Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: UVdduOSLEIaiQb1azGd/h3QC3ohdMZEBfFlxCrMA7qM=
Subject key identifier: 65:76:79:68:D2:44:F6:EF:41:02:BC:6C:0C:93:64:2E:F6:C4:ED:26
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 019D27A91231849EEDECA800AB5DEC9E3FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 15B6
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: 7IHoFTom1ovbc32ROfwOsVohnOY.roa (hash: QxYm3BEgI8MopzvcjZkVuxTvAcrTlamB8ZE+JEtn02I=)
2: dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa (hash: PbGDghsUx2VuV/Qi655kVWVON4S8LLL9qUjVO61ngtg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: Hlnky5NEw5CiNMT9/WAdXLMaxm/2Yq88109PCwKKpSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:12:31:84:9e:ed:ec:a8:00:ab:5d:ec:9e:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=65767968d244f6ef4102bc6c0c93642ef6c4ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:e2:4d:99:a3:14:85:6f:6d:1e:b7:cd:aa:
9f:30:fa:44:6e:e7:02:95:75:55:b4:a2:86:a8:12:
ca:bc:e3:57:a0:5e:2c:f7:d3:ae:52:fd:c1:a5:24:
a1:ca:58:ec:2a:9b:65:6f:cf:2f:54:db:35:c9:86:
ed:06:23:8c:cf:a4:db:15:49:5f:de:89:a9:eb:97:
58:82:45:22:0f:8f:56:ba:f2:bc:b4:4b:fc:1e:e9:
c8:71:c1:f9:97:f3:c8:ad:5b:05:09:82:86:0f:56:
14:a3:b2:4f:9e:23:db:1f:b4:92:2d:d6:b1:3a:16:
d2:0e:40:db:b3:48:4e:31:74:40:4d:cc:b6:9a:08:
2b:b5:4c:f1:35:59:80:80:17:51:6f:08:5c:e8:af:
ef:d6:89:8f:7a:92:ab:9b:20:dd:10:a7:5e:1f:01:
c7:6f:30:78:b7:77:0d:b1:a2:42:be:45:1a:fd:fd:
cc:6f:6f:86:92:65:92:ff:b4:5c:90:8a:2c:0c:05:
c0:b5:4a:c2:df:69:10:48:eb:1a:a7:db:ad:43:6a:
cd:45:7a:6b:8e:d6:51:d8:64:37:95:3a:c8:35:95:
75:24:10:76:03:55:77:84:d7:dd:f1:4d:52:d4:da:
8c:1c:6a:cd:ec:1a:72:b9:a0:f0:06:9b:97:9b:01:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:79:68:D2:44:F6:EF:41:02:BC:6C:0C:93:64:2E:F6:C4:ED:26
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:6b:2e:cb:8e:eb:ee:c3:2d:1b:41:79:ca:f3:1e:53:d6:
4f:23:c2:78:a5:cd:5c:16:6c:d6:97:8a:54:9d:07:76:81:e0:
bf:d9:87:b5:a7:27:d4:a2:d7:33:20:1b:f5:48:ff:c8:23:ad:
95:43:f9:64:bb:7d:62:00:75:e8:29:cf:5d:3a:6f:c1:0a:84:
43:c5:a1:d8:ad:4b:8d:c2:29:66:54:67:d0:77:81:ac:cd:c5:
4c:66:34:61:93:43:29:21:fd:26:b0:7d:9f:33:20:f4:f6:e7:
b1:e1:ed:d5:64:f2:1d:38:b0:f6:8c:8d:88:7a:ba:f4:87:22:
ee:05:e6:e1:78:a3:36:d1:4c:59:c3:c8:8a:24:a3:4e:8e:60:
b1:e0:2a:c8:72:e8:e5:6f:6a:51:80:02:0e:cd:54:cb:87:3f:
94:e2:c2:1d:48:7f:68:94:d8:fe:97:e5:b3:7c:be:bd:29:e4:
35:b8:62:5e:d2:0e:40:6c:8d:cf:c3:95:a2:68:eb:cd:95:37:
ee:6f:ee:4c:19:02:ef:6f:77:84:22:8e:bf:d5:5f:35:ba:61:
ae:03:bc:26:2a:68:cf:86:ce:0e:b1:85:ad:bf:96:ee:91:a9:
6c:2d:53:47:2f:a4:5f:bd:c1:8d:a0:08:40:3b:82:89:4e:6c:
5b:a3:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:46 2026 by rpki-client