Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: q7jZJ7qzdwOp6mGnYyTYIFOu2vBFhrj5JxguTDn2aGc=
Subject key identifier: 88:A5:06:AC:81:2F:0B:6C:EB:3D:30:E4:2F:2F:D8:A8:7A:04:A9:94
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019D3909BB5ABFF2459CB27C7A6AF4CA54A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: SPmuoUXoA6tsZiCS0_pV74-AIEk.roa (hash: S9bFhQItClU/AaCIXnbTpcvt5Rg2XY1adevUwVNVVvo=)
2: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: BNgx33czHD3zoMhCu+MA0DhOHZtZxwWW70FQePyab4g=)
3: ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa (hash: L9aCvRxqO1gcLQJnMNhhLg422VtbcLvTCPUD+6YJIFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bb:5a:bf:f2:45:9c:b2:7c:7a:6a:f4:ca:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=88a506ac812f0b6ceb3d30e42f2fd8a87a04a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:da:c4:21:8a:ca:27:4c:59:bf:1e:31:ba:
c9:f4:57:1c:80:55:42:f5:25:9d:da:7f:50:d5:61:
e3:6b:f5:3d:d2:c7:fc:21:59:1b:f3:b6:7d:5c:13:
b2:48:c5:df:88:17:02:6a:7f:3c:38:13:8e:56:43:
64:19:60:39:a9:4f:9f:f7:f4:3e:89:68:ea:86:12:
bf:fe:ec:08:c5:00:21:4a:d7:73:33:43:d2:c0:92:
76:cc:7c:1b:cb:2b:27:ef:fd:70:35:88:88:cb:70:
2e:94:00:21:ea:d1:d5:66:d4:22:13:13:f1:a9:97:
42:42:2c:4d:23:e7:00:e2:a5:f9:73:a4:7c:2d:83:
40:e6:21:ba:ad:63:78:b5:0d:7a:94:b6:aa:d9:55:
4b:93:2f:14:62:b2:26:c8:67:3b:9d:a2:81:dd:bb:
e2:a6:90:8f:6a:d1:73:83:2c:ed:b5:de:dc:8a:a1:
4b:f7:a3:1f:77:df:45:33:93:c8:7b:ec:1f:c3:93:
f5:c7:97:fa:bc:37:c4:6b:20:97:58:67:9e:7d:8c:
61:99:f8:51:e0:f4:27:72:55:85:01:42:e3:07:72:
c1:ca:1a:a2:fe:03:95:dd:96:65:ac:94:35:92:d9:
3a:65:e5:a3:fd:a7:b8:6c:77:38:18:13:6f:4e:17:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:06:AC:81:2F:0B:6C:EB:3D:30:E4:2F:2F:D8:A8:7A:04:A9:94
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:7a:24:c8:73:e8:c3:99:04:f2:e9:2b:47:7a:2b:3e:9f:c4:
b7:ca:e9:b8:04:f4:b7:f4:83:5c:71:57:79:5b:1f:97:08:e9:
56:9b:05:f3:3f:f3:47:97:b3:c3:28:cc:6b:7b:df:c4:63:44:
5a:fe:fc:29:1f:3c:d7:7b:67:2e:ad:ce:b1:97:af:25:b6:32:
8b:c0:8a:a2:c9:2b:f0:f9:75:6a:ae:67:1a:45:9d:34:78:a8:
55:54:7c:d4:0f:56:6e:fc:01:93:3f:5b:c0:8d:00:1f:40:7b:
46:22:92:d2:cf:1b:91:9a:9c:a2:09:d7:3e:6d:25:25:34:3c:
49:56:9b:69:7c:8f:52:ad:08:c9:90:33:45:cd:fb:94:11:18:
c0:51:ce:57:4b:f1:37:f1:88:3c:1a:bb:ad:8c:2f:e6:9f:9e:
fb:53:58:8b:cf:3e:76:f3:6f:d3:6b:c6:4b:66:8f:fe:85:a9:
e1:d7:1a:28:52:c5:a8:d5:6b:e9:2a:6c:70:8a:85:51:f1:8a:
c4:ee:b3:8a:c2:30:59:1f:da:49:12:4d:0c:99:9b:03:9e:a9:
d9:86:e0:82:85:35:cb:ac:50:a0:d7:56:c6:e0:61:ee:d5:be:
1d:80:50:89:ce:0b:03:44:d7:3f:0f:9f:9e:ba:bf:ce:1a:d7:
97:1d:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:24 2026 by rpki-client