Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: /LQTZ/h+8vETHNTcHY2+c4YD9RT4zqmlyUkopu0VAGU=
Subject key identifier: BC:2B:31:49:EA:5D:A9:34:81:8B:02:4B:BD:3F:53:99:95:77:39:BF
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01A12A31A4ECCF36DC09D210D994167102E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 19E1
Signing time: Sun 11 Oct 2026 09:00:58 +0000
Manifest this update: Sun 11 Oct 2026 09:00:58 +0000
Manifest next update: Mon 12 Oct 2026 09:00:58 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: h860GhNcOUolwNyWzP52l1745AmDqiJxXzVp5wNZTs0=)
3: lUZbq53-e2beVUnIcCmk_r5xSWE.roa (hash: 3zeY9Wov3S/TjWt6YqkrG5O2fC3Yl7hArdx5k+jhibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:a4:ec:cf:36:dc:09:d2:10:d9:94:16:71:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Oct 11 09:00:58 2026 GMT
Not After : Oct 12 09:00:58 2026 GMT
Subject: CN=bc2b3149ea5da934818b024bbd3f5399957739bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:51:4b:64:c5:6e:5c:d0:c3:d8:ba:4d:aa:
66:14:2b:2f:7a:80:3b:fa:2a:c0:b4:92:58:d6:3f:
82:99:92:60:27:8c:80:8f:c8:27:d0:30:2e:7f:1d:
61:04:8a:5a:1f:6a:0b:79:31:a7:3b:d5:a0:0f:a0:
26:d0:68:d7:47:52:87:e2:bb:e2:de:88:3e:4f:ad:
1b:cc:5f:ef:2d:71:1f:d5:1c:e0:41:83:c4:b9:ef:
7d:0f:1d:72:39:54:0b:04:52:c3:58:19:e4:42:06:
d3:fc:95:ab:28:9f:47:ff:ec:02:07:02:50:bc:bd:
1e:7d:21:fa:b9:02:fc:a1:9c:23:65:14:c6:62:f4:
a4:af:05:4c:91:4e:fa:33:0b:a8:b8:25:57:df:ca:
dc:9e:9e:ed:5d:5e:b6:cf:72:b5:0c:45:1e:73:fa:
07:e9:e8:0d:c2:eb:6f:54:c1:35:99:4a:b4:98:25:
93:06:38:f9:b6:b9:bf:b1:4e:f1:24:b7:cc:9a:8d:
4d:94:65:1a:ca:9f:77:8f:0e:10:37:7e:c0:b4:55:
db:ed:c0:73:f2:5c:fc:c0:d1:7e:8f:49:7e:fc:71:
2b:fe:60:de:6d:5a:16:28:47:bf:d3:38:1e:a0:a9:
5c:c8:c4:f6:aa:70:5c:02:67:c2:2a:88:96:6a:e6:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:31:49:EA:5D:A9:34:81:8B:02:4B:BD:3F:53:99:95:77:39:BF
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:00:9a:ef:7b:2c:19:72:74:52:51:23:9a:ad:cb:c8:1c:
77:90:c4:a3:f7:76:75:e3:41:e1:e8:30:4e:4f:bc:6d:12:40:
f1:cc:41:54:da:a8:c9:af:4d:18:a2:c5:eb:fc:b5:72:4b:6d:
7c:e0:5f:02:0f:8f:2b:14:c3:42:b9:15:19:25:74:6d:05:08:
2e:b6:2f:61:c2:c9:6d:ab:8d:7b:4d:be:99:c4:f6:b1:14:9f:
05:2b:48:2a:4e:c5:2a:21:4e:80:b9:12:ff:29:8f:62:c6:76:
2f:6e:95:44:81:24:e5:1b:c4:3d:a0:5b:92:b1:2d:86:40:5f:
2c:7a:8b:61:d6:07:24:2c:7d:42:04:34:ee:5c:6a:b5:15:f7:
f3:80:c9:a1:0b:69:56:44:4c:15:39:51:44:6d:92:18:bc:93:
f2:45:b6:6d:ee:b1:ec:72:5f:39:08:15:69:64:a8:bf:33:d8:
ba:7e:e4:d9:f0:9b:80:13:31:4c:9a:d1:47:8b:99:61:4a:a0:
cb:2f:3f:56:82:1b:9a:e1:19:3b:51:82:4e:c3:b4:14:5b:ca:
ac:f2:3c:67:ec:82:14:f8:bd:fb:c4:1b:cb:ad:65:08:84:f1:
35:41:c9:18:6d:65:48:8a:f9:58:ab:d1:ee:ef:96:24:f9:4b:
37:6a:b3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqMaTszzbcCdIQ2ZQWcQLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm
OWFhMzcwHhcNMjYxMDExMDkwMDU4WhcNMjYxMDEyMDkwMDU4WjAzMTEwLwYDVQQD
EyhiYzJiMzE0OWVhNWRhOTM0ODE4YjAyNGJiZDNmNTM5OTk1NzczOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41hRS2TFblzQw9i6TapmFCsveoA7
+irAtJJY1j+CmZJgJ4yAj8gn0DAufx1hBIpaH2oLeTGnO9WgD6Am0GjXR1KH4rvi
3og+T60bzF/vLXEf1RzgQYPEue99Dx1yOVQLBFLDWBnkQgbT/JWrKJ9H/+wCBwJQ
vL0efSH6uQL8oZwjZRTGYvSkrwVMkU76MwuouCVX38rcnp7tXV62z3K1DEUec/oH
6egNwutvVME1mUq0mCWTBjj5trm/sU7xJLfMmo1NlGUayp93jw4QN37AtFXb7cBz
8lz8wNF+j0l+/HEr/mDebVoWKEe/0zgeoKlcyMT2qnBcAmfCKoiWauaDGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwrMUnqXak0gYsCS70/U5mVdzm/MB8GA1UdIwQY
MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt
ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4
LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQYAmu97
LBlydFJRI5qty8gcd5DEo/d2deNB4egwTk+8bRJA8cxBVNqoya9NGKLF6/y1cktt
fOBfAg+PKxTDQrkVGSV0bQUILrYvYcLJbauNe02+mcT2sRSfBStIKk7FKiFOgLkS
/ymPYsZ2L26VRIEk5RvEPaBbkrEthkBfLHqLYdYHJCx9QgQ07lxqtRX384DJoQtp
VkRMFTlRRG2SGLyT8kW2be6x7HJfOQgVaWSovzPYun7k2fCbgBMxTJrRR4uZYUqg
yy8/VoIbmuEZO1GCTsO0FFvKrPI8Z+yCFPi9+8Qby61lCITxNUHJGG1lSIr5WKvR
7u+WJPlLN2qz6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:20:20 2026 by rpki-client