
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: UDj3dp4Ue4W0etz+1cYlZrJJfQNnPyHiJfnrkltzOWg=
Subject key identifier: 83:50:D4:B4:09:44:56:BE:81:DE:60:A0:16:97:2B:F9:49:F5:FD:C3
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019E1F7F5EBA09B17549A470B081F751E769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 184D
Signing time: Wed 13 May 2026 04:01:41 +0000
Manifest this update: Wed 13 May 2026 04:01:41 +0000
Manifest next update: Thu 14 May 2026 04:01:41 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: pEhwyPb0MzDZojTVGHxZRt+21eQPjank2aX5IPxkFFc=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:5e:ba:09:b1:75:49:a4:70:b0:81:f7:51:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: May 13 04:01:41 2026 GMT
Not After : May 14 04:01:41 2026 GMT
Subject: CN=8350d4b4094456be81de60a016972bf949f5fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:99:d7:31:40:b5:8e:f0:f3:0a:53:81:38:
82:fa:13:4e:2f:77:e2:65:fa:33:c8:0a:38:3d:ba:
53:97:19:12:2b:df:19:9f:63:9b:71:06:2d:47:66:
57:ca:b6:93:a8:d8:11:7f:56:60:68:dc:46:fd:0b:
7d:39:e8:8a:c9:44:65:23:c7:90:7d:8c:50:c3:7c:
72:b3:1d:19:56:0d:1d:12:51:d7:47:b6:7e:a5:7c:
61:b6:74:c2:35:aa:d5:9c:03:a0:b7:5f:57:ad:16:
46:a7:87:8f:92:86:16:fe:e3:17:96:16:14:2e:51:
91:45:55:e8:92:d4:b1:32:6c:7b:d4:c6:96:eb:15:
f9:56:e1:fe:18:89:ea:a6:b7:bb:71:6e:64:86:97:
7a:62:45:4e:40:ce:d3:9d:ec:26:14:e6:89:44:b8:
25:69:eb:ae:d6:11:4c:6b:4a:ac:96:21:29:97:10:
bb:f2:94:34:e4:d5:bd:94:64:95:18:b7:e3:1b:3a:
fd:4b:6e:07:ef:b6:95:4a:dd:6b:81:7e:09:70:3f:
8d:23:e0:4c:8e:2f:9d:be:26:a8:03:00:19:ad:84:
80:00:23:30:5b:3e:39:ca:dd:6e:a8:7a:8f:f0:09:
cb:50:94:2b:bc:44:32:a5:93:5e:6c:d8:07:f5:c6:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:D4:B4:09:44:56:BE:81:DE:60:A0:16:97:2B:F9:49:F5:FD:C3
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d8:7d:a2:57:a7:52:6a:62:dd:70:0d:b2:5d:e3:32:db:45:
54:ff:a1:b3:67:ce:e7:4f:bf:4e:fb:e6:2b:de:54:84:7f:0c:
e6:e3:32:52:47:53:fe:d9:42:00:33:df:8e:ad:f0:10:9a:c6:
eb:6d:a6:ad:18:cd:e6:2b:d9:3d:09:01:c6:3d:d2:9c:17:87:
3f:00:bb:c1:bd:0e:8c:20:d5:b9:d4:b0:81:83:f1:50:0a:dc:
2c:62:ac:27:f2:3c:b8:dd:de:10:0c:36:c5:ac:f2:a7:46:fd:
72:de:8d:b9:0c:53:cc:55:4a:40:7f:8a:97:3b:ff:55:f9:3c:
61:fa:76:e4:dc:51:46:07:65:d9:d6:f0:46:1e:96:6c:1c:37:
1e:e1:a0:79:d9:7b:d8:8a:66:8b:68:71:dc:1e:86:93:3b:1c:
d9:1c:9f:47:70:2f:46:07:a4:76:49:32:75:3c:f6:f1:c0:54:
10:81:33:99:d7:29:81:5c:2f:12:2a:b9:8a:ae:b0:f2:2c:c7:
08:df:26:ae:4c:e4:6c:b8:87:55:75:40:ef:9f:3f:95:ca:d3:
a6:6c:00:1e:f1:94:ef:30:32:e4:ac:f2:d9:a3:c6:51:d0:d1:
3a:d6:08:e9:c1:3d:26:70:55:f6:87:0b:fa:94:89:11:58:8d:
3e:75:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:21 2026 by rpki-client