Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: VMG8eMyX3ESDwZrsyZyIEM8zHMrMLywazHE/69/ii/8=
Subject key identifier: 12:56:09:BD:37:A8:0A:D4:08:06:34:5B:4E:51:4C:19:89:76:36:07
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 01A1219C332A29A2A385D0478EABB95A5D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 1A9B
Signing time: Fri 09 Oct 2026 17:00:47 +0000
Manifest this update: Fri 09 Oct 2026 17:00:47 +0000
Manifest next update: Sat 10 Oct 2026 17:00:47 +0000
Files and hashes: 1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: aQr1BzbaS8DkotNBpF6X3Uk8XhAIpnNX7zrEGKrXz48=)
5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:33:2a:29:a2:a3:85:d0:47:8e:ab:b9:5a:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Oct 9 17:00:47 2026 GMT
Not After : Oct 10 17:00:47 2026 GMT
Subject: CN=125609bd37a80ad40806345b4e514c1989763607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:b1:d7:e8:a5:d1:9d:17:aa:4c:97:e0:93:
32:ec:e3:5e:67:47:3a:44:7e:7b:57:bb:ff:3d:b2:
9a:87:49:17:f9:72:ba:79:78:90:ed:b2:27:6d:16:
47:96:84:1f:33:a5:63:f5:fd:14:28:fa:3c:29:4c:
f3:00:59:b9:e8:39:69:bd:af:09:79:2d:ff:47:7e:
c4:5b:e2:bb:e4:db:73:2a:de:c9:19:30:a8:65:f1:
ea:f6:3a:76:54:f9:59:d4:73:24:80:bb:f3:47:48:
84:36:ac:ee:1a:69:1e:61:1e:23:6c:89:36:3e:82:
7b:18:f9:bd:4d:ea:40:88:2a:17:b8:8d:d6:49:c6:
7f:87:86:14:5d:fa:8b:c7:62:61:85:3a:e4:bf:97:
74:12:5a:62:77:17:7f:0d:13:ad:64:40:44:3d:9b:
cd:89:10:d9:3a:a3:0e:be:07:0d:67:0e:c5:71:2f:
87:6f:da:d0:99:bd:8a:38:15:98:69:75:e6:de:7a:
16:bc:fa:96:85:6e:aa:a9:83:38:55:82:36:47:2c:
7b:85:ee:0a:d6:c1:5f:3c:51:4c:1d:61:cf:02:b8:
90:f7:27:4a:35:d5:b6:bb:19:d4:ba:d5:31:c6:a4:
b5:08:9e:a8:d1:25:a2:77:ec:13:6d:2f:5b:28:64:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:09:BD:37:A8:0A:D4:08:06:34:5B:4E:51:4C:19:89:76:36:07
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:7e:84:03:33:31:14:1d:86:76:9a:69:06:82:a9:75:88:
f4:1f:f3:de:32:49:2c:f1:4b:65:db:ae:77:a6:48:ee:fe:0e:
c4:6a:a0:6a:b5:1d:e5:67:bb:16:c7:89:28:41:ed:6a:4d:d3:
1d:cb:16:dc:b4:a1:b6:eb:aa:36:5b:54:4d:a2:7a:ce:35:0e:
4d:70:30:a6:80:0a:5c:d7:38:bd:67:1f:86:e2:71:91:36:3e:
18:09:b7:e7:a2:9a:46:4a:57:a5:b4:a9:36:6a:d5:5a:a3:d4:
b3:e8:2d:b8:b0:9c:62:cd:1e:29:d4:d5:a3:59:81:0f:68:4f:
83:91:88:33:d4:62:f9:57:54:ab:c3:24:d6:16:0a:f9:16:21:
86:ce:57:05:57:3e:9a:6a:00:bb:93:82:bc:4d:6a:78:02:cc:
bd:1e:8e:5c:c4:63:07:24:86:9c:3d:c4:de:6d:94:fa:15:8d:
a5:cd:8c:ce:6c:ce:b7:44:e8:f1:f6:31:58:29:2b:ba:eb:2d:
61:5a:89:f0:ed:7c:b9:f1:71:fc:b9:19:f4:a2:81:ab:cf:ca:
d2:a6:20:c4:f3:54:28:fd:57:65:53:41:35:06:1f:bc:6e:da:
e3:93:4d:8a:eb:a0:f8:fc:6a:a7:a6:80:d9:d7:74:30:b8:e6:
f0:6c:b3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhnDMqKaKjhdBHjqu5Wl0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux
ZjBiMmUwHhcNMjYxMDA5MTcwMDQ3WhcNMjYxMDEwMTcwMDQ3WjAzMTEwLwYDVQQD
EygxMjU2MDliZDM3YTgwYWQ0MDgwNjM0NWI0ZTUxNGMxOTg5NzYzNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSx1+il0Z0XqkyX4JMy7ONeZ0c6
RH57V7v/PbKah0kX+XK6eXiQ7bInbRZHloQfM6Vj9f0UKPo8KUzzAFm56Dlpva8J
eS3/R37EW+K75NtzKt7JGTCoZfHq9jp2VPlZ1HMkgLvzR0iENqzuGmkeYR4jbIk2
PoJ7GPm9TepAiCoXuI3WScZ/h4YUXfqLx2JhhTrkv5d0Elpidxd/DROtZEBEPZvN
iRDZOqMOvgcNZw7FcS+Hb9rQmb2KOBWYaXXm3noWvPqWhW6qqYM4VYI2Ryx7he4K
1sFfPFFMHWHPAriQ9ydKNdW2uxnUutUxxqS1CJ6o0SWid+wTbS9bKGQADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJWCb03qArUCAY0W05RTBmJdjYHMB8GA1UdIwQY
MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt
ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx
LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJJ+hAMz
MRQdhnaaaQaCqXWI9B/z3jJJLPFLZduud6ZI7v4OxGqgarUd5We7FseJKEHtak3T
HcsW3LShtuuqNltUTaJ6zjUOTXAwpoAKXNc4vWcfhuJxkTY+GAm356KaRkpXpbSp
NmrVWqPUs+gtuLCcYs0eKdTVo1mBD2hPg5GIM9Ri+VdUq8Mk1hYK+RYhhs5XBVc+
mmoAu5OCvE1qeALMvR6OXMRjBySGnD3E3m2U+hWNpc2MzmzOt0To8fYxWCkruust
YVqJ8O18ufFx/LkZ9KKBq8/K0qYgxPNUKP1XZVNBNQYfvG7a45NNiuug+Pxqp6aA
2dd0MLjm8GyzTg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:01 2026 by rpki-client