Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: iLc5OxHUcJRLruh0s3TVs6uzb3UBImScw6U72GsBZFc=
Subject key identifier: C5:33:D7:70:D1:2B:20:2D:49:00:21:43:2E:C5:B8:EE:12:8E:7C:AD
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 019CAB6AF4EDA17F6B55A5FC5AA381179187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 0552
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: soRLZn1nnzhkoi7dJ/rqmXUAL3ujyboMIRriOTIOyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f4:ed:a1:7f:6b:55:a5:fc:5a:a3:81:17:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=c533d770d12b202d490021432ec5b8ee128e7cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:90:4b:e8:33:02:14:06:29:16:26:de:81:
5d:94:eb:92:a1:0a:0f:22:70:e7:d5:de:b2:08:a8:
87:5b:37:50:76:fa:2b:45:aa:ae:12:23:54:78:92:
9e:57:57:24:1a:51:7a:e5:72:fa:7c:1c:14:f1:e9:
65:36:f0:fb:be:33:c4:2a:5e:3f:25:f8:b9:3f:10:
f7:56:05:5b:47:76:64:5f:e7:97:84:9e:e0:01:c0:
6b:21:35:ac:71:44:8d:d2:99:35:91:cd:91:01:c8:
e9:40:18:79:93:b7:f8:b8:99:d8:46:ae:bf:82:c7:
d8:ba:a8:70:3e:3d:2b:34:c8:3d:a4:f3:4d:ca:05:
55:e7:77:22:f0:7a:eb:d9:f7:1f:83:86:f9:1b:ff:
4a:e0:dd:a5:f9:72:e9:b8:b8:52:eb:48:ba:27:03:
90:0e:02:75:9a:bd:8f:94:30:ab:23:49:29:e4:80:
22:ef:a8:fc:01:d4:42:f8:80:50:54:aa:09:c4:f9:
21:99:26:e9:8e:96:9a:61:9a:d3:a4:d7:98:d8:6d:
1b:1b:1b:10:4e:50:2c:fd:47:63:01:26:c7:74:ab:
6e:79:ed:b6:0b:cb:7d:6b:0f:c5:d1:d6:dd:b8:c2:
a4:d5:88:68:f8:59:bd:9c:39:e1:bc:6c:08:84:df:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:D7:70:D1:2B:20:2D:49:00:21:43:2E:C5:B8:EE:12:8E:7C:AD
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d0:b2:2b:58:7d:4b:a3:82:04:ca:23:45:e6:74:68:ef:04:
1f:d2:81:95:91:9e:77:3a:17:8a:1f:cf:bc:79:d9:0e:9c:34:
7a:67:2a:02:8e:a7:ed:8e:32:c2:2c:9a:53:2c:d7:a2:8a:f9:
f7:7c:cd:fc:1b:0c:98:52:a2:6f:29:62:0e:92:1f:86:a5:f3:
e3:19:46:14:19:49:44:14:7e:91:ba:ae:71:e7:9a:c6:76:cd:
c3:6f:b6:52:5c:d8:d4:a3:b5:65:c8:25:1b:ff:e6:e8:c5:6d:
85:84:81:aa:d4:2d:17:3a:38:64:f1:75:34:82:7e:d7:db:f7:
dc:fd:b8:cc:02:c0:e9:87:83:76:52:0d:f4:5d:1e:80:6b:1d:
da:ee:e1:73:db:7d:93:b5:ac:99:6b:8e:51:3a:a1:e3:f8:13:
50:08:fb:3d:25:72:66:11:e5:29:f2:d5:d9:22:e7:6c:81:bc:
e9:51:2c:a3:23:77:36:b1:7c:d9:60:d6:a1:ab:a7:1d:9d:78:
92:11:52:3d:69:60:14:bd:1a:82:64:8b:64:8c:44:ef:47:77:
e7:3b:01:ca:74:18:4c:4f:5a:bd:9d:26:e0:7e:bf:b4:c5:87:
85:5a:42:a6:0f:b4:1a:7b:32:3e:85:ac:48:ce:47:b7:7f:30:
42:78:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:58 2026 by rpki-client