Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: 57C5d4FoFPf3s2oupMVldKqAVnzyHfhPDw5ebe4+eOE=
Subject key identifier: B7:E9:6E:2C:1C:EC:BE:9B:60:52:EF:34:F0:6C:3A:F1:99:08:3E:59
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 019D9AE32FFBDB50EF3256A25EBF978D049C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 05CE
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: oJfHQXl/N5PmiG2/LE3t3HWOAwZ9O9UnwlAC8S4lvVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2f:fb:db:50:ef:32:56:a2:5e:bf:97:8d:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=b7e96e2c1cecbe9b6052ef34f06c3af199083e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:1c:ba:cf:89:b7:a3:29:53:45:f2:4b:ed:
fc:d0:d9:93:76:ff:78:61:ff:45:1a:52:48:92:2c:
3f:e5:a9:01:9c:a0:5c:d7:c8:81:36:49:e9:75:c0:
ac:90:a5:39:7f:79:a5:50:b5:d1:73:a3:5b:61:db:
a3:ee:fb:60:54:b5:bc:6d:5a:cd:3e:ee:11:63:b9:
f5:b7:30:54:92:c6:b4:b2:14:e8:c8:cd:b0:53:40:
ee:60:8a:b6:93:c0:fa:cf:5f:47:3f:a8:da:a5:b8:
33:1c:d9:a0:53:3b:3c:bc:4f:cb:3e:2d:3b:d8:69:
f6:23:ac:17:19:6a:ab:df:60:31:6c:67:03:db:ba:
19:a4:10:a9:29:19:dd:00:2d:7c:7e:94:85:ab:e3:
e7:7a:39:3b:90:53:cf:cd:9c:99:6a:ae:ac:35:e4:
e6:f6:e9:08:8f:47:27:8e:e4:21:39:90:de:1f:20:
94:62:6c:65:1c:d8:87:0c:21:b3:3d:e7:9e:fd:78:
2c:fb:90:0b:12:4c:c8:83:48:49:c7:13:c7:c8:5b:
3e:eb:ff:8c:c9:1f:83:31:23:0a:1f:50:9f:0c:ea:
19:21:02:bd:b0:32:e8:a6:40:a0:62:1a:d1:89:39:
bd:dc:39:8b:96:94:45:6b:e7:48:25:0d:3c:5c:96:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:6E:2C:1C:EC:BE:9B:60:52:EF:34:F0:6C:3A:F1:99:08:3E:59
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:93:cd:dc:ee:d9:61:d9:0a:14:aa:c5:af:fe:ae:e9:23:15:
3c:f9:39:22:4d:93:26:58:a5:0a:b9:aa:f5:ef:67:64:50:ef:
3d:26:9c:79:ec:47:df:8e:89:32:bc:fe:0e:d3:a0:f6:8c:0b:
50:0b:63:cd:ab:58:fd:7e:eb:8d:9a:e4:33:2d:4f:5e:9e:9a:
1c:69:88:71:69:7a:3f:ea:5a:8f:ac:87:cd:e9:a0:e1:70:2f:
0d:2f:08:f6:59:4a:52:22:25:f7:d2:0b:9b:82:99:ae:84:a8:
69:d9:4a:84:7d:62:b5:69:19:19:a6:d6:82:9a:1c:ea:3d:19:
8e:1f:66:66:36:11:21:c2:2c:f6:17:af:98:52:64:ca:ed:f9:
bb:bd:49:56:39:cb:3f:cf:68:7b:7c:72:ce:33:16:88:c1:70:
76:ed:ea:da:93:a2:ae:9e:9b:19:42:86:f1:78:1e:80:c8:6a:
a5:0d:0d:8a:9b:65:d0:2f:e6:53:79:06:7f:bd:b2:ed:93:39:
58:5f:0c:95:00:f5:05:98:a1:fd:eb:ba:74:3b:f3:9a:f4:8b:
cb:bd:8a:c0:14:f6:5c:89:c1:39:50:76:49:dc:1c:e3:9f:83:
0f:b8:cf:8a:46:c0:1b:7a:65:b7:b1:01:31:0c:ce:cb:8d:b1:
3e:a5:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:05 2026 by rpki-client