Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: 65QDK79fOQjFiFI3YNzN/zkecMMjZ77LjVs+CAxDlUM=
Subject key identifier: 8E:F5:AA:B2:FC:FE:C9:56:BB:F9:CF:78:CD:CA:2D:81:2E:EA:47:D5
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019D281655DC169992593A3C276E782E0352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0E21
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: 7hmJknF3g0jZ2PzjgnEt6tkUwkk.roa (hash: 0kxSwLIeU1LRwwQYmR17mV6US+bp2NYwjzNIshTtU+0=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: Ki04KVkw+BcCiTNeCY5JxB8vdOURBHF3/Omm3S8iFd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:55:dc:16:99:92:59:3a:3c:27:6e:78:2e:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=8ef5aab2fcfec956bbf9cf78cdca2d812eea47d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:99:17:29:db:ce:f9:89:c4:92:3c:c5:22:
4c:15:d0:c8:ad:e5:66:b3:20:b1:2b:4b:18:d4:42:
1a:93:46:50:5c:0a:7a:b8:3f:cc:df:46:f1:16:28:
50:26:33:cf:a4:c6:08:41:8c:fa:91:8f:ea:9d:71:
16:ef:07:51:c5:23:eb:c8:b3:db:83:53:19:cc:af:
71:df:26:e1:2d:f3:76:42:32:7c:e9:a8:e1:fe:ae:
1e:dc:d4:cb:af:3f:7b:e1:20:1d:1d:d7:a3:21:e1:
84:3e:ac:6d:29:1a:9b:ba:b0:fa:f3:b1:a8:ad:70:
b6:34:ef:da:a9:be:45:86:b8:b1:87:06:57:f5:bd:
87:e0:08:3c:e2:be:83:14:56:19:42:ea:2e:c8:9e:
bb:ca:be:9e:6d:31:3a:92:32:3d:5f:f0:bf:d4:88:
c4:61:9a:9c:1d:68:a6:c4:35:ac:ed:8c:f2:cd:ab:
ab:45:d3:f3:45:9e:d9:b9:10:ad:98:75:30:5e:59:
a3:bb:b8:94:18:62:f0:36:ca:f7:08:67:ea:87:3a:
49:08:ad:c4:69:ca:9c:33:ac:9c:59:c6:ad:71:62:
39:86:36:98:c4:72:01:8f:71:f9:ba:6e:f9:22:1e:
17:6d:8f:e0:06:b9:be:4c:37:9e:9b:2a:b2:fd:89:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:AA:B2:FC:FE:C9:56:BB:F9:CF:78:CD:CA:2D:81:2E:EA:47:D5
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:a0:65:58:a1:87:c6:17:a9:7e:0d:03:24:d0:01:a3:e6:
3d:f8:a8:39:88:47:5e:f5:d3:d7:2e:5f:7e:a3:1c:d6:56:7f:
39:33:1d:d5:d2:ff:24:a7:80:3c:53:5d:18:bb:7a:c8:64:b9:
ac:fb:16:85:40:18:8e:8f:4b:b4:7d:29:7f:bb:f5:d0:e4:c2:
88:17:cd:38:2e:df:8a:7b:6e:85:65:84:90:e5:91:60:93:a9:
c3:74:1f:36:ec:6f:b3:31:fb:29:9f:99:b4:d1:72:36:54:b7:
67:04:2c:39:6a:44:0d:8c:70:74:0f:57:9a:71:89:e1:2a:5f:
ca:2b:39:ed:fa:31:09:13:c0:c8:84:e7:d5:35:ba:0b:b7:e2:
5d:d7:02:d3:31:ba:92:4e:38:7f:c7:90:8f:25:1e:cd:f9:f5:
72:69:cf:99:5a:2f:bc:27:54:0d:fd:97:bf:16:c3:d9:93:6a:
4b:e8:40:36:34:63:c1:f2:9e:d8:b3:52:3d:b1:a7:c5:d9:57:
9b:f0:8d:40:4e:d2:75:0c:68:67:3c:c4:0e:5d:47:5c:3a:56:
b8:2d:43:41:d0:96:b8:0e:0c:58:57:41:ad:93:8f:97:30:78:
2e:e7:f3:eb:bb:4f:26:f6:0d:23:a3:5f:f6:32:e1:41:c3:e5:
f4:b3:e6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlXcFpmSWTo8J254LgNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjYwMzI2MDMwMDQ1WhcNMjYwMzI3MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZWY1YWFiMmZjZmVjOTU2YmJmOWNmNzhjZGNhMmQ4MTJlZWE0N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eKZFynbzvmJxJI8xSJMFdDIreVm
syCxK0sY1EIak0ZQXAp6uD/M30bxFihQJjPPpMYIQYz6kY/qnXEW7wdRxSPryLPb
g1MZzK9x3ybhLfN2QjJ86ajh/q4e3NTLrz974SAdHdejIeGEPqxtKRqburD687Go
rXC2NO/aqb5FhrixhwZX9b2H4Ag84r6DFFYZQuouyJ67yr6ebTE6kjI9X/C/1IjE
YZqcHWimxDWs7YzyzaurRdPzRZ7ZuRCtmHUwXlmju7iUGGLwNsr3CGfqhzpJCK3E
acqcM6ycWcatcWI5hjaYxHIBj3H5um75Ih4XbY/gBrm+TDeemyqy/Yk6dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI71qrL8/slWu/nPeM3KLYEu6kfVMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPqgZVih
h8YXqX4NAyTQAaPmPfioOYhHXvXT1y5ffqMc1lZ/OTMd1dL/JKeAPFNdGLt6yGS5
rPsWhUAYjo9LtH0pf7v10OTCiBfNOC7fintuhWWEkOWRYJOpw3QfNuxvszH7KZ+Z
tNFyNlS3ZwQsOWpEDYxwdA9XmnGJ4Spfyis57foxCRPAyITn1TW6C7fiXdcC0zG6
kk44f8eQjyUezfn1cmnPmVovvCdUDf2XvxbD2ZNqS+hANjRjwfKe2LNSPbGnxdlX
m/CNQE7SdQxoZzzEDl1HXDpWuC1DQdCWuA4MWFdBrZOPlzB4Lufz67tPJvYNI6Nf
9jLhQcPl9LPmbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:29 2026 by rpki-client