Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: soIwkmGpzrYQSiyx6CcZXti/fjk69Xcbwy2VDEvN00w=
Subject key identifier: BE:A8:61:D8:39:A2:E1:09:10:60:18:18:77:A1:2F:39:A6:C8:9F:53
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019F9436D0A58A3AE16973B9C6D01179E9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 190E
Signing time: Fri 24 Jul 2026 13:00:48 +0000
Manifest this update: Fri 24 Jul 2026 13:00:48 +0000
Manifest next update: Sat 25 Jul 2026 13:00:48 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: A4YdEYvLT+dAjTBSsqL0Fev5xywjFj73gh6m6p9a7Lo=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:d0:a5:8a:3a:e1:69:73:b9:c6:d0:11:79:e9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jul 24 13:00:48 2026 GMT
Not After : Jul 25 13:00:48 2026 GMT
Subject: CN=bea861d839a2e1091060181877a12f39a6c89f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:5d:c0:dd:5f:08:e5:18:4f:14:9a:16:b2:
68:81:15:fd:6f:1f:ab:f1:c4:c1:13:97:6f:df:44:
80:2e:7b:64:8a:7e:80:65:0d:17:47:f9:d5:a2:67:
dc:9e:d2:06:0e:91:a5:0b:e8:7f:94:53:b3:f9:e0:
49:08:d1:8e:66:a6:77:91:42:f3:98:8a:f5:5f:9c:
8f:99:3c:55:1e:58:35:b4:5d:df:d2:80:25:7b:77:
d2:c6:99:56:e9:72:d9:c7:ca:6a:75:32:c2:7d:15:
b6:54:4c:ef:ba:da:43:75:cf:98:18:c6:8b:2a:c1:
44:e9:7e:4d:0f:a1:47:c2:b8:62:48:c7:26:7c:ae:
0f:c5:13:9d:e4:8c:d6:8f:7d:2d:ab:45:c2:3f:b3:
30:7d:08:43:fc:7b:93:ad:8d:bd:6b:b9:3a:76:2e:
72:e3:64:d3:13:5e:bb:4b:90:61:fe:04:e3:4f:5e:
e8:8f:82:4f:3a:8b:76:b3:e5:55:47:e5:01:8e:ee:
fa:d7:03:3c:22:eb:e6:ea:49:d2:5a:4b:49:fd:0a:
cf:54:a9:3a:62:4e:26:ce:3b:f2:ea:23:07:70:8c:
81:c6:4c:e8:6c:87:6c:37:a8:13:d9:16:94:d0:65:
0f:fe:ff:35:01:c2:0e:05:db:86:02:f2:9f:b4:45:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:61:D8:39:A2:E1:09:10:60:18:18:77:A1:2F:39:A6:C8:9F:53
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:2c:ba:b9:14:7c:d3:bf:fa:8c:8c:ef:70:0c:af:f0:33:
8e:20:40:27:15:73:44:e2:96:61:c6:be:64:5e:8e:8d:86:b3:
55:67:e4:0d:fa:c1:a6:ac:1f:79:96:d3:c5:10:86:ee:11:26:
15:30:99:73:a6:11:1f:9b:de:9c:50:82:34:5f:d1:e2:ce:f8:
ec:5a:63:bc:24:69:06:72:78:5d:32:f5:67:fd:2f:0d:41:df:
aa:26:06:9a:7c:e3:de:e6:2b:31:69:c4:74:ef:c4:56:17:01:
7c:03:1f:44:68:29:e4:a4:96:7a:d8:ef:08:d3:36:3f:4d:9b:
51:b4:76:d2:41:b0:31:1b:d4:9d:52:17:b2:69:27:fb:31:d8:
f2:3d:1c:d8:78:8f:43:4d:f7:63:47:79:6d:a1:db:d3:65:09:
9c:e5:a1:15:4a:2e:6d:67:f8:03:a1:61:c2:7b:01:05:fa:10:
3a:a0:db:4a:64:0f:b5:37:d4:84:bc:ea:00:ce:2f:a0:a0:11:
19:50:a7:7b:17:3c:13:87:bc:ee:9a:e3:ff:8c:4e:31:70:66:
04:08:54:ff:42:a9:fa:b8:92:0a:f9:38:44:dc:89:b3:da:04:
89:38:5a:60:85:43:ab:cd:44:68:5d:c5:35:f1:01:0d:6b:92:
36:ea:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:12 2026 by rpki-client