Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: V3urG87bdAF9FrUAJ/+HSlTOsO9XPzylKgj8Ku9YZaQ=
Subject key identifier: 17:02:99:17:0A:50:7B:71:E8:C6:62:C3:E3:4F:B2:BC:9A:8B:0F:96
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019FAB62EBD98E8001A36B9E24BD4635C891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 191A
Signing time: Wed 29 Jul 2026 01:00:14 +0000
Manifest this update: Wed 29 Jul 2026 01:00:14 +0000
Manifest next update: Thu 30 Jul 2026 01:00:14 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: oYR6MIyc1tyIvI4C5idyvg2RUxtyNCChEIKbmGtakws=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:eb:d9:8e:80:01:a3:6b:9e:24:bd:46:35:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jul 29 01:00:14 2026 GMT
Not After : Jul 30 01:00:14 2026 GMT
Subject: CN=170299170a507b71e8c662c3e34fb2bc9a8b0f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:1f:36:38:85:c5:be:d1:e5:fa:1c:11:75:
de:b7:03:30:39:c6:ea:e2:5c:4a:8d:fc:ac:0d:53:
43:b1:47:c8:d1:ab:20:af:f8:3e:1d:50:f5:59:ad:
cc:99:40:42:d7:09:e7:d4:9f:95:f8:a4:9a:8f:22:
92:5d:ff:c5:40:77:df:4a:1d:6e:e9:d4:ec:d1:0c:
a2:a3:ff:c1:e0:40:8f:cb:d1:d0:44:5e:a0:f8:1f:
99:f5:9a:5b:69:2f:51:22:f0:a3:21:df:c8:22:d5:
b1:2f:cd:c3:00:5d:44:31:78:05:b9:79:6b:63:03:
8d:fd:32:c1:4b:30:f6:36:97:86:a0:ce:ca:54:a1:
b4:41:83:74:95:71:38:ce:e5:32:78:ff:a0:ef:19:
81:4f:12:c2:07:16:0e:0f:c8:5c:6d:a9:de:9d:dc:
53:23:29:c6:d0:d0:02:e2:2e:a3:48:6d:be:b0:3c:
f6:f4:00:05:52:be:f6:cf:95:40:65:53:ff:ad:db:
d4:6e:d6:58:62:b4:fa:1c:b6:ad:57:5b:bd:01:b6:
4d:49:57:c0:c5:d3:b6:bf:7e:88:3f:1c:78:96:67:
2a:ff:fc:bc:73:dd:d2:61:b1:bb:5a:6a:f4:f1:bf:
76:63:a9:12:79:60:a2:f4:70:99:92:8b:9b:e8:d9:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:99:17:0A:50:7B:71:E8:C6:62:C3:E3:4F:B2:BC:9A:8B:0F:96
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:26:c1:10:65:77:3c:2a:6b:02:a0:12:93:21:1e:ac:75:0f:
0f:00:a9:40:fd:69:7f:13:b2:65:d3:de:fb:f6:87:7a:1b:ac:
96:93:78:dc:f7:d7:c2:ac:e8:df:a9:9d:a6:3f:22:44:1d:60:
b9:62:d5:20:f6:5c:93:d8:12:8c:a8:4e:d4:9f:89:d3:29:22:
91:0b:d3:a1:3c:a9:1a:6e:1e:03:cb:83:a8:f1:ce:31:93:43:
9f:6a:04:8a:48:70:61:8b:82:4e:af:81:8d:d2:7f:d5:07:98:
cd:fb:ac:83:1f:cd:7e:59:95:3e:d8:93:8d:f3:87:41:67:6f:
76:82:68:0a:ee:1d:ee:cd:d1:95:4e:bb:aa:5b:04:45:c8:d8:
ae:f9:71:8d:fb:14:98:08:0d:43:37:1d:85:88:37:15:86:c8:
97:6b:57:83:b9:33:5f:57:53:17:65:fc:93:dd:56:09:a4:9f:
16:8e:28:3b:b5:3d:49:02:ef:56:95:dc:db:c3:4e:1c:e8:dc:
d2:86:08:c8:1f:99:07:ff:60:8e:9f:91:e3:c1:99:8a:7a:c0:
13:a7:92:15:45:79:87:9d:02:89:94:f6:46:67:e5:5e:46:b7:
1f:bd:27:c6:dd:76:70:a0:35:fc:dc:55:49:b4:af:ad:d8:02:
76:b4:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:54 2026 by rpki-client