Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: ImUlgjqF3bmY9OlYKzeYROBA3/y5Slvgi9zZz41GvYI=
Subject key identifier: F4:A9:88:41:AB:1B:02:D2:72:1C:4B:1B:F1:DA:B1:88:5E:27:0D:0C
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 01A0EA0A4285A3D49ED768F63ABA0E9ACDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 22:02:15 +0000
Manifest this update: Mon 28 Sep 2026 22:02:15 +0000
Manifest next update: Tue 29 Sep 2026 22:02:15 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: 69OKprDLVZe9Pm4XVyMYubdQS2Er1PiEtWCu+nyOI3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:0a:42:85:a3:d4:9e:d7:68:f6:3a:ba:0e:9a:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Sep 28 22:02:15 2026 GMT
Not After : Sep 29 22:02:15 2026 GMT
Subject: CN=f4a98841ab1b02d2721c4b1bf1dab1885e270d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:01:9b:76:79:9b:8c:b3:84:c2:9e:20:2e:
46:f8:24:aa:6d:e4:a0:d3:5b:d1:df:87:f4:9f:3f:
72:2c:e3:33:10:3c:9f:45:1d:5b:7a:d6:62:0d:ed:
03:68:79:e3:c4:87:1d:3e:32:5f:04:5a:71:03:da:
ac:fd:c5:f3:8a:98:7c:26:51:6c:c2:46:d2:06:10:
0c:ad:21:d4:93:15:88:9c:cf:d8:11:c3:e4:25:18:
0b:51:e3:21:4e:84:d4:e5:2e:49:52:36:40:98:d2:
13:f5:8f:4c:3a:aa:e3:e3:cd:38:3f:7c:1e:d2:c4:
16:23:4e:55:b2:d6:78:7b:57:53:ee:67:05:f9:00:
36:3d:71:81:ce:4a:9f:24:ce:c0:ee:96:ae:90:0e:
cf:49:45:46:30:7f:fc:03:f1:ca:5a:c4:fa:aa:09:
29:70:b3:15:aa:b5:5d:25:78:75:ae:90:06:b1:5d:
db:da:17:5c:44:9d:28:1c:03:d8:5e:b0:81:0f:aa:
0f:57:88:81:70:ff:33:9d:fc:58:48:54:42:29:8c:
bb:87:af:ff:d6:5b:a7:4c:15:ca:48:0b:35:a3:96:
8e:87:35:41:93:c5:36:3d:df:81:3d:ed:b8:d2:35:
b0:cc:5c:27:14:b1:60:79:18:48:55:27:85:67:4d:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:88:41:AB:1B:02:D2:72:1C:4B:1B:F1:DA:B1:88:5E:27:0D:0C
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:74:18:e6:88:49:34:ff:be:a7:68:d5:b5:78:b5:b5:a3:ca:
5b:34:d6:d7:92:57:13:6c:b4:ed:8c:82:f0:ee:cd:73:50:de:
e7:e6:8a:81:51:9f:f8:c0:01:30:7d:2f:c0:2f:01:ce:89:01:
5d:4c:84:55:19:c7:4a:bf:80:16:ef:d8:db:31:94:cf:5f:da:
1c:d3:94:a8:99:5e:ea:23:51:1f:cc:9f:6e:2a:b0:1d:af:eb:
ad:cb:f7:94:be:25:2b:5d:5a:ed:be:c4:72:f6:c5:e9:70:04:
2b:04:4e:2e:d8:8c:6a:24:62:76:71:37:c8:bd:0e:cb:04:ec:
d4:c7:0f:ec:47:ba:2a:58:08:3a:01:22:84:be:02:2b:e9:7d:
fa:b8:40:88:f2:a0:60:02:a2:15:ae:68:5a:22:4b:90:29:2f:
08:2e:ce:07:4a:99:05:36:22:f4:48:eb:27:0c:77:cd:d5:79:
14:cc:16:85:c3:eb:e4:b9:32:06:44:02:f2:03:95:bf:a9:c1:
20:26:b1:2d:f8:b4:c5:34:bc:ad:7b:51:0f:23:9e:a4:1d:d8:
1e:ea:c4:f4:86:00:73:69:34:d7:dc:7d:78:a0:12:1e:c8:25:
79:bb:76:9b:4b:d9:f0:06:bf:d7:30:bf:be:d2:8e:35:79:19:
17:19:95:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCkKFo9Se12j2OroOms3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy
NDM1NGMwHhcNMjYwOTI4MjIwMjE1WhcNMjYwOTI5MjIwMjE1WjAzMTEwLwYDVQQD
EyhmNGE5ODg0MWFiMWIwMmQyNzIxYzRiMWJmMWRhYjE4ODVlMjcwZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXQBm3Z5m4yzhMKeIC5G+CSqbeSg
01vR34f0nz9yLOMzEDyfRR1betZiDe0DaHnjxIcdPjJfBFpxA9qs/cXziph8JlFs
wkbSBhAMrSHUkxWInM/YEcPkJRgLUeMhToTU5S5JUjZAmNIT9Y9MOqrj4804P3we
0sQWI05VstZ4e1dT7mcF+QA2PXGBzkqfJM7A7paukA7PSUVGMH/8A/HKWsT6qgkp
cLMVqrVdJXh1rpAGsV3b2hdcRJ0oHAPYXrCBD6oPV4iBcP8znfxYSFRCKYy7h6//
1lunTBXKSAs1o5aOhzVBk8U2Pd+BPe240jWwzFwnFLFgeRhIVSeFZ02eawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSpiEGrGwLSchxLG/HasYheJw0MMB8GA1UdIwQY
MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt
MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz
LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnQY5ohJ
NP++p2jVtXi1taPKWzTW15JXE2y07YyC8O7Nc1De5+aKgVGf+MABMH0vwC8BzokB
XUyEVRnHSr+AFu/Y2zGUz1/aHNOUqJle6iNRH8yfbiqwHa/rrcv3lL4lK11a7b7E
cvbF6XAEKwROLtiMaiRidnE3yL0OywTs1McP7Ee6KlgIOgEihL4CK+l9+rhAiPKg
YAKiFa5oWiJLkCkvCC7OB0qZBTYi9EjrJwx3zdV5FMwWhcPr5LkyBkQC8gOVv6nB
ICaxLfi0xTS8rXtRDyOepB3YHurE9IYAc2k019x9eKASHsglebt2m0vZ8Aa/1zC/
vtKONXkZFxmVqQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:23:49 2026 by rpki-client