Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: UarnD4UySHQOtzl/kdnOZHjNWVq5gsDlHXvzkT7T/OM=
Subject key identifier: B3:83:FA:CB:4C:F9:80:09:F2:66:BB:A4:DC:47:15:FA:94:85:24:73
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019E1D90B3F9822DE2EF582F0C6896130767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:22 +0000
Manifest this update: Tue 12 May 2026 19:01:22 +0000
Manifest next update: Wed 13 May 2026 19:01:22 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: Sfq3ai8iIOogHkeXDN/noDrPdBfF1hyC9jGXwS1nFVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b3:f9:82:2d:e2:ef:58:2f:0c:68:96:13:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: May 12 19:01:22 2026 GMT
Not After : May 13 19:01:22 2026 GMT
Subject: CN=b383facb4cf98009f266bba4dc4715fa94852473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:a1:d6:88:4f:0b:e2:c1:93:2f:90:cf:08:
ce:8d:a9:56:e5:8e:eb:59:d7:34:ff:46:d8:6e:dd:
1e:e4:e0:0d:b3:ec:7f:3c:f7:4c:fc:38:2a:b2:54:
e2:e9:d6:4d:06:da:13:af:47:b0:ae:1b:56:88:3e:
31:32:ec:b0:b7:86:c7:b5:85:47:6f:c9:98:9e:ba:
a4:00:ad:be:b5:91:f3:41:ab:32:f8:ca:95:8a:0a:
ce:63:01:c3:83:d0:4e:1f:7d:f7:88:c9:a1:4e:9e:
c2:7d:b3:cd:e6:74:fb:67:ee:4a:38:d0:14:de:42:
ba:07:cc:2c:9b:90:15:5f:b8:cc:ba:9b:81:b5:60:
7c:2e:0b:be:94:48:37:cd:ef:16:35:68:bd:1a:d4:
ac:c3:45:5f:0e:cc:8a:10:4b:e9:a1:bf:a5:8d:fd:
2c:2c:34:98:e9:5c:e5:97:a2:e1:96:84:3e:21:09:
8c:eb:3d:23:00:44:d8:76:3f:aa:63:32:c2:b9:77:
05:ac:99:d0:14:6b:8e:68:8f:5b:e4:bd:c0:69:da:
6b:b1:91:38:df:d4:fa:0e:de:5f:75:3f:b0:11:49:
d9:46:8d:cf:ec:05:40:a5:53:60:4b:d7:f4:f7:ae:
3e:e8:3d:02:57:aa:75:e7:a4:6f:c8:5b:14:a1:d1:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:FA:CB:4C:F9:80:09:F2:66:BB:A4:DC:47:15:FA:94:85:24:73
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6a:43:2c:e6:e8:91:d7:e7:99:61:43:f8:38:34:aa:34:ad:
9a:63:8b:df:1e:6a:57:82:b1:52:04:a2:9f:f2:e0:6a:b9:d7:
67:29:4b:50:84:16:08:19:e4:9d:c2:c4:6f:65:5b:9f:ac:3c:
99:3f:f1:2f:7b:7d:0b:00:29:5d:0e:b6:89:11:36:52:13:41:
4a:a4:2a:de:1a:9d:58:a2:c9:c2:80:ae:6b:f3:09:3f:d1:08:
c4:33:36:8b:8c:2a:83:67:59:c2:dc:ef:af:e3:4c:b8:9a:7e:
a8:af:b0:5f:30:aa:ba:57:97:08:04:e0:1c:96:89:46:e2:12:
e1:09:e1:02:96:ae:b4:ac:72:4a:01:9d:0a:45:f4:e8:ed:e0:
8b:55:33:1f:3e:9c:70:a5:2a:cd:45:bf:29:e2:b2:ed:ad:b0:
0d:c3:15:ad:84:fb:0d:ed:56:fb:34:7b:99:e9:82:bc:57:b5:
a7:76:4e:a9:73:c8:44:50:58:76:72:53:58:d7:3f:bc:38:e7:
3c:25:43:c0:eb:bd:12:f4:03:90:9e:8e:20:ca:5d:dc:92:d0:
73:a3:55:ef:d8:80:13:00:7e:ea:ed:db:c3:9b:b0:de:45:75:
2c:93:0c:9b:a9:80:0d:3e:e8:5a:25:58:9d:2d:88:ff:30:76:
7c:47:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:15 2026 by rpki-client