Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: 1+IT4OwCwK3A1ZzZUQfFvuG4qFmzBCXwDEXvhKo1lWM=
Subject key identifier: 17:EF:33:42:F4:BC:AF:D4:43:8F:D0:26:CC:10:FA:7E:CE:11:76:0F
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 019DA4F9133ED94D6CF8E88A26FF80951F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 15C4
Signing time: Sun 19 Apr 2026 09:01:19 +0000
Manifest this update: Sun 19 Apr 2026 09:01:19 +0000
Manifest next update: Mon 20 Apr 2026 09:01:19 +0000
Files and hashes: 1: CkDZy0vHEeVACtT5dWGXXEt2g-Q.roa (hash: BDhDMAFwjHTIfBm63KAK3A2wmzDVWeqFjAWRvTCerUc=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: uQ8ex3IgX2YCU1MZa2sOItSrp5cweUqyZBjZcKNfdCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:13:3e:d9:4d:6c:f8:e8:8a:26:ff:80:95:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Apr 19 09:01:19 2026 GMT
Not After : Apr 20 09:01:19 2026 GMT
Subject: CN=17ef3342f4bcafd4438fd026cc10fa7ece11760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:64:ee:80:9e:eb:b5:47:8f:78:50:b5:d5:
cf:b2:7e:d3:ff:eb:6c:5b:11:e2:19:c0:b2:94:51:
73:23:55:e8:dc:3c:a9:13:4e:74:04:f5:65:99:13:
a0:09:2e:6a:9e:2e:8c:55:64:df:e8:d4:e6:aa:4c:
0f:ee:96:62:b1:96:63:f3:7a:ea:8b:bd:dc:95:e1:
a1:02:5c:32:84:2b:24:c0:d4:4d:bf:6f:8b:7e:8d:
88:07:76:0e:05:6c:24:ba:30:20:cd:c4:55:da:ea:
9d:fa:11:7d:0b:6b:29:bf:c0:56:48:7c:db:87:c1:
34:55:3d:5a:80:92:44:12:c4:4e:13:cf:20:4f:a3:
b9:d4:63:e5:2b:a5:7d:db:54:e2:9c:ca:26:2e:2a:
a5:f3:b5:ae:cf:f8:b7:90:03:52:b8:56:f5:ae:55:
c0:b8:b3:ba:ad:52:f9:98:16:ae:09:00:ca:a2:a3:
03:a2:c2:d6:10:28:55:78:c2:07:e3:6f:a7:e7:80:
10:e3:3a:86:e7:ae:fb:24:db:86:08:ca:a1:3a:79:
41:5a:9e:d8:44:d2:e7:38:03:ef:67:11:c5:98:34:
28:2b:0e:bf:70:e8:3d:14:c3:3c:e3:cf:59:5f:f2:
05:bc:0b:1d:ab:53:ef:28:ac:32:f3:c6:1d:1c:d3:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:33:42:F4:BC:AF:D4:43:8F:D0:26:CC:10:FA:7E:CE:11:76:0F
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:34:57:d4:56:80:4c:8a:90:da:b8:33:a7:91:23:4c:e9:b3:
db:fc:6b:0b:63:59:65:7a:f7:1d:c6:df:3f:0a:75:fe:16:59:
12:e2:0b:22:cd:a2:29:41:87:09:bb:57:ec:3d:a3:39:45:7a:
cb:d3:f2:b3:5c:84:56:68:2e:a3:1f:aa:34:c0:0e:4e:18:00:
e3:97:c2:bd:8d:9c:28:54:ee:7c:39:37:79:b1:1e:1c:73:d3:
b2:69:f7:73:17:6f:e4:31:6d:63:fc:5f:55:db:89:91:90:79:
ef:f4:d0:6c:7d:d0:c8:21:9f:99:32:c7:cf:ee:75:5c:ad:22:
f6:55:ca:0e:98:d2:62:e5:33:37:d1:22:60:73:72:e0:e7:50:
47:21:5f:3b:9e:8b:46:9d:be:dc:ad:c4:27:43:08:b3:98:05:
24:b3:c8:2c:6b:54:ac:a1:26:b1:35:a6:f6:7e:af:28:15:89:
43:7f:d1:06:1a:d8:e0:a8:48:a6:cc:0c:4e:c7:c5:ea:a7:c7:
17:f7:8c:7d:69:43:b8:79:10:63:10:09:97:8e:76:27:e7:86:
6a:e2:fe:cf:17:f4:5a:9c:5d:80:8e:c5:1a:65:e3:50:7f:a8:
f5:2e:c7:a0:2f:9b:86:b1:51:7b:44:5f:b5:29:41:e8:77:4b:
a0:d2:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:57 2026 by rpki-client