Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: L94TFpX7dtUsHCEEiaxIhKLrvrJHjXcxOFO20PLR/5Y=
Subject key identifier: 5C:4C:C4:05:CB:1E:84:E1:A0:BB:BF:05:B0:6F:FA:2D:CF:33:DA:65
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01A131EB2D0199ED9761D6DCA5554B35EBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 19E5
Signing time: Mon 12 Oct 2026 21:00:58 +0000
Manifest this update: Mon 12 Oct 2026 21:00:58 +0000
Manifest next update: Tue 13 Oct 2026 21:00:58 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: NOS9JmWQQoHolBCYn88omPZEg0eWnmq880ZHo39gnI4=)
3: lUZbq53-e2beVUnIcCmk_r5xSWE.roa (hash: 3zeY9Wov3S/TjWt6YqkrG5O2fC3Yl7hArdx5k+jhibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:2d:01:99:ed:97:61:d6:dc:a5:55:4b:35:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Oct 12 21:00:58 2026 GMT
Not After : Oct 13 21:00:58 2026 GMT
Subject: CN=5c4cc405cb1e84e1a0bbbf05b06ffa2dcf33da65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:8c:35:a8:4e:4a:96:97:97:d1:eb:2e:ec:
51:69:89:ec:ca:0c:31:02:00:90:65:18:9e:f3:e7:
b0:2a:5c:c7:cb:94:fc:8b:8d:44:c9:e4:2f:9f:5e:
07:f7:04:2c:b1:f3:b8:27:ae:09:3a:cc:37:7c:25:
c2:4e:ec:78:77:72:01:00:49:88:3e:40:e3:20:ce:
ea:94:cb:5f:99:da:bf:32:4c:6f:fc:5b:d1:f1:5a:
24:7d:17:b1:25:db:cf:d7:b1:48:1b:ad:65:c0:7c:
c2:b6:9c:9a:fc:19:4a:75:b8:81:63:de:ae:b0:22:
93:2f:b7:5d:44:52:ae:f3:92:ea:74:a2:cf:67:de:
8b:01:6f:f5:48:3e:32:7c:24:df:fa:3a:06:71:8e:
94:2b:40:6a:c6:76:f2:b9:fb:b3:14:c2:fe:39:c8:
d8:40:18:8a:fa:67:8a:44:1b:89:7b:9e:58:6e:12:
26:62:b8:c1:d0:27:1f:8c:4c:44:f7:47:4d:3b:09:
eb:d1:8c:fd:37:2a:5e:26:1d:6f:7b:7b:85:1b:35:
db:7b:df:81:a6:c7:d4:ef:be:39:15:1d:01:d0:3f:
a9:df:2a:c4:73:71:03:1e:e7:3b:a1:76:54:21:4c:
e4:3a:cf:9f:fa:6b:a2:f5:ea:9c:80:a8:a3:6c:1b:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:C4:05:CB:1E:84:E1:A0:BB:BF:05:B0:6F:FA:2D:CF:33:DA:65
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5a:05:6b:85:a6:c5:3f:42:c3:85:b7:fa:47:b3:69:a5:35:
1e:12:dd:fe:fb:fe:00:2b:1a:ae:e2:6e:fa:a9:90:3c:ca:8f:
80:ee:2c:8f:19:12:10:3e:96:f9:6e:34:c0:61:c0:d4:a1:77:
6b:cd:32:f7:65:7a:bc:18:bf:b8:dc:2c:69:50:8b:8e:35:a6:
c6:39:4b:99:e1:9c:2a:7e:2f:10:1c:89:90:70:b3:1d:1b:d1:
21:1c:d2:57:55:39:ac:07:c5:0e:be:de:cf:3a:a7:72:cf:1d:
73:07:17:30:33:c0:a0:3d:04:3b:2c:bc:60:1b:2d:30:f8:83:
70:4a:3f:05:07:a8:4d:36:14:11:bc:7f:59:93:be:d1:37:0b:
4b:8e:ff:dd:15:e3:ae:17:7a:48:fd:ab:4e:da:12:c4:18:84:
a1:34:33:67:74:0e:67:aa:a2:09:69:eb:d0:a5:13:a0:55:7c:
ad:56:de:88:30:12:89:9b:2c:5a:33:e5:a5:75:64:df:07:9e:
90:3e:c7:57:56:50:02:a1:68:23:ca:81:54:2a:80:65:fc:e7:
f7:d0:d9:02:94:22:db:65:61:f5:74:08:69:39:b8:d2:c7:b9:
53:96:40:92:0c:f4:bb:0e:88:2b:55:64:e0:cc:ec:77:5b:9f:
d3:3b:87:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:38:33 2026 by rpki-client