Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: s6sgokyRHIi/+WZeMRISk8PFiCq2xIFC//KAtfRK7QM=
Subject key identifier: 56:06:B4:4A:63:9D:5D:0C:73:D8:B9:C1:B5:DE:45:D9:6E:EE:40:8C
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01A004396B65E9A23AB55F4446F86D734306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1948
Signing time: Sat 15 Aug 2026 07:01:06 +0000
Manifest this update: Sat 15 Aug 2026 07:01:06 +0000
Manifest next update: Sun 16 Aug 2026 07:01:06 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: nxjdhlTyJpX8xb1xHsNG3jkUFLLSJR3EigW8tRLDJas=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:6b:65:e9:a2:3a:b5:5f:44:46:f8:6d:73:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Aug 15 07:01:06 2026 GMT
Not After : Aug 16 07:01:06 2026 GMT
Subject: CN=5606b44a639d5d0c73d8b9c1b5de45d96eee408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:7f:7c:c8:2c:34:57:b7:d3:aa:97:77:5f:
89:8c:f7:1f:94:db:96:f5:7b:17:eb:bf:0d:38:de:
d8:38:6d:df:b5:6b:fe:7d:f2:51:7d:32:92:0f:da:
16:03:3c:e9:34:b9:fd:76:6c:50:71:70:9a:f2:ba:
40:c6:36:4d:70:f8:fc:08:6f:6e:cb:89:a5:94:17:
21:19:6f:81:94:9e:4f:82:ed:56:89:b7:3e:1b:a4:
e2:ed:9e:ba:10:55:a4:2e:a7:36:18:ba:ac:18:72:
b8:c7:ba:d0:89:af:2b:03:6b:c7:45:22:86:4f:66:
4d:23:05:08:23:2f:dd:66:59:67:fc:28:95:88:db:
b3:ae:8d:c4:79:2b:da:3b:75:d4:ad:bd:44:26:3c:
8c:3a:7c:35:4f:69:5d:a7:f0:06:5e:95:fc:1f:be:
46:c2:ac:cf:28:db:a2:ba:6b:01:c9:81:49:ca:ff:
51:d6:95:d2:1a:a9:95:38:d7:a7:cd:27:e3:ba:f3:
61:97:7f:f7:08:72:f8:b5:48:69:0e:84:17:bc:5e:
59:39:14:3c:b4:9d:69:53:6d:4f:cb:50:8c:0e:9e:
c6:e5:d2:c6:1d:5d:84:af:dc:cd:b5:36:61:62:ff:
39:7c:5d:2f:39:81:95:94:86:d4:23:89:0a:2a:08:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:B4:4A:63:9D:5D:0C:73:D8:B9:C1:B5:DE:45:D9:6E:EE:40:8C
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9e:08:ef:19:93:1a:4e:74:d5:6d:75:36:bd:ec:c5:92:f1:
77:b5:99:86:5d:4c:08:fc:11:7e:e4:48:c0:ce:02:dc:37:bd:
8f:3d:f2:fd:44:32:0d:b3:de:59:5e:ea:91:ef:ed:33:71:4f:
51:a1:c5:7a:f5:0a:e4:31:bd:cd:eb:b9:ff:40:0d:bd:5f:b9:
91:28:1a:21:6c:cb:55:6e:6c:ea:df:c5:cc:e8:0a:79:35:5b:
63:91:3c:55:1c:29:71:74:6f:92:95:5f:43:49:86:22:94:32:
39:81:3c:b2:a1:42:63:93:d0:30:16:84:cf:6d:a8:0c:09:53:
69:fd:de:4e:ee:8b:86:57:88:41:51:2b:ed:1f:61:01:74:dc:
70:c6:f0:a2:58:d4:0c:11:b5:48:95:c0:7f:b7:11:6e:07:ad:
03:60:ef:49:77:ee:1c:21:bf:fe:a9:c0:a3:8f:14:15:6d:30:
b6:e0:f3:54:a9:bc:e6:2f:5d:29:82:c1:28:34:6c:47:61:54:
7d:c9:b4:c2:cb:e9:20:10:ac:66:b7:98:5d:ac:73:c9:98:21:
70:69:42:0b:e0:81:ee:3b:cd:a9:dc:35:92:ac:2e:b8:97:52:
16:c3:b0:35:2f:8b:58:93:a8:2a:43:37:6a:d4:21:34:bd:bb:
a1:43:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:44 2026 by rpki-client