Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: Weyth6eHI96EIjGsszAVpKoOuA9Tc33JwpsJetsu/94=
Subject key identifier: F9:62:1B:46:53:9D:30:00:17:B7:B4:D3:1D:85:75:89:E9:03:DE:15
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 019DA3417CB19D170DFA3A543C374B550CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 15F6
Signing time: Sun 19 Apr 2026 01:01:11 +0000
Manifest this update: Sun 19 Apr 2026 01:01:11 +0000
Manifest next update: Mon 20 Apr 2026 01:01:11 +0000
Files and hashes: 1: 7IHoFTom1ovbc32ROfwOsVohnOY.roa (hash: QxYm3BEgI8MopzvcjZkVuxTvAcrTlamB8ZE+JEtn02I=)
2: dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa (hash: PbGDghsUx2VuV/Qi655kVWVON4S8LLL9qUjVO61ngtg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: y6nLnaHLGj8+AyHtMpQA9Go1Q/ddcMs90MB3JS5zQqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:7c:b1:9d:17:0d:fa:3a:54:3c:37:4b:55:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Apr 19 01:01:11 2026 GMT
Not After : Apr 20 01:01:11 2026 GMT
Subject: CN=f9621b46539d300017b7b4d31d857589e903de15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:e4:e2:fd:ae:04:6d:2e:78:2a:28:8f:74:
25:e2:6a:3c:3a:46:b7:23:1f:b3:3f:0e:8a:96:be:
df:a0:6c:c4:da:c7:7f:3e:66:83:73:4c:1d:3c:8d:
a8:99:e6:41:07:43:92:ab:6f:47:b5:f9:26:d9:12:
f4:7a:30:62:bb:49:2a:1a:ab:eb:30:80:f9:67:0e:
06:60:79:71:c0:85:2a:6e:45:9e:5c:cc:15:f4:2b:
b0:d1:f5:17:ff:00:6a:bf:83:57:8a:59:14:f1:76:
a2:9b:86:a3:d5:84:00:99:d1:62:d1:5b:72:81:41:
61:fc:27:f8:6a:43:93:68:54:4f:16:6d:38:8c:3b:
73:6a:52:6a:47:cd:fc:39:c9:e2:25:1b:06:4e:5a:
7d:3c:1d:36:1d:54:e6:08:47:77:91:43:79:c3:30:
4e:20:bf:16:e7:d2:f5:98:5a:df:2a:b4:73:77:5f:
6b:42:ae:e6:53:b7:cc:34:ab:72:96:f3:17:21:e3:
b0:3b:2b:32:83:32:8d:80:62:d6:48:b3:9b:24:38:
57:80:67:0f:fc:58:7c:73:6a:e2:04:6e:8e:4a:fa:
4f:f2:cb:09:ac:4c:9b:1b:8b:cb:17:78:88:61:e1:
75:a3:a7:d2:8b:d0:f8:85:52:b5:b5:b0:e0:fc:41:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:1B:46:53:9D:30:00:17:B7:B4:D3:1D:85:75:89:E9:03:DE:15
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:ea:0d:5c:eb:f0:3a:09:f0:49:9c:d4:90:0f:dc:d6:4b:
e7:a8:a0:f9:9c:ad:78:f0:2c:30:ad:35:ce:4a:a5:de:f7:55:
15:4b:c9:c6:40:4c:55:1e:be:36:82:35:d4:c6:96:98:7e:af:
19:03:d8:18:d3:62:5b:35:60:dd:ca:34:7d:56:05:95:4a:f5:
02:68:b9:a0:7f:31:b3:87:24:7f:c6:e0:69:14:fe:c8:eb:74:
f4:54:84:48:a5:b0:1c:5e:59:95:68:6a:51:41:73:61:e0:49:
2f:14:54:53:e7:36:e7:88:c0:6c:29:c2:62:f0:e4:cd:f8:fb:
0e:f6:12:ad:72:f9:03:75:56:60:e2:40:8a:7d:3b:37:0c:d1:
23:a8:e2:39:04:55:4a:d0:ac:f7:8b:41:db:ab:c2:dd:44:3c:
aa:d8:d2:ea:61:31:d5:cc:ee:4d:46:ab:ab:e3:04:9b:f8:76:
4d:57:61:df:2b:a9:fe:dd:c7:6e:3c:f9:fd:36:b5:2f:e5:00:
10:db:1e:4b:c5:a3:0a:92:36:71:2e:98:01:32:be:0f:bb:66:
40:54:b0:cb:b7:33:68:fe:41:b5:37:16:9c:5a:c6:47:fe:03:
eb:74:ab:06:7a:23:74:68:52:49:cb:3f:91:cd:71:c6:64:cc:
3d:8a:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:40 2026 by rpki-client