Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: xp58kCpKqdx8hiNv69lZEotIQHrguQJ0s3OwbnjMFfA=
Subject key identifier: F1:44:0A:59:10:8A:E6:49:B8:37:72:66:3C:64:E5:7B:82:B9:2C:80
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019EB9FD0714EF0023CC7733C545B71F7E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 189D
Signing time: Fri 12 Jun 2026 04:00:27 +0000
Manifest this update: Fri 12 Jun 2026 04:00:27 +0000
Manifest next update: Sat 13 Jun 2026 04:00:27 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: DzINYyL+YfnxTRXgVXowiw3bStw9S1567RR3yJeez7I=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:07:14:ef:00:23:cc:77:33:c5:45:b7:1f:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jun 12 04:00:27 2026 GMT
Not After : Jun 13 04:00:27 2026 GMT
Subject: CN=f1440a59108ae649b83772663c64e57b82b92c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:34:1a:2b:5b:e3:ea:ba:24:81:4a:9a:06:
63:df:65:5b:42:ca:bf:52:61:3a:f5:94:7b:83:05:
10:fa:24:35:af:e9:47:9e:e4:39:ab:24:1b:47:b0:
3d:46:ca:fd:69:21:2e:50:50:36:f3:c0:de:8d:14:
80:3e:67:7d:0d:3e:4e:3e:0c:ef:9d:75:cc:67:ab:
7f:82:b9:8b:69:5e:24:0d:9c:46:8b:73:a0:5f:23:
c5:f6:48:92:6f:db:b9:52:e5:1b:3c:69:fc:6d:d6:
12:09:87:03:2c:fa:ae:a2:df:3c:ca:aa:47:24:c8:
a6:8d:18:48:c0:6f:e6:27:7e:a1:69:f0:90:ca:0c:
93:d4:ee:fb:c6:c5:8b:aa:c9:30:56:d1:af:6f:0b:
61:0c:08:86:f3:01:c9:0b:56:5e:53:a3:7d:9d:64:
8c:36:2a:ae:2c:44:23:b7:b7:0e:f2:bf:0e:72:e7:
36:8d:5b:de:3c:30:a5:28:e7:06:6f:ac:a2:68:d9:
af:48:97:5e:27:56:fe:7f:09:9e:03:d7:84:cc:af:
29:96:17:4c:d8:2a:3f:dc:45:87:75:c5:c9:8f:3d:
5f:64:1b:a9:ab:97:ed:5b:b1:8c:1b:05:ff:a2:77:
5a:9b:91:1f:c9:eb:0f:f4:6e:28:19:99:a1:79:58:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:0A:59:10:8A:E6:49:B8:37:72:66:3C:64:E5:7B:82:B9:2C:80
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:96:4d:78:11:c7:53:af:f8:27:91:23:34:09:6f:a0:64:
70:8e:29:17:2a:58:c3:bf:b7:05:75:8c:00:b0:4f:b6:d4:7a:
ed:ee:97:d7:62:e1:0f:68:38:17:fb:6b:4a:33:c9:b0:a2:4e:
5c:16:a4:a3:32:f6:fe:ce:d6:66:64:1a:34:5c:51:9d:16:ad:
41:30:7e:a2:7f:cd:e1:e2:17:a1:df:48:17:8d:74:bc:0a:b6:
d6:da:e5:f9:41:92:16:bf:12:0b:33:cc:97:5e:71:9f:b2:5a:
60:ae:bb:1b:47:29:ba:b9:9f:75:8f:4f:65:8c:e1:ed:ac:c0:
d9:68:3c:8e:38:65:fc:b5:f3:2d:b5:c1:bd:9b:5c:e5:1f:40:
ad:4f:4a:79:fb:87:b8:3b:1e:98:ff:a1:06:50:26:13:77:d4:
5d:08:83:f3:02:2e:e6:89:79:c4:95:f5:85:91:a4:7e:df:2b:
ea:50:9d:d0:42:54:82:0f:b4:29:1f:cd:3c:83:da:12:e9:5a:
9b:de:88:69:3c:c8:10:72:96:8a:44:43:62:95:22:b9:02:ee:
45:de:9b:c0:ec:b9:4b:63:46:02:25:ef:3e:15:81:e6:d5:5f:
e3:d8:0e:33:0d:c4:1f:f0:2c:e3:e2:50:21:ea:56:98:b9:7b:
9e:c2:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:00:40 2026 by rpki-client