Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: h8+AzlbFg3LXE8oAL8A/XGzCTjp0VOfdTajdtUeudck=
Subject key identifier: BF:CB:CB:3D:4A:27:C7:E9:21:86:F4:B8:EB:12:18:7E:77:AD:3B:D9
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 01A0D2DEF17254D8FC797631C130C726BF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 10:03:41 +0000
Manifest this update: Thu 24 Sep 2026 10:03:41 +0000
Manifest next update: Fri 25 Sep 2026 10:03:41 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: qgVKjD98u73wqmvfTQfMd1EWt0wu8rk7gLX0v1rcWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:f1:72:54:d8:fc:79:76:31:c1:30:c7:26:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Sep 24 10:03:41 2026 GMT
Not After : Sep 25 10:03:41 2026 GMT
Subject: CN=bfcbcb3d4a27c7e92186f4b8eb12187e77ad3bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:e9:3c:20:a3:41:a3:d6:76:8a:84:45:a1:
b0:a8:c1:28:61:36:48:31:f1:6d:d0:ee:c6:ec:8c:
09:78:08:10:a1:39:d5:41:11:55:58:07:59:24:a9:
43:fc:b3:6f:77:50:d4:1f:14:af:76:d4:5b:e4:02:
c0:60:a8:96:af:32:1f:d7:77:bf:cc:b2:e9:24:a8:
ef:6c:51:ef:d1:76:8f:a8:cf:4a:05:cf:f5:7f:ad:
dd:af:7b:b6:ca:a7:f1:e2:0c:0f:20:40:87:6e:62:
a7:76:f0:aa:82:74:3c:47:69:c0:8c:51:93:d8:51:
f8:ba:94:08:86:36:81:d6:ee:98:f9:8a:66:ab:f7:
22:7f:68:29:50:86:47:ee:66:cd:e0:ab:85:37:84:
7d:c5:7f:49:98:78:51:6f:e2:5f:40:54:77:a8:b9:
d8:af:8f:24:6f:c5:02:0e:fc:0f:7b:ed:75:b7:66:
79:de:fe:e6:1f:20:71:23:86:72:65:9b:10:86:d9:
7a:67:00:13:65:0b:d0:8e:90:7c:3d:67:7b:31:5f:
56:6b:0b:88:2e:30:f4:ce:14:36:3f:7f:67:75:a6:
58:ac:c6:c5:11:52:e6:25:01:4a:53:22:e6:cc:ca:
43:7c:c7:bf:b5:66:19:ef:60:98:ce:69:af:5c:e3:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:CB:3D:4A:27:C7:E9:21:86:F4:B8:EB:12:18:7E:77:AD:3B:D9
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:83:3b:3f:33:47:bb:2d:ec:6f:3b:56:61:b1:f8:42:ca:0d:
6b:13:74:ee:e2:2b:f4:83:76:fb:22:3a:0b:f8:84:63:b3:14:
bb:35:d5:75:24:74:ab:68:0a:65:ee:a7:9b:5a:42:bb:f9:0f:
cb:f6:e5:e6:cd:c5:fc:48:6d:95:0d:9b:e7:7d:9f:72:ee:61:
d8:53:d0:79:17:26:e1:58:db:0c:f8:d7:7a:5e:f8:a7:f6:0b:
03:d9:5d:af:ba:fa:82:bf:66:15:2d:f9:93:6b:9c:ee:15:d0:
54:ea:b5:7c:30:68:91:f6:8c:65:79:f9:e5:8b:44:7f:dd:cb:
8e:c2:94:9d:16:b8:ad:8e:3a:7f:b8:60:7b:aa:b0:ac:53:0f:
bb:a1:17:c8:8e:c8:d8:b6:61:26:9c:01:9e:22:5f:44:a3:af:
4e:e8:77:4a:7b:0b:33:cc:f8:90:1d:2c:40:ac:bc:bb:49:65:
0e:c2:02:74:00:7f:d8:5d:75:19:fe:62:bb:24:e9:d3:3c:f3:
ba:3f:8e:0e:01:b4:ed:78:2c:33:9f:85:05:92:1d:db:39:4b:
63:7a:78:47:34:f5:dd:cc:4e:de:d0:09:c5:07:6e:b7:a0:e6:
9f:c6:48:c8:22:22:f0:a1:16:fe:b2:8d:b6:e1:6b:c5:74:27:
16:bb:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:26:49 2026 by rpki-client