Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: YB2ghK+R6a6sw7qcgSqYW6ggrJJAy4OwA5AIEhEJ11E=
Subject key identifier: 61:93:96:BD:41:87:5C:FB:CB:9B:15:53:1C:87:82:E2:14:C2:6D:D4
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019CE6A46E92B6FB69C60FC0FDBF652B096A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 17AB
Signing time: Fri 13 Mar 2026 10:01:01 +0000
Manifest this update: Fri 13 Mar 2026 10:01:01 +0000
Manifest next update: Sat 14 Mar 2026 10:01:01 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: MbXyZVqenXOm2gYq5XsyXV7UjQMKvnI2/yaNlZbxZX4=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:6e:92:b6:fb:69:c6:0f:c0:fd:bf:65:2b:09:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Mar 13 10:01:01 2026 GMT
Not After : Mar 14 10:01:01 2026 GMT
Subject: CN=619396bd41875cfbcb9b15531c8782e214c26dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:95:37:5a:88:d7:33:11:c7:20:d3:22:ab:
9f:31:99:e1:36:c1:5f:93:bf:17:34:57:6c:0d:90:
04:7f:1f:68:d2:b5:44:76:d5:8c:5f:46:ab:ae:3b:
51:3c:17:b9:57:60:d0:d4:64:5f:4a:4d:ac:c3:f9:
0d:21:99:8e:27:59:9b:79:94:ba:d7:1d:d7:40:d4:
9c:d0:e8:d4:39:fd:5c:7f:04:67:b7:2a:4e:27:25:
47:fb:80:23:8f:47:0b:4d:5e:14:7e:61:a9:92:d2:
76:c4:23:6a:db:03:a8:3f:62:fc:50:e0:16:21:5a:
3c:8d:b4:30:71:ad:e5:09:9f:1b:8d:d2:8e:d6:20:
cf:cf:e0:2e:78:1f:f5:30:f1:35:35:d0:38:ef:5e:
9a:44:19:4e:ad:32:96:ac:c1:bb:31:e6:de:b7:8b:
32:db:67:e0:4c:93:ef:b5:1f:77:5c:74:76:d6:5e:
f7:8c:46:d2:56:34:6a:ed:06:3b:77:13:d3:73:67:
18:11:96:3f:68:76:e7:31:05:f3:93:bd:52:12:61:
e1:4f:26:3e:58:79:48:e2:d6:5b:cf:f9:23:3d:bb:
43:67:f8:d3:aa:70:40:30:72:16:16:76:05:ca:a1:
ac:55:73:9c:67:59:6d:4f:e8:9a:8e:10:c1:a0:d3:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:96:BD:41:87:5C:FB:CB:9B:15:53:1C:87:82:E2:14:C2:6D:D4
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d3:47:7f:92:ea:ee:14:b8:89:03:d3:b2:8e:9d:44:98:89:
cd:4c:5d:c9:02:27:dc:1f:9b:88:79:c5:ef:f0:c0:46:78:7a:
40:70:c6:c0:cb:fa:ca:84:d8:73:ac:ff:a5:6f:fe:11:2d:18:
62:4f:e6:06:f0:fc:10:ed:8c:9c:a4:ef:b6:76:a1:7c:b8:18:
88:34:08:1f:88:91:6b:0d:89:0d:e5:79:08:ee:c8:da:ad:16:
bc:ca:2e:56:57:f8:74:1f:77:d2:de:ba:9b:56:81:2f:85:05:
00:16:d0:23:6a:77:20:1f:7b:39:e9:f3:ea:ab:a4:eb:6f:1d:
6b:95:04:a3:ae:8b:87:1c:a4:05:35:24:e4:b4:dc:64:6b:11:
8d:2f:5f:cb:9b:a5:fe:4c:70:de:51:64:01:e8:31:1d:a6:d9:
42:8b:c7:e4:b0:3c:06:dc:9a:1b:1f:67:94:44:17:04:30:53:
be:85:dd:51:37:81:25:cb:81:54:29:d2:93:be:6a:b7:be:1e:
3f:80:c6:f7:02:e2:9e:5e:ba:69:91:01:70:e1:c0:6d:b2:ba:
76:52:51:90:d8:12:83:bb:02:52:56:56:12:ef:6a:b1:ca:95:
11:57:2a:df:ad:ec:80:7c:a7:46:72:93:8d:6b:05:24:7f:49:
97:14:9d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpG6Stvtpxg/A/b9lKwlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm
OWFhMzcwHhcNMjYwMzEzMTAwMTAxWhcNMjYwMzE0MTAwMTAxWjAzMTEwLwYDVQQD
Eyg2MTkzOTZiZDQxODc1Y2ZiY2I5YjE1NTMxYzg3ODJlMjE0YzI2ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqGVN1qI1zMRxyDTIqufMZnhNsFf
k78XNFdsDZAEfx9o0rVEdtWMX0arrjtRPBe5V2DQ1GRfSk2sw/kNIZmOJ1mbeZS6
1x3XQNSc0OjUOf1cfwRntypOJyVH+4Ajj0cLTV4UfmGpktJ2xCNq2wOoP2L8UOAW
IVo8jbQwca3lCZ8bjdKO1iDPz+AueB/1MPE1NdA4716aRBlOrTKWrMG7Mebet4sy
22fgTJPvtR93XHR21l73jEbSVjRq7QY7dxPTc2cYEZY/aHbnMQXzk71SEmHhTyY+
WHlI4tZbz/kjPbtDZ/jTqnBAMHIWFnYFyqGsVXOcZ1ltT+iajhDBoNPCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGTlr1Bh1z7y5sVUxyHguIUwm3UMB8GA1UdIwQY
MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt
ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4
LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActNHf5Lq
7hS4iQPTso6dRJiJzUxdyQIn3B+biHnF7/DARnh6QHDGwMv6yoTYc6z/pW/+ES0Y
Yk/mBvD8EO2MnKTvtnahfLgYiDQIH4iRaw2JDeV5CO7I2q0WvMouVlf4dB930t66
m1aBL4UFABbQI2p3IB97Oenz6quk628da5UEo66LhxykBTUk5LTcZGsRjS9fy5ul
/kxw3lFkAegxHabZQovH5LA8BtyaGx9nlEQXBDBTvoXdUTeBJcuBVCnSk75qt74e
P4DG9wLinl66aZEBcOHAbbK6dlJRkNgSg7sCUlZWEu9qscqVEVcq363sgHynRnKT
jWsFJH9JlxSdzg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:58:00 2026 by rpki-client