Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: itTQ+F8aXArC8fJj+lI8iactgg2qSCm8xkjhlrAo3TY=
Subject key identifier: E5:5A:16:AC:C2:F1:A2:14:35:04:01:EE:AE:F2:1E:BD:DD:45:A9:CC
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019F924901EDB7ED59506EF660C31223AB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:01:25 +0000
Manifest this update: Fri 24 Jul 2026 04:01:25 +0000
Manifest next update: Sat 25 Jul 2026 04:01:25 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: ngSnKrNR+PDvjZYHgtAlIMDjdknadXpJ9+pgZdC+6xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:01:ed:b7:ed:59:50:6e:f6:60:c3:12:23:ab:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Jul 24 04:01:25 2026 GMT
Not After : Jul 25 04:01:25 2026 GMT
Subject: CN=e55a16acc2f1a214350401eeaef21ebddd45a9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:fc:10:8f:b5:38:24:11:01:1b:0f:bc:23:
c2:0a:74:91:b4:77:06:73:8b:6b:00:fe:a5:e3:ca:
82:d8:84:74:2c:73:ce:c9:54:02:cb:a7:39:82:c1:
30:40:82:78:e3:56:04:25:f7:8e:47:54:02:c3:a2:
82:bd:83:01:ca:21:89:a4:8f:a8:f3:25:4f:5b:8c:
db:b9:ba:d5:69:72:fb:93:99:3c:1c:53:c2:9e:ba:
44:9e:af:6a:53:8b:94:d1:e3:25:46:e0:43:e0:15:
40:a5:aa:a9:83:b0:b7:4a:24:a4:a1:5b:7b:5a:9a:
81:82:3b:68:b7:2c:c8:34:67:59:0f:0c:51:9e:0e:
af:8e:7f:69:51:a8:4c:eb:fe:f4:96:30:78:8b:84:
be:39:1a:9b:1c:cd:f2:b2:a4:e0:1b:40:c7:76:5d:
63:7d:48:85:17:00:82:91:1d:48:ae:dd:0e:ba:3a:
2c:92:e3:37:a8:94:1d:3e:55:36:a9:59:dd:2b:c8:
2b:2e:e5:24:cf:79:31:b6:d5:b9:80:7f:28:5e:b4:
c4:bf:27:e2:6c:26:06:d4:30:93:32:b4:ec:91:57:
55:9e:03:3c:cc:a0:fc:38:d0:b0:65:9a:25:e0:54:
da:2f:a4:9f:66:39:b2:fb:57:46:4b:a7:8d:5c:a5:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:16:AC:C2:F1:A2:14:35:04:01:EE:AE:F2:1E:BD:DD:45:A9:CC
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:38:ea:63:ca:d7:82:0f:91:2b:a3:a6:32:3b:34:28:c1:d4:
fa:2a:ae:3f:d8:75:e5:69:63:96:03:fe:31:f4:51:3f:8d:8d:
e3:ac:2d:db:a0:9e:fe:e9:8b:b8:74:67:ce:43:23:86:93:08:
d8:f8:b2:c5:24:0b:da:11:30:d9:c8:92:68:59:e4:0a:1c:2a:
34:0c:56:e1:79:ca:cf:0a:78:39:12:fd:be:3d:84:d9:d8:c8:
02:e9:0e:03:43:60:e7:03:c0:1b:ff:c9:7b:1d:57:18:e5:99:
7f:b6:6a:4d:2d:fc:91:21:b1:14:f9:f9:80:83:ce:87:79:19:
c2:36:5a:56:2e:27:ae:99:7d:3b:89:73:db:ca:95:25:66:b0:
e2:1b:cc:a9:f8:26:c3:26:0b:e3:7c:7a:43:ac:de:a6:ab:11:
1c:ea:1a:08:e9:5c:be:2e:71:4f:5c:58:02:f2:a8:77:d8:54:
4a:2d:89:7c:bc:80:ba:52:5d:c8:84:34:6c:a7:53:fa:6e:f4:
b2:11:bc:86:20:78:dd:0b:44:91:fa:7c:64:67:5d:c3:03:ef:
a3:68:7c:01:c9:8a:39:88:3f:25:29:e5:43:bf:73:86:fe:9b:
7e:61:06:15:45:f3:0b:41:a4:a7:cf:77:f4:8d:91:a9:1c:ef:
13:23:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:56 2026 by rpki-client