Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: LB9nr6Ht2RqHt33ZV9TLsO/ir84DUERtgE/v8ZM0Sxk=
Subject key identifier: 13:CC:24:23:71:D6:BA:C1:7A:B7:B4:09:94:FC:6F:E2:BB:54:B3:60
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019FAB63E77374F043A9FEFD2C16C6F36F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:18 +0000
Manifest this update: Wed 29 Jul 2026 01:01:18 +0000
Manifest next update: Thu 30 Jul 2026 01:01:18 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: i/OR7sLSykmxTM/2eX6tib31bTcdMyaO0s/11HO7fAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e7:73:74:f0:43:a9:fe:fd:2c:16:c6:f3:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Jul 29 01:01:18 2026 GMT
Not After : Jul 30 01:01:18 2026 GMT
Subject: CN=13cc242371d6bac17ab7b40994fc6fe2bb54b360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:bf:fe:b6:d0:fc:29:fe:3a:a2:f9:cd:c6:
32:6b:b2:bf:2a:e1:12:e6:19:58:27:bc:fa:74:ec:
19:3e:64:bf:ec:c3:ef:58:90:b6:4a:7a:8e:40:27:
d7:26:1d:f6:10:ee:76:77:b0:b3:96:cc:61:b1:62:
f2:1d:62:17:6f:7b:8e:a2:d1:6e:bb:2d:18:fc:b5:
e3:d7:cf:b3:19:2e:20:88:3d:d6:db:75:25:38:15:
c4:46:1e:a5:31:cc:c6:cc:84:88:00:d6:8d:cb:a2:
24:ab:97:1d:e8:4e:83:d8:df:2b:2b:04:14:f7:c5:
08:a3:69:8b:2a:61:a1:4c:f5:ff:66:09:80:89:2c:
51:8b:80:05:1c:56:0b:18:80:45:e7:ab:eb:f4:d5:
07:bf:6b:cb:da:8e:6f:b8:30:81:b5:a6:48:99:da:
7d:01:b6:5d:31:2b:66:69:b8:36:40:4b:77:c7:ef:
f2:4b:b8:d9:76:4c:8b:12:e7:5b:3a:fd:b8:1a:21:
60:db:97:46:19:84:d2:60:f3:79:be:6d:6b:fc:20:
88:1f:a3:92:94:9d:fe:ab:d9:a8:a1:af:d4:f7:9c:
9f:c1:4e:c2:ee:6c:fc:53:99:d8:6b:97:4a:b4:78:
b9:fc:f9:17:90:82:ed:9f:dd:04:26:68:e3:6c:8e:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:24:23:71:D6:BA:C1:7A:B7:B4:09:94:FC:6F:E2:BB:54:B3:60
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:99:9d:aa:70:53:5c:19:fd:42:b2:88:cb:ca:b9:22:8a:
e6:7c:57:48:4f:28:bf:c8:a4:b1:8e:f0:a9:07:a8:19:5a:98:
75:99:ad:18:ca:aa:fd:ce:90:9f:b6:80:6d:b2:0a:ec:fb:69:
ed:65:4e:d2:ea:f6:32:a5:bd:2c:cd:73:3c:33:a7:20:32:6d:
ba:1f:24:80:8b:5c:f7:49:35:fc:f5:5d:6e:11:86:64:bb:5a:
92:af:c9:9c:61:99:e6:46:fd:33:92:ce:df:56:92:4e:53:98:
ad:01:21:80:b8:1d:49:98:91:18:87:d2:f1:ba:a7:74:62:ff:
1a:0e:b9:ed:2f:e3:32:8d:67:33:67:e6:34:29:35:20:4c:85:
ba:a8:14:73:b5:a6:c0:bf:ce:3b:75:31:31:0a:68:ef:43:54:
36:63:49:db:9b:f1:df:97:94:57:31:48:a4:7d:36:67:75:ef:
29:8a:23:7b:db:bf:75:c4:83:bf:fc:fa:6a:2e:c9:f0:62:d6:
4d:8c:05:e0:2c:27:38:bb:28:a5:ab:ee:39:fa:06:ee:0e:ae:
9c:a1:11:9b:5f:f5:cc:bb:f2:cc:35:4f:ca:83:f4:13:a7:1b:
ac:00:e3:5b:89:0c:97:cf:be:c5:79:29:ef:f3:e4:94:b5:1a:
c3:81:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:50 2026 by rpki-client