Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: ZBs7ue7nIUWslyH1qSHYZIKPHCIdCoTJxZcwCkH51+M=
Subject key identifier: 10:2A:2B:09:7E:B2:BA:8C:A0:83:67:C9:78:4D:AF:4A:DC:25:F2:CC
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019D2C2A6A9575E65DA642B6E2640F842C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 17CF
Signing time: Thu 26 Mar 2026 22:01:10 +0000
Manifest this update: Thu 26 Mar 2026 22:01:10 +0000
Manifest next update: Fri 27 Mar 2026 22:01:10 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: kiuoSWn7h+vceNlFp2IIrp5majhruLEnaKBJ3JlHpl0=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:6a:95:75:e6:5d:a6:42:b6:e2:64:0f:84:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Mar 26 22:01:10 2026 GMT
Not After : Mar 27 22:01:10 2026 GMT
Subject: CN=102a2b097eb2ba8ca08367c9784daf4adc25f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:c7:8f:de:c7:53:ba:9f:69:41:cc:26:8a:
80:2f:21:69:df:62:2f:c5:3a:78:17:f6:c4:87:7b:
d8:79:66:72:20:94:ab:33:a1:71:cf:d9:dc:d8:9c:
44:fc:1b:3d:9e:a0:41:a6:24:eb:f9:54:48:1f:c2:
31:64:b2:d1:67:bb:c9:47:a1:91:51:35:6b:1d:8a:
13:0b:0b:1d:f2:ba:9f:0c:eb:dd:82:6b:c5:56:c2:
81:f1:e4:6d:0a:d8:85:86:cc:6c:43:25:cb:63:bc:
d7:14:96:8c:04:26:85:56:f8:b5:36:5e:c8:fe:81:
03:bf:56:ea:a4:9a:ab:34:46:f4:b4:da:e9:c5:35:
99:ab:a1:aa:08:7a:df:6c:6b:6a:8a:b2:3a:d1:05:
05:82:5e:33:0e:77:e0:76:83:34:d1:a7:54:ec:3b:
da:92:15:41:45:35:71:1f:37:13:3a:4f:27:e9:cc:
43:c0:9c:f2:a4:f7:57:06:37:1c:9a:96:51:ef:f3:
5d:f6:2a:de:87:6c:20:cd:5a:fd:71:7c:9d:95:a2:
ea:c8:7d:d6:93:d7:de:82:d0:03:9c:97:ba:9b:18:
62:dc:21:21:00:88:e0:72:ae:d9:e4:6d:c0:47:8e:
8a:0d:5f:87:70:bd:dd:df:5a:80:5c:11:35:3d:4c:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:2B:09:7E:B2:BA:8C:A0:83:67:C9:78:4D:AF:4A:DC:25:F2:CC
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e6:0c:86:4e:86:47:d0:27:6c:14:80:9b:10:78:7b:2f:87:
1e:b7:12:fa:2b:ae:60:54:54:ea:63:13:1c:10:74:e8:74:cb:
b1:4f:22:bb:18:b4:91:99:03:c4:67:bd:23:9d:7a:42:88:25:
1a:7c:8a:a7:82:f4:90:46:a4:2f:e7:a8:d1:6f:c3:f6:6d:4a:
d3:5d:40:f3:15:e7:a4:99:a9:e6:ec:38:12:bd:07:de:53:26:
ff:91:9a:f2:07:da:53:bd:f6:3e:21:fa:6a:07:d3:d1:96:55:
d9:09:eb:12:26:cd:c2:2a:fd:41:59:73:3c:f5:67:c0:9f:c9:
2d:32:5f:54:b5:f6:63:7c:7a:40:85:31:c1:a1:31:84:c4:21:
d9:96:cb:92:00:89:24:55:43:47:ef:cb:9a:73:e1:e7:bb:76:
37:4b:03:57:ef:23:be:57:06:c7:de:20:f4:8d:8c:02:5a:04:
a8:15:c5:ac:63:a1:3d:dd:2d:2f:a5:29:3c:39:92:d5:2a:ea:
19:07:a7:76:9f:20:ca:04:8f:06:0c:9f:50:3f:6d:81:d9:77:
bf:e8:43:52:0d:2c:70:48:9a:5a:79:a5:22:8c:3f:59:ee:6c:
5a:62:96:81:4a:fe:9c:2d:7e:43:56:71:dc:9e:46:54:01:9c:
a2:72:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:35 2026 by rpki-client