Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: 5mRxMCql7GXt3HJUVC/MklAlcLpIPuzHNzTmLAIsYZw=
Subject key identifier: 90:DB:1C:E7:5F:48:84:26:DA:5D:86:48:C9:E5:93:83:F2:55:A9:FC
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019D265F865C78CF878EFADBABF56352C2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: B1XQrGymjtV/wMPzfDHRkHmdFwoYkPugOeuUu+/dI/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:86:5c:78:cf:87:8e:fa:db:ab:f5:63:52:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=90db1ce75f488426da5d8648c9e59383f255a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:e0:bd:1d:fc:c6:7f:1a:8b:d8:7c:5e:bf:
f8:54:a7:cd:0a:80:f8:e4:3e:7a:1f:0e:25:82:b7:
a0:eb:0d:9e:79:e6:a4:ed:c2:61:6a:3e:0c:61:58:
d5:43:c4:0a:40:a5:08:c0:d7:04:be:a9:47:34:6a:
2a:d3:e4:91:92:ff:44:39:58:f2:22:ec:a0:64:f0:
06:ea:dd:6e:5f:cb:11:2f:cf:8b:01:73:85:2e:5e:
1a:4d:06:3f:32:39:9b:93:88:9e:13:2e:64:fe:67:
2d:69:90:56:f8:03:f3:f4:1f:88:fe:ad:e4:67:ad:
a4:d7:b8:1e:d3:82:41:10:bb:e3:92:ab:bf:70:06:
99:e7:57:8c:39:66:23:3a:8a:1b:a6:60:16:bf:9c:
e9:59:6f:aa:1a:b2:32:aa:55:f1:04:e7:b1:45:ae:
70:52:93:03:1f:cd:e2:d6:cb:26:05:01:7e:56:7a:
a0:4f:2a:29:fa:ee:0c:a1:0e:d1:a5:80:4b:e4:d1:
1b:0e:76:84:b5:70:ca:92:6e:33:60:06:99:7d:33:
c7:25:12:85:57:29:dc:c5:37:0d:d3:93:50:01:23:
9c:dc:46:f1:b0:bf:64:63:58:e3:39:91:c0:c8:9a:
d1:78:dd:67:19:bb:ea:7f:d4:bb:9a:8e:a0:b5:49:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:1C:E7:5F:48:84:26:DA:5D:86:48:C9:E5:93:83:F2:55:A9:FC
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ab:1d:40:6b:79:43:4f:42:75:ec:31:c0:79:20:3d:55:33:
c5:d7:6d:53:43:95:dd:a1:79:ad:9e:1d:09:4b:8d:33:d8:b7:
a2:3a:5a:10:99:f4:18:9e:86:1f:12:7c:61:ef:54:a9:b9:48:
6b:34:ab:fb:58:d8:83:c4:41:18:5e:5f:00:b3:1b:b8:ff:af:
bb:e1:5e:2b:5b:03:92:e3:2f:d0:da:00:5f:26:bc:55:57:6f:
4e:c4:c8:ae:31:3a:90:ff:3e:15:40:d5:53:bb:d0:c1:92:58:
66:80:b4:d7:79:2a:1c:1d:79:d2:34:2b:88:57:54:82:de:9e:
2a:bc:97:a2:0a:ab:3b:34:42:e9:eb:0e:8a:90:d4:1e:48:58:
42:79:a3:44:30:17:3a:2d:57:9b:92:b6:d4:4a:3c:cc:0b:8b:
1e:af:40:81:49:1b:7b:bd:89:76:bd:ab:b0:52:31:a8:97:ec:
a1:b4:6c:00:aa:79:7e:bf:a5:3b:4c:58:77:f1:d9:f5:d3:82:
f5:b9:f4:9d:08:9c:0a:c0:df:22:9d:0d:d5:d9:09:3a:85:f9:
05:9b:82:3a:ba:76:b0:b3:ee:ed:c6:1d:e8:ff:0c:74:9a:97:
9b:e6:4e:25:ab:59:fd:17:9d:4c:08:5f:af:ab:8d:fa:b4:95:
d2:21:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:34 2026 by rpki-client