
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: Vy4CoPpQSDX2h4cxGcd6wxEQkJHHuMFUj3/3wYaj+qg=
Subject key identifier: FE:91:49:AF:58:56:E1:2A:EB:7A:2C:17:4E:F3:F6:34:51:05:A3:E1
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019D3789878F8668CD83350D41F89B7F223E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0E29
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: 7hmJknF3g0jZ2PzjgnEt6tkUwkk.roa (hash: 0kxSwLIeU1LRwwQYmR17mV6US+bp2NYwjzNIshTtU+0=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: VQmajEKOi7mSHyX94SfQArICutD7nLMRlsFdM/TmaPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:87:8f:86:68:cd:83:35:0d:41:f8:9b:7f:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=fe9149af5856e12aeb7a2c174ef3f6345105a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:a1:55:57:60:bf:29:cf:8f:5a:56:33:43:
70:4f:08:db:0e:0c:a7:06:f9:e9:95:80:7e:6f:06:
79:8b:10:97:d8:1a:61:24:19:97:22:7d:4c:0a:8c:
53:d3:c3:88:90:58:82:1b:05:96:c7:58:d8:2a:d0:
68:4e:ac:5a:bb:04:a3:b6:41:7c:3c:3a:ff:6b:f1:
88:d5:6c:3b:c0:e4:3e:79:00:e3:ce:a8:35:dc:3f:
c9:12:1a:24:7b:e7:56:cb:62:c3:9d:07:be:57:f2:
92:7c:7c:e1:9c:d7:43:fd:6e:9f:6c:a7:eb:b8:27:
46:02:f3:b2:32:b2:43:e2:61:0e:dd:3e:44:59:cd:
44:96:c6:9c:10:fd:2f:77:c2:3c:02:c5:e2:2b:ca:
a3:1f:31:49:4f:84:3b:a6:6f:53:f9:92:e1:f0:4f:
7e:cf:df:fd:85:4d:f9:54:be:9c:90:d5:ff:e0:24:
30:81:79:39:30:c8:47:5b:eb:ab:ed:5c:e3:a1:ed:
d6:b4:70:0c:e7:dc:b4:34:58:35:20:80:9e:ec:ee:
c7:5f:a7:28:0d:2c:27:90:9d:3b:33:46:4a:18:70:
00:46:80:1b:43:06:16:e5:df:0c:70:b4:50:22:a2:
6d:3c:ac:09:29:14:e9:45:b3:94:44:ab:ca:f4:7b:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:49:AF:58:56:E1:2A:EB:7A:2C:17:4E:F3:F6:34:51:05:A3:E1
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:3e:a1:7b:3c:8d:67:23:2c:70:b4:a1:e4:36:86:95:c7:
89:f7:1d:67:e3:f7:2c:6a:dc:10:e8:bf:5b:2f:c8:6d:75:2b:
0e:76:f4:ed:07:93:cf:5b:be:16:e7:26:c4:03:6f:bd:cc:07:
0e:47:2f:26:20:ca:73:fd:3f:5b:c8:81:fd:6e:d7:06:31:55:
0e:bf:3b:2b:8a:f6:d1:03:09:c9:b9:2c:08:30:67:c0:ff:83:
ed:e9:84:37:87:a8:b9:c1:93:6b:86:c2:b5:41:5f:2b:00:e3:
65:0c:19:20:4f:cf:7a:a6:1f:b8:87:81:d3:da:8c:da:8c:e2:
e2:12:57:d6:d2:7d:b1:3c:ef:31:70:1c:34:7b:ae:16:c4:0d:
4f:3d:9f:f0:e0:eb:b0:2b:4c:e8:2a:fa:d6:37:03:5e:be:6d:
87:ba:77:ef:23:e3:f8:62:a1:eb:91:62:c4:bc:e0:20:65:29:
98:51:5a:ac:b7:3b:42:e6:e0:bd:df:be:e5:1d:48:93:dc:56:
2b:cf:60:93:a4:f4:22:6b:93:96:30:d6:78:b2:6a:4e:b8:1f:
d8:3b:09:47:fc:2a:63:1d:e2:9e:ec:30:ed:53:ca:ee:24:43:
2a:e5:f8:a5:fb:40:2c:5b:94:7e:e6:49:44:0e:26:f2:a1:06:
8b:8a:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client