Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: iLy/pMvWbJCUYzCXhD01QahbAyHqOgWOXgP0bKftZH0=
Subject key identifier: 7B:72:28:EA:3F:B7:2D:A1:2F:83:B7:35:62:3E:86:57:0C:9F:11:33
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 01A0F78E53B362602033CFA23C1D9B90BEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 13:01:34 +0000
Manifest this update: Thu 01 Oct 2026 13:01:34 +0000
Manifest next update: Fri 02 Oct 2026 13:01:34 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: l4yYzeSgdPPtjCO9veM8Wjs+3b8lhcpSIXKI1z09GzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:53:b3:62:60:20:33:cf:a2:3c:1d:9b:90:be:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Oct 1 13:01:34 2026 GMT
Not After : Oct 2 13:01:34 2026 GMT
Subject: CN=7b7228ea3fb72da12f83b735623e86570c9f1133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:17:c2:1e:60:78:be:0e:b4:55:7c:03:44:a8:
59:e0:b1:d1:f7:dc:f4:f6:50:db:43:3d:f9:af:d8:
76:a0:14:a0:49:b6:c2:75:63:55:b6:37:b6:ff:29:
ee:21:d1:57:00:e6:ce:3a:0b:5f:d1:f6:d4:a1:9c:
f9:2a:99:8f:ca:cc:80:e5:6c:f9:62:4b:be:78:eb:
40:e6:5c:4b:82:dc:19:75:64:df:45:14:91:c1:5a:
47:13:82:b0:ca:24:92:01:90:15:d0:39:8d:fe:8c:
86:6a:78:3a:d1:32:2b:71:a1:87:8e:f7:49:83:d7:
46:9e:c3:9a:5c:fa:7d:80:67:d2:1d:78:59:1e:49:
32:81:63:17:a8:b2:07:e6:4d:ec:90:61:23:47:8d:
8d:0d:6f:fe:d0:28:29:19:b1:9a:6f:8c:72:83:ae:
f8:0b:1e:9b:88:73:8f:9f:7e:35:9f:18:f2:78:26:
0f:8b:53:58:08:38:21:ff:06:f7:af:24:40:7c:c9:
6e:38:a1:fb:a0:33:02:30:7e:b5:98:38:1c:f5:19:
cf:35:3d:d3:ce:b7:51:b6:c1:50:bf:4d:8f:0d:0c:
53:4f:5d:a4:8e:ba:2a:50:55:96:90:5e:dd:8c:b2:
87:2b:15:bb:98:ea:30:04:8d:0a:10:e0:6f:ec:db:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:28:EA:3F:B7:2D:A1:2F:83:B7:35:62:3E:86:57:0C:9F:11:33
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:8f:1c:53:1b:20:dc:b7:1c:56:b4:35:cd:18:b3:7f:54:
4f:00:5f:dd:37:1d:df:82:41:a3:86:3f:96:b5:84:09:74:2b:
52:6e:10:64:06:5f:7e:32:1f:b2:7e:c7:fe:5f:27:76:27:6f:
17:e8:99:12:07:38:f5:bb:df:95:34:fb:98:3c:39:78:fa:cc:
ff:8f:49:ca:9a:0e:53:75:5f:bc:c2:7e:8e:58:11:e7:db:cc:
0e:30:42:84:0c:78:c0:93:d5:45:dc:6e:fc:e9:41:ba:3d:ee:
41:be:95:44:a1:fd:bc:7a:e7:8f:f2:4b:ad:56:2c:3b:12:fe:
8a:ab:71:1c:7d:e7:61:f5:cb:aa:bc:51:12:6f:e6:4c:e2:35:
0f:10:29:34:f1:27:76:4d:18:94:cd:b5:2d:fa:dd:e4:ea:00:
b4:41:9a:84:1b:15:51:a8:95:ae:e5:64:9e:06:eb:f3:5b:8f:
e5:53:22:6e:eb:aa:a9:e7:9c:c8:fb:a1:0d:1a:11:d5:ee:d2:
e4:76:a4:cf:3c:b5:44:cc:4d:ba:15:b4:3a:59:02:68:08:d2:
c7:11:17:0e:fe:a1:07:9f:af:5d:32:6f:dd:9b:d9:9e:c8:84:
36:a5:70:67:28:50:a7:9c:f2:4a:57:e2:a5:6b:3d:e4:18:fd:
60:b5:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:10:54 2026 by rpki-client