Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: t5PIpibHDiGs4WI4Xi4+2NJfcqcGRuCczFaN/EUT6uE=
Subject key identifier: 52:AB:65:84:01:BC:D5:F7:9F:C8:4C:D4:83:57:A2:19:11:7F:11:A9
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019CAEA30BA42E1DEBE5C9F5CA3820DB64FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 178E
Signing time: Mon 02 Mar 2026 13:00:46 +0000
Manifest this update: Mon 02 Mar 2026 13:00:46 +0000
Manifest next update: Tue 03 Mar 2026 13:00:46 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: ypL6FsHu6kREbJEiYwKNxxh626l1g8jasFJ0vSU4UUY=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:0b:a4:2e:1d:eb:e5:c9:f5:ca:38:20:db:64:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Mar 2 13:00:46 2026 GMT
Not After : Mar 3 13:00:46 2026 GMT
Subject: CN=52ab658401bcd5f79fc84cd48357a219117f11a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:ee:7f:f6:1c:27:f7:5b:09:8f:4c:f3:14:
1b:61:cb:58:f9:3b:03:70:87:d8:28:1a:f5:cb:da:
e1:56:70:0e:4d:f4:fb:56:f6:5c:e4:14:be:cf:a0:
74:cb:d4:2b:78:a8:14:24:3f:88:7f:a2:70:59:dd:
06:fb:c4:5b:7d:73:2d:57:54:0f:15:27:a3:e2:f2:
21:09:4f:91:85:0d:3e:6f:cb:cc:b5:50:ab:b1:9a:
1a:e9:af:9c:60:18:ed:d0:cb:f5:8b:9b:4b:31:ae:
ad:b8:a9:c9:46:2a:68:0f:ce:cc:79:f5:d4:1c:31:
92:23:1f:ea:7f:55:27:0b:0e:77:39:c5:74:64:dc:
f9:95:ce:a4:d9:04:68:c1:f9:02:08:4b:0c:fb:63:
c8:8e:d3:ff:02:93:ad:da:db:47:7e:89:c9:0a:95:
65:1d:f3:ad:3c:28:31:2e:a0:f9:a5:05:5e:16:09:
3a:c3:db:98:df:72:93:46:fe:1a:1a:fa:3c:49:d6:
e1:32:e0:99:ba:ac:61:e4:bb:1e:6c:d2:f9:67:d5:
7c:37:8f:15:58:41:b8:51:52:8f:91:d9:ef:d5:1b:
13:a0:05:8a:da:56:a0:8c:70:e7:7b:38:7e:99:c1:
28:99:32:b9:87:47:0d:89:b1:dc:2c:5f:f1:90:4b:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:65:84:01:BC:D5:F7:9F:C8:4C:D4:83:57:A2:19:11:7F:11:A9
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:86:93:0f:81:84:9a:f5:ee:37:be:6f:99:c6:3c:1c:91:f1:
b8:45:0b:22:0d:04:02:be:68:06:23:ef:4a:43:77:ed:87:bb:
fb:6d:91:0a:6e:4d:8c:b0:d9:94:42:75:c3:f3:3a:d9:20:f5:
e1:6b:b2:f0:5a:c7:c1:32:f3:08:ef:33:ee:c2:b3:2b:9c:ea:
9c:65:38:83:14:e9:72:4e:c2:bf:b0:b9:a2:72:9b:7f:eb:c6:
1b:6d:ce:71:e0:25:a0:4f:4e:a0:a5:6d:2d:a9:46:eb:e0:5c:
73:93:2c:b6:f6:da:d7:ca:36:2a:00:cd:c0:ca:cc:54:e7:4f:
7e:b9:8e:e7:c7:11:19:85:59:6e:fa:9a:5e:2c:af:a0:86:f3:
6b:94:4d:d0:fd:68:e7:f4:92:e8:8e:8c:7b:dc:58:ea:b2:f5:
62:34:82:ef:0c:80:6b:70:e3:02:cc:b2:de:0d:50:03:40:bb:
ae:79:3c:10:fb:a4:7e:7f:12:12:73:e2:73:2e:ca:33:6c:8b:
4c:7e:ac:0d:48:03:e2:88:77:60:f4:8d:1a:15:61:32:9c:f6:
de:de:74:5d:05:b1:52:ef:21:76:0a:22:c6:9e:f3:c5:2c:42:
bf:7c:ee:ff:b9:0b:8e:63:7f:94:8e:07:79:22:08:3e:d5:13:
3c:91:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:01 2026 by rpki-client