Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: 086b+eTJP2QAQxmAG+fYbTf2xTmye5PRE2K9f32eEUY=
Subject key identifier: 05:FF:F3:AD:42:77:6D:67:F2:D0:FB:54:3F:96:D2:1E:8F:DA:67:9E
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 019D9A3E9A432840C481659A000FE36485D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: L6tXFbZpoO+yX4vAo/uGKahKdjmmSQEmRhQEAMPDSKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9a:43:28:40:c4:81:65:9a:00:0f:e3:64:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=05fff3ad42776d67f2d0fb543f96d21e8fda679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:fc:b9:06:b7:de:c6:38:a0:be:db:e8:b7:
2c:84:40:fe:8f:ed:1f:2b:41:85:9e:a5:de:36:fe:
bf:c9:ec:79:be:4e:d9:f8:8d:69:a4:05:fe:a7:02:
ae:85:bd:13:e8:a5:cb:53:a6:cd:64:68:57:b5:97:
d7:8f:db:cb:3e:76:e5:8b:3a:7b:07:45:35:8f:98:
8d:63:68:4a:d2:bd:dd:ce:f5:4a:20:78:a9:92:e0:
cf:80:b3:93:37:f1:6d:8b:05:96:ca:fc:af:74:ec:
a4:e1:ae:3f:7e:7a:d6:17:6a:87:63:80:6f:86:01:
82:92:12:40:62:85:15:5d:02:9c:0c:e7:ca:da:e8:
32:34:67:96:39:00:8f:5b:f4:96:16:30:74:b6:a6:
cf:91:c0:ed:8d:44:a4:72:5b:2b:03:e0:69:01:37:
08:ee:a6:39:12:5b:13:95:4d:f2:94:c6:bc:95:be:
da:05:dc:76:93:ff:f9:0d:6c:05:78:22:f2:04:53:
50:12:50:10:bf:46:99:56:a1:db:8e:00:8c:9e:aa:
aa:7d:ea:6b:0b:f9:87:21:ea:f2:86:57:b2:3f:e3:
6d:f0:c8:ea:f0:90:ae:1c:62:15:b2:cf:70:30:45:
93:de:bf:70:c9:e0:14:66:c3:30:f7:7a:12:86:2f:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:F3:AD:42:77:6D:67:F2:D0:FB:54:3F:96:D2:1E:8F:DA:67:9E
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c5:51:a4:7b:13:5f:9e:ca:0d:53:37:d2:c9:b0:10:3b:81:
a0:1b:21:05:e1:7c:33:04:2e:19:c6:70:bf:7e:de:8c:34:32:
6c:99:df:d1:31:8a:cb:cc:10:7d:22:04:1d:e0:4a:44:46:00:
50:71:cf:d1:03:4f:ac:6d:e6:49:ef:ad:5c:82:2b:61:bf:63:
e7:3e:34:0b:83:a1:fe:5f:98:03:80:f4:82:95:a8:e6:97:6f:
3b:e1:c8:32:b5:51:f3:06:e9:15:aa:7c:c0:10:b8:8c:be:7e:
fa:d8:30:86:68:79:73:ad:ed:13:4d:d5:52:32:83:9b:75:9a:
3b:20:5c:ab:dd:83:80:80:60:a9:55:9a:e2:bf:fe:12:c2:12:
b6:7c:a6:52:a1:c9:66:d8:8b:f8:a8:a3:37:2c:b4:ed:4a:75:
e6:18:90:07:2d:fe:90:20:b9:e8:08:0b:7e:91:2a:64:fc:f2:
33:27:0e:3b:4c:f6:b1:2e:38:28:b6:f8:fc:f7:d1:67:30:a0:
16:fd:02:53:dc:05:b4:a8:94:c2:a6:59:5b:36:be:13:0a:ed:
30:02:d7:93:d0:04:cd:c5:9b:a2:cf:52:0d:f5:07:b7:18:47:
79:6e:3b:4d:33:f4:ca:92:d9:4a:ff:65:a4:d2:21:45:02:c6:
34:ab:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:29 2026 by rpki-client