOGYxMWEwMDhlYzVkMmY5YjhhNDU0OGRkMTUxNjI4YmQxNDQwYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKNypixaEuFzqXjIdUpi8tlAMj5
9lQRakS8OrwYcwoIZ+CM2tsSsnyEsDrpcgENqZK/rAQXjbycqghFb4Hb7sIfgFnD
ij9F4WIcsRqSeEznLbzVITOqxlWmgYXbSb7+ah3OiJmlId+T2kDuIBuzr/llAXcY
VPOPU0sDi5W4jGxmOrBs1HD7SdFkspM33Mz2lnFrxVBmxX+OSsKj9nNZ6KOsdWTU
wbaja+9nAc8CIZZAL6hPFcmYj3La8KCuST03w6V9vT/n+DuLSZVeGAQivt1vha+7
F7bl+rYTwIld4H99VrPHKa+bICi9O3TGn81ixl68e2PS63Ef5qVYLeGqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjxGgCOxdL5uKRUjdFRYovRRAqjMB8GA1UdIwQY
MBaAFIk9fYAFPQGKUW/1FkjRafA4yJcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84MjA5ODgtZmIwZC00MGJhLTgyNzIt
MzIxMDMzYWE2MzQ4LzEvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84MjA5ODgtZmIwZC00MGJhLTgyNzItMzIxMDMzYWE2MzQ4
LzEvaVQxOWdBVTlBWXBSYl9VV1NORnA4RGpJbHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7Fk8wd+1
pNHtffdozCVqLJ2ca2wUgFjhCv31Hy+4nCinGkgWzSU/81SV+Eo2MAYnWMZqP8B2
eIap7WQcFpzAzcSG1Oo7aqF/mxjRWNZSmijmdO9/ZnuFXZPTqv1jbNOvyWAIG4pg
yD2yQm+apm2QjD+LrqDfaiJgxXBnm1Tazage7WKITlgx2TIHdgZlDjo/eX3IW5aH
QICj7bDVl8+xCsWtOWsa9gfLwp6gCQbhAYIcfub2ZMO7Cjyx7kFpqc7YkGEtC4eU
Rzzm5CJb9N7mHnA1oNpKewhT/FCHCnWQe+CriwJK9qV2hQtZRqgF1qdHa0S4Z0v8
af8aCx2L3aWmKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:53 2026 by rpki-client