Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: zF/LD3kGP1/084eN1E5Ly00n2ShbhLZ8YeE8bKl4Jas=
Subject key identifier: 6A:6C:F9:A2:5F:F7:1D:E0:F4:E3:D1:4E:59:7B:C0:37:77:CE:CD:0D
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 019D269662251EB30FE4812E1B455403F1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1464
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (hash: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: LfZcy5bQUqwh6QYqKtrXlHPGtOLxtIcrzjB8WVNhf70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:62:25:1e:b3:0f:e4:81:2e:1b:45:54:03:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=6a6cf9a25ff71de0f4e3d14e597bc03777cecd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:b4:40:cb:a9:3a:80:23:97:3c:d7:70:ef:
7c:ed:2d:34:8a:e8:86:eb:17:ef:2d:32:d9:92:b5:
56:b3:8c:2a:ed:a7:bf:a9:5f:b6:91:4a:1b:37:d4:
4b:4f:90:54:50:1a:00:f2:b2:c1:5c:7d:4e:72:09:
cd:f8:3c:af:c2:fe:4e:4b:ff:b3:93:07:f0:f9:36:
bd:65:5e:2d:4f:15:82:51:65:28:ec:8e:69:83:c6:
22:c1:29:1f:a3:2b:37:25:76:c5:bb:dc:9f:d6:74:
88:b9:25:b5:be:f7:df:e1:8f:f3:a3:a5:fe:02:50:
fa:9a:06:09:3d:7b:37:9f:25:88:22:1d:33:bc:05:
32:4c:51:ca:23:68:81:c1:70:d6:18:b6:e1:25:be:
b7:4b:db:89:1d:ad:8b:19:d6:68:98:51:19:4a:9d:
e4:ea:ae:f8:59:ca:bc:5a:35:fd:ab:ec:95:b4:24:
41:06:fd:ec:17:7e:20:d3:c6:04:40:f2:1d:79:0e:
30:e7:e5:bd:16:72:c1:bc:d3:3e:c7:87:42:15:91:
6d:7a:ed:81:5f:3c:50:b8:cc:77:cf:8b:b8:1d:83:
52:4c:68:81:74:55:f3:3e:a2:22:8e:61:0e:94:22:
28:5d:54:e2:8b:4f:f7:7a:57:04:bd:89:a7:99:84:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:F9:A2:5F:F7:1D:E0:F4:E3:D1:4E:59:7B:C0:37:77:CE:CD:0D
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fa:f7:60:08:cf:52:1a:3c:fd:90:84:18:a5:5c:a8:79:48:
d0:01:4d:28:28:f3:26:70:2a:c6:cd:52:50:d1:96:4a:14:41:
61:df:5b:cc:63:f2:dd:f0:94:f9:73:18:ec:db:c4:60:2a:22:
ba:4b:0d:f1:c3:91:8d:54:bd:2b:8e:bf:00:0a:99:72:02:6e:
b8:41:70:13:97:ab:cf:83:fd:d7:c5:bf:0a:fd:74:fe:eb:24:
1a:4c:bf:cb:21:7c:c2:23:6a:8d:5b:55:34:be:7f:b4:bc:40:
d4:1e:51:5a:fc:60:81:2e:16:8d:5e:a1:37:3a:02:7c:69:ed:
33:ba:78:f0:0f:70:e9:3b:a0:fa:0e:a4:88:ca:73:d2:ba:1a:
f2:fc:cd:e7:f0:5a:6b:8c:67:1d:cd:67:9b:e2:02:d4:b3:51:
13:a3:9f:4a:0d:88:5b:92:72:1d:18:6f:79:0d:bf:2e:6f:e9:
54:f0:5b:1a:79:c6:13:e5:05:99:6b:b5:b9:e1:6d:db:62:67:
b2:53:f0:0c:44:87:15:17:2d:c5:56:42:68:cc:d4:67:eb:f0:
38:f6:2f:88:1b:d3:67:ae:ce:36:ce:1b:6f:95:1e:1a:a4:47:
d4:5d:80:00:b3:95:67:c0:47:a8:1f:00:fc:29:b0:90:7d:22:
9a:67:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:16 2026 by rpki-client