Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: elMp0ymFbOGiUFmCl8H7+5SCb/RRxFJrNNID3CXFln8=
Subject key identifier: 9A:42:AA:30:43:1D:1A:F1:B2:7F:39:32:E7:1C:94:3D:F3:47:E4:52
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 01A089B0F1896C117AC4A23F031655CE81D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1625
Signing time: Thu 10 Sep 2026 05:01:09 +0000
Manifest this update: Thu 10 Sep 2026 05:01:09 +0000
Manifest next update: Fri 11 Sep 2026 05:01:09 +0000
Files and hashes: 1: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (hash: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: MV4KCL+v2BtHwbaT0I4YxcWQn3QTGWQ1VlBlNCEfXUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:f1:89:6c:11:7a:c4:a2:3f:03:16:55:ce:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Sep 10 05:01:09 2026 GMT
Not After : Sep 11 05:01:09 2026 GMT
Subject: CN=9a42aa30431d1af1b27f3932e71c943df347e452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:6b:ff:d7:c7:aa:92:a5:97:e1:c7:75:6b:
09:30:90:71:b5:44:14:36:b3:98:14:a0:4a:cd:94:
3b:67:12:49:76:05:fc:22:29:32:b0:a2:30:db:2c:
5a:e6:65:51:02:ed:11:f0:40:b5:ef:98:3a:0c:18:
03:6e:46:4d:f6:c5:77:b9:ed:72:24:28:8f:4c:42:
6f:fe:52:e9:57:4c:02:7a:05:9e:25:32:3c:13:da:
2f:94:04:b1:02:be:60:ce:47:0f:0c:35:09:ed:34:
10:0c:7a:a7:9d:21:8f:f5:dc:d3:27:f2:b5:3c:75:
a0:a5:ce:6b:51:32:21:d5:3b:c5:df:74:92:07:a0:
c4:1f:fe:13:b0:41:53:a4:96:25:32:02:3a:25:f6:
0d:9b:f9:7c:f9:0a:6c:0c:f3:3d:fd:a5:36:f9:77:
81:01:63:45:b1:8d:d4:74:2c:ec:6f:ec:6d:43:29:
01:57:73:40:02:5b:96:cd:05:1c:ea:5e:28:4e:f1:
b0:40:9c:04:2b:46:7f:ab:3c:b0:f1:70:8b:f9:95:
2c:5e:54:5c:10:d3:0a:66:6a:cd:2e:ab:b9:b0:0c:
d1:f0:4f:b6:70:19:cd:37:28:de:23:8e:cf:66:fe:
35:4b:0f:a0:de:fa:4a:5e:f8:66:f7:93:85:b0:57:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:AA:30:43:1D:1A:F1:B2:7F:39:32:E7:1C:94:3D:F3:47:E4:52
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f1:8f:24:a2:db:c6:c9:1e:5d:9d:29:5d:fc:29:32:e3:c8:
62:28:19:10:2a:f9:99:b7:a4:ff:ba:71:84:d5:46:39:ce:f5:
d3:2a:a6:ec:e1:25:b9:79:7d:4a:0a:58:59:12:4b:b5:8d:ac:
6c:81:e5:f3:08:dc:78:1b:38:6b:a2:53:43:2c:91:3a:64:bb:
cb:96:15:19:b7:0f:19:b7:12:da:47:d4:ed:0c:c6:85:a6:0c:
16:35:81:66:78:5c:fb:5d:26:c2:c8:03:25:b9:4b:f3:e8:b0:
f3:80:9f:12:bf:ae:5f:62:7e:48:41:fa:63:5e:21:81:e8:e1:
ea:c7:11:97:5d:0a:30:d2:11:c2:4b:62:56:2d:b0:68:a7:36:
8f:fb:58:9e:c1:00:70:cd:bd:73:a5:4a:c4:e3:7b:a6:ae:49:
a2:52:0f:52:23:92:b2:95:38:59:2e:84:4c:bc:60:41:eb:9c:
c5:11:5b:17:9d:d4:35:ea:b6:4e:c2:a9:50:c5:80:c8:07:d6:
b9:05:53:db:41:63:92:b9:95:a8:94:81:30:82:ff:35:ec:25:
ce:5a:98:8e:72:06:01:d0:05:48:fb:a2:7f:ac:f3:bb:67:e3:
5b:d5:34:12:57:a3:0f:79:28:53:ea:17:be:5e:55:74:99:43:
6b:3f:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:58 2026 by rpki-client