Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: J9OPxJacg5IYThKcHIqy1rsPLUu0F6+qoO/BRJRX+AQ=
Subject key identifier: 0D:E5:57:BA:0B:1D:B5:FA:9B:7B:31:11:EF:8E:EC:91:6E:B3:60:6E
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019D37C0481C8D47D06C1DA448C8D0A55647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 10F8
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: WG3vTOkXkcXxfAC8hWYuIfyroNxz68mza64OKo5Qepc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:48:1c:8d:47:d0:6c:1d:a4:48:c8:d0:a5:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=0de557ba0b1db5fa9b7b3111ef8eec916eb3606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:43:fd:7f:8a:ec:a3:02:b6:48:81:c3:87:
eb:62:ef:87:0d:b3:fe:62:e7:6c:cc:72:0d:bc:f4:
61:14:95:32:27:28:ce:f6:bd:e6:70:58:d9:d9:96:
69:16:21:34:5d:d1:a9:f4:ed:c3:59:88:d9:18:b2:
c4:0c:55:3b:0a:be:51:f9:0e:f3:60:56:9f:99:6e:
0d:b6:31:60:dc:22:29:32:bf:7e:a3:d6:b3:8a:65:
0a:ee:53:a9:15:3b:b6:0e:0c:65:21:a5:39:72:e2:
60:6f:01:83:f1:f8:99:64:42:41:d4:87:5e:3d:9e:
e8:02:10:78:3f:89:a4:07:ef:2b:80:55:2b:ae:6d:
fd:c2:f2:d7:76:2b:11:a8:7c:f3:03:d5:ba:66:81:
fc:94:34:46:3d:02:1f:92:ce:c6:b6:a5:21:ba:b1:
0e:a0:66:f0:93:f2:85:d2:0c:70:9a:6f:d9:04:fc:
5e:40:51:e2:16:4f:23:ee:1e:8f:41:14:f7:ce:e0:
9d:43:7f:24:f1:ac:98:46:1f:a8:d7:7b:34:31:55:
33:50:f9:f2:45:27:77:ba:bb:39:07:6d:bd:36:da:
81:8a:9d:e7:29:15:40:4f:f2:f6:fa:6f:84:ef:da:
90:66:90:07:ed:02:2c:79:e7:92:49:4a:10:4f:d2:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:57:BA:0B:1D:B5:FA:9B:7B:31:11:EF:8E:EC:91:6E:B3:60:6E
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:91:a3:6f:fb:88:fd:aa:86:df:52:01:d6:97:8d:4c:c9:
f8:29:da:01:18:0d:44:9d:d3:17:c4:56:52:77:95:7a:dc:b8:
4c:1a:3a:8a:7d:85:62:55:26:1a:08:a7:bd:d5:8f:c5:c0:41:
9e:4c:6d:15:cd:78:28:75:70:c1:f1:6f:c5:de:ae:1b:66:cc:
6c:4d:a1:73:f4:f2:d3:e5:a7:c7:f4:aa:5f:d7:87:16:b1:6b:
91:c2:3b:a2:2e:72:1f:2b:2e:37:5c:6c:a9:8a:d0:a4:b5:f4:
7e:7c:8b:24:e7:ef:34:89:90:48:0b:b3:e0:e4:02:c0:3c:b2:
82:c2:19:3d:bb:f4:ad:20:cf:66:96:2b:c8:7d:c1:3e:4b:eb:
9e:23:f9:7f:94:0d:0d:76:c5:ba:a5:12:6a:c3:ed:2b:52:1d:
50:7f:63:92:3f:52:04:fc:21:9e:af:87:a3:85:cf:37:34:a7:
30:a2:24:b3:2a:45:3d:a8:90:0d:b3:d9:dc:ad:c2:ed:cc:1c:
ce:f0:e4:29:12:0f:b0:db:ea:da:35:a3:59:4a:23:31:59:5d:
5c:db:8f:39:89:67:58:a5:50:2b:6d:b5:6d:f3:cd:95:ca:ec:
b1:8a:17:6a:5d:7c:18:b8:20:29:9a:e0:b3:64:7d:a0:c1:ac:
b6:8d:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client