Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: z8wnOWiciFvCB8O23mROri7aQ/WReVeAL1UIw+pC12A=
Subject key identifier: 52:28:AB:E5:8C:0E:32:CF:7F:67:98:70:7D:F2:D6:8F:27:8C:7A:33
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019DD0508E732894892074ED6E95DA14913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1824
Signing time: Mon 27 Apr 2026 19:00:33 +0000
Manifest this update: Mon 27 Apr 2026 19:00:33 +0000
Manifest next update: Tue 28 Apr 2026 19:00:33 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: BqaBmJuCPv6zvs06kPvzisLagkB3tfA7kjY8XgMBe0A=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:8e:73:28:94:89:20:74:ed:6e:95:da:14:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Apr 27 19:00:33 2026 GMT
Not After : Apr 28 19:00:33 2026 GMT
Subject: CN=5228abe58c0e32cf7f6798707df2d68f278c7a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:74:f8:4a:e1:ba:7d:50:5a:d4:52:f8:6a:
23:35:f1:0a:9f:5f:89:f2:cb:5c:b9:d9:ae:a8:b3:
d0:3e:71:00:3f:1d:8e:b8:f9:6d:df:60:ab:8f:24:
ce:d9:d0:19:47:2f:09:89:35:e0:25:37:80:90:6b:
97:7d:55:bb:0b:f2:b5:59:2c:c1:c3:00:98:34:ee:
9b:fb:b4:bf:f9:9e:f7:ae:fc:64:90:8a:44:b3:fa:
21:04:92:6c:03:7a:61:58:f2:e3:8d:de:92:bd:e0:
c5:85:e0:d1:6c:87:80:c5:86:d3:0c:0e:71:51:b7:
0b:65:b1:26:af:39:c5:9b:09:44:35:f8:52:03:2c:
50:fa:6e:36:1c:ca:c9:c5:4a:c4:24:19:ec:90:e4:
2f:60:20:d4:15:84:fb:22:ca:66:30:40:19:34:66:
39:c4:10:a4:3f:ef:38:c4:de:c8:07:ac:7c:29:35:
b7:c3:37:a8:7f:1e:5f:8b:d8:34:7b:0c:d4:b9:1f:
d1:a7:4a:af:c5:f1:ed:0f:01:6a:bf:0e:6a:cf:51:
b5:51:df:da:0b:12:3a:26:32:5b:3b:fe:41:d1:e2:
83:f9:e9:6f:db:e1:cf:29:de:63:cd:1f:3e:90:38:
c2:96:64:44:01:6b:5e:f9:00:9b:bf:e6:21:3d:31:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:AB:E5:8C:0E:32:CF:7F:67:98:70:7D:F2:D6:8F:27:8C:7A:33
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:7d:6c:c0:b3:aa:52:a7:2a:04:fb:d6:69:45:db:9c:9f:
34:06:18:bc:54:a3:ba:40:be:a3:ca:5e:0b:8c:56:54:ea:7b:
a0:29:a7:61:a3:81:75:8d:9d:ef:c5:e7:39:4b:6e:9f:36:97:
28:df:12:f0:3a:66:b3:6a:5a:97:97:0a:d3:dc:24:e9:17:b3:
ee:13:1f:37:8a:e6:60:44:31:00:50:0f:13:b6:14:2a:d6:9e:
30:b0:63:42:7f:e0:21:22:50:cb:a6:ad:34:ea:df:84:9a:43:
5a:87:c0:3a:d4:d7:99:4b:61:50:6a:cf:db:1b:06:3d:46:40:
fe:60:95:82:5c:83:25:b0:de:07:89:8c:93:98:8b:1a:67:44:
f1:1b:14:8c:c4:d7:2b:a9:8f:6e:78:36:de:a5:6d:76:e0:e4:
4f:45:8d:f5:df:af:0d:bf:64:38:0b:8b:6d:43:c1:eb:dd:89:
33:6e:d4:b2:bc:9d:0a:7e:0a:ea:04:82:1a:ed:d3:9c:66:3f:
9d:fb:37:72:c5:09:30:eb:a6:12:2d:cd:a9:5e:29:01:8b:5b:
f9:55:7f:51:9c:a2:9d:7e:25:2a:0a:4d:64:67:e4:da:58:d7:
f0:b8:6f:ab:8d:10:40:b7:ea:ec:c1:e0:5c:ae:c4:35:fa:8d:
71:fa:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:47 2026 by rpki-client