Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: mZrGsCC5rLAE44cpQbhk+bVxOG0Q+L2Qwe+KbJ4LnkI=
Subject key identifier: 30:A3:5D:E1:71:71:16:43:09:FB:2E:26:66:E8:F0:32:28:1B:A4:9B
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 019CABD8E718EF5B1180F34C5F8B6122AFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 1543
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: CkDZy0vHEeVACtT5dWGXXEt2g-Q.roa (hash: BDhDMAFwjHTIfBm63KAK3A2wmzDVWeqFjAWRvTCerUc=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: JuoIuO7/50rkICu5KbrPQ2T0fYS9ydHqGV85dx/ojLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e7:18:ef:5b:11:80:f3:4c:5f:8b:61:22:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=30a35de17171164309fb2e2666e8f032281ba49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:9b:d5:c1:3a:33:1f:68:a6:e1:ed:e2:ea:
65:1c:5a:91:d0:38:92:04:01:80:1b:9d:7e:51:85:
05:0e:1f:30:d5:24:c8:b2:01:6d:6c:39:92:95:6c:
d7:87:40:dc:ff:2a:a0:a3:7e:4d:0b:65:2f:ad:a0:
6c:42:87:e3:ec:e0:39:f8:3d:f3:49:46:b3:6d:a4:
a6:ec:57:41:87:a7:33:02:e7:d0:47:99:43:f7:96:
ae:bb:24:78:f9:89:04:90:d4:0a:d0:1e:23:9d:6b:
65:b8:d5:e4:67:23:ab:6c:22:01:3d:bc:e3:3a:d9:
29:3c:40:6a:61:5a:9f:0e:cc:28:2f:d6:ad:f4:6e:
49:8a:25:0b:de:6d:5e:d9:6f:9d:41:53:09:29:85:
6a:e3:09:ef:70:fa:6a:20:59:48:21:50:a8:fc:bd:
49:8a:c1:c3:5b:25:b7:d5:4e:61:0c:45:5d:87:a0:
0a:c9:5d:9a:36:fc:53:5f:d2:e9:df:26:b1:d3:1f:
0e:fd:e9:a8:60:54:6c:3d:8b:bb:5f:6a:61:b9:ca:
e4:e9:03:1c:43:b7:98:a2:b7:c3:fb:98:3c:c1:f3:
d0:c1:1c:59:7b:ab:de:98:de:b3:55:80:2d:29:6d:
30:e8:a0:00:df:01:fa:da:c0:ae:1e:f6:6d:15:e0:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A3:5D:E1:71:71:16:43:09:FB:2E:26:66:E8:F0:32:28:1B:A4:9B
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:00:a0:a3:04:ba:43:8b:5b:f0:85:91:53:42:5b:90:d9:
3e:ed:7d:b9:9c:68:aa:ae:94:c1:48:cb:09:9e:7b:e0:80:92:
0c:fc:63:5d:e7:d8:8e:76:6c:88:5a:b6:09:96:ba:ba:f2:5c:
2f:87:eb:d6:c9:bb:30:b0:66:39:16:f5:e4:d6:1f:88:70:75:
77:4f:b2:39:16:7c:ac:4b:13:77:14:63:c6:2f:7f:6e:a2:40:
f7:33:32:e4:f9:c1:8a:8e:f0:47:85:0a:62:1c:ab:b2:04:b3:
68:c3:ac:73:40:ca:40:fe:f2:ec:a7:77:7a:e8:19:aa:4e:26:
59:ed:c4:1e:85:47:a6:32:35:97:8e:c1:c9:6e:8d:08:6d:f5:
a0:1d:6e:4a:67:53:d0:f9:98:26:58:75:fe:c8:d3:26:6c:e7:
22:95:3c:ee:96:bd:84:b8:a0:2c:f6:7a:fd:50:43:9c:e3:72:
03:c1:20:5e:1b:07:5b:19:f9:b5:aa:94:c9:c3:db:75:34:8c:
5b:d0:cc:af:cd:ab:59:d2:75:2c:d8:36:66:45:a6:ae:92:58:
9d:fb:de:5c:f1:70:e5:b0:71:b1:a0:c0:cb:25:2c:55:1b:c1:
05:60:10:ca:33:1f:45:6a:b4:e6:c0:5b:f4:51:cc:9e:d0:1f:
2f:70:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:57 2026 by rpki-client