Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: O9rOtICRxa9aLEgK+t78bn4mN/C/vdkgN0ePii9Cp/Q=
Subject key identifier: 49:CE:17:81:63:4A:52:D0:3B:B9:6F:70:A9:30:BD:52:AA:8E:AC:44
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019EC1B6904CF009F6AD28399D47C132058A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 18A1
Signing time: Sat 13 Jun 2026 16:00:27 +0000
Manifest this update: Sat 13 Jun 2026 16:00:27 +0000
Manifest next update: Sun 14 Jun 2026 16:00:27 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: P/DyeBwgMB1XRle2Lbo5E3XtXPZ6YgbBh/mUrRRk7T0=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:90:4c:f0:09:f6:ad:28:39:9d:47:c1:32:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jun 13 16:00:27 2026 GMT
Not After : Jun 14 16:00:27 2026 GMT
Subject: CN=49ce1781634a52d03bb96f70a930bd52aa8eac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:8b:74:5f:ff:0f:41:7e:f2:8d:8e:b1:40:
bb:95:0a:c5:71:8c:b2:86:e7:9b:f4:a8:6b:d3:f2:
62:e6:1b:f8:f1:fd:d4:2b:c3:ef:6b:75:3d:52:26:
a8:7c:4e:2d:b7:a9:c2:4c:74:02:93:f2:90:37:da:
99:b7:5b:71:e6:2a:69:58:c7:4e:94:54:13:8c:60:
05:66:0f:c8:3d:cf:c5:46:ec:03:7f:76:c6:95:6a:
9b:3b:8a:a5:9f:3a:3c:ff:b7:55:25:cc:88:d4:41:
90:5a:25:8a:6d:77:d7:7f:89:a3:cc:e8:ab:d0:94:
cd:d7:86:50:d8:0d:96:40:8a:65:46:c5:92:ca:b8:
80:74:62:d5:83:b3:aa:6f:c3:62:b7:f4:fb:da:a0:
11:3c:88:5b:c0:64:f8:e6:a6:c4:f2:33:a9:56:c6:
f2:ee:6a:e6:b6:69:39:47:b3:0c:3e:d1:4f:55:df:
b7:97:59:6e:20:f9:fc:db:f3:af:f8:c5:c6:6a:d6:
85:fe:04:94:f4:34:63:f7:57:b0:f3:ef:4d:32:28:
a0:ea:22:7f:e8:82:9f:29:4e:bf:25:b6:47:f0:65:
e5:9a:4d:46:d3:85:a4:a4:4c:cd:ee:d0:f6:f8:aa:
0d:fb:f4:a7:e5:7f:96:8b:c5:a2:f5:28:ee:3f:b3:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:17:81:63:4A:52:D0:3B:B9:6F:70:A9:30:BD:52:AA:8E:AC:44
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ba:02:f3:03:78:6e:0b:f8:bd:56:e1:a8:cf:8f:4d:95:48:
e9:3d:ce:31:fd:88:a8:c1:d2:6a:95:ec:45:91:e9:ab:37:30:
47:4c:d2:56:a9:6b:fb:52:7a:f2:63:65:2f:e0:b1:b6:1c:a8:
e6:67:07:21:28:10:6d:24:e7:ac:90:c6:09:68:cc:50:64:c6:
58:b9:8c:40:53:03:9d:0b:56:ce:4a:f5:1c:fa:b1:96:77:e3:
e5:29:3b:bf:5f:6d:7e:41:23:06:1a:73:86:4e:c6:46:e6:19:
81:6e:0c:7f:09:13:a0:5d:78:c0:6f:8e:8e:b9:ab:a3:f9:63:
0c:b6:6c:ed:06:0c:f8:92:c2:d0:c8:06:55:ba:58:b6:da:27:
8e:fd:6c:18:6b:ca:43:35:e7:a9:a3:b0:13:82:c4:14:f5:30:
bb:b0:9e:1c:9b:18:d3:69:a1:8c:93:6d:db:ba:fd:88:bb:46:
32:8f:b9:8a:90:7a:6b:8d:8f:e4:d3:a9:82:61:b1:1f:60:bf:
9a:bc:54:6a:4b:56:56:3e:f7:f6:ad:e2:73:4e:98:30:68:21:
79:3b:41:3c:0d:61:d0:c4:65:05:6b:c6:0e:47:73:59:4f:6a:
8d:c9:bd:38:09:f0:15:40:d8:d6:95:d8:26:73:96:68:3d:f9:
2e:3d:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:52 2026 by rpki-client