Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: j2BU+srB9KO1QNvQaMvdAamw0vUSVLF8eXCEpWnondc=
Subject key identifier: 27:E1:3C:71:E5:37:45:29:57:AC:4E:2F:C8:6A:4B:5E:D3:86:65:E7
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019D9C2C532A0F8426BB07B6339170DA1C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1809
Signing time: Fri 17 Apr 2026 16:00:43 +0000
Manifest this update: Fri 17 Apr 2026 16:00:43 +0000
Manifest next update: Sat 18 Apr 2026 16:00:43 +0000
Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: MJUm2HqaJ45cLohC6JARYj/r74val06BdBtR3PjcQdQ=)
3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:53:2a:0f:84:26:bb:07:b6:33:91:70:da:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Apr 17 16:00:43 2026 GMT
Not After : Apr 18 16:00:43 2026 GMT
Subject: CN=27e13c71e537452957ac4e2fc86a4b5ed38665e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:7f:53:39:84:0f:76:38:a0:26:c7:81:97:
b2:1d:c2:67:da:3e:37:50:96:f9:b9:0b:16:e8:7c:
91:fa:78:dd:a5:cb:fe:8a:04:e0:a4:bb:4b:bb:d0:
d6:a1:56:f5:d1:5b:c1:fb:ec:e8:fa:2f:38:64:2d:
17:be:3a:20:8a:36:c7:40:a6:1e:cf:e2:e9:63:8b:
79:8e:9b:e4:57:c2:34:5f:a2:57:61:cb:37:ea:3d:
6c:ed:cd:3c:6d:51:ac:75:df:fe:16:00:e9:8a:10:
59:be:f4:80:60:59:b9:17:b4:f5:db:21:a4:47:f1:
96:e8:bd:2a:4e:6a:95:16:a9:cf:1c:d0:e5:25:8e:
35:7a:6d:d5:6d:db:df:f8:ba:27:c1:f0:07:b3:37:
2c:98:d5:69:59:68:0c:25:6b:69:06:e1:50:73:61:
16:d7:49:e3:c0:14:37:4e:8e:fd:a3:42:2c:ec:a3:
fc:a5:64:8c:43:c9:ec:b0:fe:3e:41:44:18:bf:54:
b8:48:3c:4f:3c:67:a2:1f:3f:a5:2d:02:3b:e8:69:
cd:7c:e8:ed:82:90:ab:77:15:ce:2a:d8:66:40:ee:
3b:c7:29:67:11:fc:bf:10:e3:21:97:42:df:92:8e:
6e:3e:0e:c8:1f:bd:b8:0c:7f:7d:70:d4:ae:3c:b1:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:3C:71:E5:37:45:29:57:AC:4E:2F:C8:6A:4B:5E:D3:86:65:E7
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:56:b4:c4:cd:d2:7a:ce:6a:2f:9d:c0:9a:30:77:a0:b3:
c1:97:8b:f9:52:ad:4d:c5:3f:57:28:63:2f:8b:be:b8:b8:4c:
49:8d:27:a5:9d:f7:34:6d:cd:69:dd:28:77:ca:89:cc:69:e3:
7e:31:33:fe:f6:45:bf:7f:fb:1f:57:20:d3:e0:68:3d:d4:aa:
87:92:e5:71:47:99:fe:7c:28:84:9a:ca:70:0e:bd:39:f0:54:
ca:c0:af:89:fd:b5:f3:f8:16:9b:47:8f:36:b5:34:79:08:ba:
21:9a:b8:6e:8e:b0:c5:68:c4:34:9d:ae:bb:21:57:7e:de:eb:
36:ae:40:63:a6:71:6d:37:04:9d:af:fd:cc:6e:39:cf:19:d7:
e9:82:38:c2:09:6b:12:77:7e:a6:d4:3f:16:11:2d:51:8c:03:
49:0e:fe:e2:48:1c:12:d5:5f:63:11:63:3c:e2:65:32:4e:3a:
e7:4f:c6:93:97:1a:4d:d5:6c:af:cf:26:16:6d:8b:09:f8:a1:
9e:60:2e:cc:91:fd:65:6b:d6:42:16:c1:20:64:68:6c:b5:c7:
ca:4c:f8:8c:57:74:79:67:82:b4:4a:1a:dd:62:6e:e5:9e:b0:
41:ce:a4:77:38:2c:4c:77:37:88:9c:a3:5c:74:2d:31:40:9e:
63:fa:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:32 2026 by rpki-client