Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: UolIV07y998cnNpHZLjhggr3KKC/YC9pHHh0K9C7w3M=
Subject key identifier: 84:45:65:91:8C:BD:EE:FB:93:CB:CC:1E:18:77:4E:53:D9:AB:D1:7E
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019D27A8E114E1F2137B39FD67E52CF5B6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: SPmuoUXoA6tsZiCS0_pV74-AIEk.roa (hash: S9bFhQItClU/AaCIXnbTpcvt5Rg2XY1adevUwVNVVvo=)
2: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: 5nAQu8vfFOC/vaU56CP7C0vCO0PVG50l4b/SMw+xcUw=)
3: ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa (hash: L9aCvRxqO1gcLQJnMNhhLg422VtbcLvTCPUD+6YJIFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:14:e1:f2:13:7b:39:fd:67:e5:2c:f5:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=844565918cbdeefb93cbcc1e18774e53d9abd17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:96:e5:92:d1:56:9e:04:1f:8d:f8:05:ef:
04:34:92:93:22:a6:18:13:95:13:ac:7a:fe:f4:82:
93:40:1d:17:6e:19:d1:e9:b0:51:14:82:4e:67:82:
38:e2:85:d1:01:5e:37:f5:38:0b:8a:37:37:75:6d:
62:cb:a7:06:2b:99:00:57:2f:13:6d:41:8c:9a:2e:
ac:ff:ad:fd:7b:b5:be:72:37:b9:a8:b7:cb:02:f4:
36:c0:63:71:c3:ed:f2:64:56:37:7a:02:aa:b2:7f:
03:ae:24:72:0b:56:0d:80:9e:78:56:03:b3:23:b8:
89:bc:ca:2e:de:9b:15:80:83:15:6b:d7:0a:2c:a3:
f4:08:7c:bd:fb:4d:cd:9d:dd:43:50:e4:b1:af:b9:
04:f2:c1:ee:20:4d:c3:3a:e5:4d:08:d3:a2:85:25:
7d:4c:fc:66:8a:f8:8d:83:63:d7:de:fc:07:47:bc:
16:e1:d2:1c:6c:68:1f:f8:69:94:46:f5:9a:dc:ba:
32:69:6f:91:d2:1f:94:a4:2f:a0:9a:e6:14:fb:cb:
d7:b1:4f:39:4f:22:a8:fd:5e:15:33:da:81:85:ad:
0c:89:45:f3:23:b3:61:da:7d:0c:4c:24:88:ad:7c:
c9:eb:e8:a1:03:26:3c:b5:09:92:a4:ad:46:50:97:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:65:91:8C:BD:EE:FB:93:CB:CC:1E:18:77:4E:53:D9:AB:D1:7E
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:84:df:ab:27:fc:cb:6a:c2:39:bc:12:50:cd:69:e6:7f:9d:
5d:a9:93:55:c6:2a:3c:a1:1f:8a:37:f4:08:c4:c9:c9:44:6a:
34:0b:30:16:6d:6a:a4:fb:19:26:40:17:72:09:26:dc:96:7e:
e3:a4:9f:32:5a:ad:4c:ba:f8:75:01:00:44:70:ad:e6:3e:d4:
e5:b7:b7:9d:29:b3:6e:9f:14:5d:d2:37:a6:ad:fc:4e:d1:00:
93:5b:1f:f8:3d:f5:bc:ad:16:0c:e5:d1:b2:1a:d2:55:94:8e:
c8:83:fb:ab:bb:f0:e0:b8:88:b4:e2:56:d8:6a:51:af:97:42:
d0:81:19:c9:99:2f:2c:14:0d:34:fe:2c:10:70:56:d1:0c:5e:
eb:87:2b:c0:d3:d9:53:6f:ea:62:5e:6a:7d:2c:ca:4f:58:9a:
83:76:cb:42:c7:e1:25:e1:ac:86:61:95:77:06:57:a5:17:9f:
38:34:ae:4f:3a:e7:7e:85:e0:4b:be:32:30:e4:78:31:a9:d0:
9a:5f:84:8f:0d:40:84:b0:88:4f:fa:46:e5:49:16:9e:bc:8d:
78:f2:2e:14:fa:a0:09:fa:7f:fd:75:6c:75:4e:49:8d:8e:db:
fe:1b:53:2f:3c:94:22:39:0e:0f:8d:c8:2d:32:3f:b7:78:c6:
65:40:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:35 2026 by rpki-client