Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: vBSh3S6NrWhozYF2H+4yxAFMi0bko2LlXhAca25hc4w=
Subject key identifier: 16:1E:50:B1:AC:31:9A:25:13:D8:4A:50:E4:FC:6E:8E:2B:AB:94:26
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01A14B05D0A9596F3D8874DE0AEC289CE47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 19F2
Signing time: Sat 17 Oct 2026 18:00:34 +0000
Manifest this update: Sat 17 Oct 2026 18:00:34 +0000
Manifest next update: Sun 18 Oct 2026 18:00:34 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: 8flDfG3xmsawT/ZvRDgBj2citZlphxbczzAUTmnw5zY=)
3: lUZbq53-e2beVUnIcCmk_r5xSWE.roa (hash: 3zeY9Wov3S/TjWt6YqkrG5O2fC3Yl7hArdx5k+jhibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:05:d0:a9:59:6f:3d:88:74:de:0a:ec:28:9c:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Oct 17 18:00:34 2026 GMT
Not After : Oct 18 18:00:34 2026 GMT
Subject: CN=161e50b1ac319a2513d84a50e4fc6e8e2bab9426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:4c:af:94:d7:88:e6:36:9f:15:ef:32:df:
c7:2a:09:39:79:14:13:a7:b2:f6:f1:17:05:fb:f7:
53:4d:f0:bb:24:a8:0a:a3:db:14:e5:f9:08:30:84:
d8:11:74:46:7d:76:ec:e3:63:ed:95:8d:f3:b7:b5:
a7:fe:02:c7:3b:40:ad:ea:ec:97:eb:0e:97:13:d8:
57:e2:13:ba:19:86:1b:6f:69:e5:59:46:a3:45:b1:
ed:0c:48:69:f4:2d:40:c7:bc:a9:f3:56:7d:c4:a2:
77:6a:ac:5d:01:f2:c0:a6:dc:90:03:48:2b:41:e7:
95:70:e8:b6:69:b6:77:3d:ee:f1:49:05:ad:a7:b9:
11:f9:e5:e6:2b:cc:fe:d1:a3:b2:2d:fc:5b:b3:36:
80:da:4f:0b:d2:29:ab:fb:63:c9:0d:76:12:10:f3:
36:8f:72:e4:ce:61:d1:0e:fc:79:7f:cf:1e:0e:bf:
de:7e:91:89:91:13:05:bd:ee:16:18:4d:06:79:d9:
f3:55:f7:80:d3:45:8f:47:bb:d8:38:91:bf:85:cd:
99:cb:87:e3:75:a6:d7:74:54:d9:21:2c:e2:f9:f7:
73:a2:d3:d7:e1:c2:8c:d9:5d:5b:3f:75:f2:c1:3a:
fe:9e:a5:88:11:51:55:ce:8d:88:3e:70:e6:58:7b:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:50:B1:AC:31:9A:25:13:D8:4A:50:E4:FC:6E:8E:2B:AB:94:26
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:9e:cb:42:51:65:e6:cb:6b:7d:89:a2:93:61:f3:45:36:
67:c8:8c:4c:3a:be:23:d1:03:67:d0:e5:9d:55:31:6f:ef:1a:
5c:05:c3:6c:3f:77:40:a9:b4:93:99:76:ca:00:4e:d2:5c:76:
a1:7e:7f:7c:ff:6c:76:59:bf:a9:c6:99:30:3f:bc:96:c1:55:
e5:22:e7:96:51:b4:9a:e7:ec:96:50:9f:48:b3:67:39:14:b0:
88:91:1e:80:8d:d8:f0:35:27:59:5d:2a:0f:8d:2b:0d:09:2b:
aa:01:72:b1:b3:e6:7c:58:0e:17:30:0d:08:ed:eb:0e:d1:fd:
38:64:10:a9:61:8f:f8:7a:50:5e:b3:d9:15:34:17:ee:2d:3e:
18:06:48:80:66:56:a2:cb:3a:f1:39:a4:7a:f8:78:f1:04:e9:
bf:33:f4:1a:c1:bf:0d:8d:e5:36:f4:52:47:83:54:d7:6a:50:
98:ba:d3:91:ed:ca:72:ea:0f:70:38:67:65:39:fd:fe:fd:22:
ea:69:1e:b2:72:2f:7a:1b:d3:6b:7f:a8:18:cc:53:95:0d:cc:
93:df:90:88:59:fa:c7:5a:6f:cc:76:aa:af:b8:14:1f:da:58:
bf:28:4f:47:32:c6:43:59:47:6f:2d:05:0a:89:f5:b7:e3:c3:
0a:a8:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:34:20 2026 by rpki-client