
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: LjO9r8NcWQJYRkMRBVLsUXnkP/6pl9OyK8HhtbKfvaM=
Subject key identifier: DC:25:5F:24:F6:F8:F5:24:50:AF:23:98:C6:3C:F5:8D:99:2B:03:E9
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01A03F3C028A2F5AF28144EBC168686F8787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1A25
Signing time: Wed 26 Aug 2026 18:01:32 +0000
Manifest this update: Wed 26 Aug 2026 18:01:32 +0000
Manifest next update: Thu 27 Aug 2026 18:01:32 +0000
Files and hashes: 1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: mW+6s006Qm5TCFHRIwM4m2Vqtj11xdIq5FiQ+F3MSdw=)
2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3c:02:8a:2f:5a:f2:81:44:eb:c1:68:68:6f:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Aug 26 18:01:32 2026 GMT
Not After : Aug 27 18:01:32 2026 GMT
Subject: CN=dc255f24f6f8f52450af2398c63cf58d992b03e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c0:b3:c4:1e:2b:16:64:8a:04:0a:ac:78:bd:
fb:6c:29:bb:9f:e8:c5:0f:ed:c7:5a:96:35:d9:e6:
e2:fa:3e:55:6e:c4:05:91:3e:62:fc:c5:5d:90:a8:
30:6b:ac:b3:60:8e:88:1a:20:38:46:08:61:ca:41:
8c:5a:bf:ba:06:77:ab:0e:f0:80:66:ec:cd:68:60:
69:35:ce:9b:84:d1:6c:00:0b:17:ea:73:e5:0e:f3:
f9:60:9b:65:f8:9a:70:f1:fc:c5:9e:64:66:9f:96:
35:b8:a1:f2:90:3c:bc:49:d8:dd:ec:08:ba:31:7d:
e7:2d:4c:7a:8c:b5:3a:3d:7a:0c:03:b7:ad:91:03:
58:b3:14:6a:d5:8c:75:9c:0a:4c:ea:7f:b2:a5:79:
58:7c:5c:47:da:91:ef:e9:31:30:a9:6e:64:0a:19:
1c:b4:28:c6:73:19:8f:db:94:35:35:d1:ce:4e:2c:
9f:19:ff:64:f7:f3:12:6a:03:93:16:c8:dc:66:6d:
47:7a:fc:f3:cb:01:98:30:b8:71:aa:4a:2a:ec:9f:
98:96:e5:2e:3f:8d:26:63:b1:86:4c:f7:09:fd:1e:
49:c4:60:61:05:be:b8:0e:0d:72:13:ce:09:ba:94:
01:05:d8:ef:fc:3f:b0:89:de:ee:f8:47:4a:27:4f:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:5F:24:F6:F8:F5:24:50:AF:23:98:C6:3C:F5:8D:99:2B:03:E9
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:68:73:34:d9:65:5c:71:8d:fd:99:92:82:21:4f:ea:97:8c:
49:78:f7:be:2d:dc:42:fc:7a:dd:dd:c2:e3:68:d3:e6:18:d2:
4a:a3:d8:cb:1e:a2:fe:2d:a1:de:14:48:c3:52:5d:8c:b8:50:
09:43:fd:46:43:80:d7:d5:ce:52:b9:0b:46:44:48:27:8b:83:
0a:67:99:a5:65:54:41:f9:ec:03:77:9c:6f:37:83:98:9e:87:
c2:c1:f7:11:60:b8:42:6c:7b:a5:5f:f1:3f:06:a8:34:b7:10:
66:fd:1c:8e:20:b4:58:39:40:80:c1:66:c9:9f:62:ac:9a:be:
1d:4f:d3:7b:9d:f2:b8:97:f2:48:bb:b2:ab:09:ae:70:f6:ab:
24:0b:93:db:b2:63:81:b3:6a:b6:7a:f3:01:a4:8c:87:41:15:
22:4c:7e:c8:d8:ee:a5:0b:3d:2f:69:20:14:2d:b2:1a:67:5d:
a5:f3:f6:8f:c2:9d:7a:24:01:7d:73:a7:4b:75:3f:67:8c:39:
3d:e1:b2:e4:b5:60:d7:e5:f1:37:02:b0:00:6d:4b:c6:57:5a:
79:16:1d:a9:b4:55:0e:88:e0:07:b9:77:b0:27:a5:30:1a:fa:
ad:77:02:29:2e:26:21:f2:ea:a3:a1:60:b7:0c:08:03:49:d5:
85:8b:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:37 2026 by rpki-client