Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: PHQID8y12kQPYUc3WSyYjuM1PEteiRxCt+K/w3PPh8Y=
Subject key identifier: 05:AD:27:6A:B2:72:57:22:AA:1B:6F:69:FF:1D:3C:94:E9:5F:81:DA
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019DA3782C57DEEF1BA23D5C809743555BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 02:00:55 +0000
Manifest this update: Sun 19 Apr 2026 02:00:55 +0000
Manifest next update: Mon 20 Apr 2026 02:00:55 +0000
Files and hashes: 1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: TG06kPJkJersoGQZGx6ZxCdOnHR2BXS4IgnRjacVg8Q=)
5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:2c:57:de:ef:1b:a2:3d:5c:80:97:43:55:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Apr 19 02:00:55 2026 GMT
Not After : Apr 20 02:00:55 2026 GMT
Subject: CN=05ad276ab2725722aa1b6f69ff1d3c94e95f81da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:88:ef:e5:24:91:96:b2:99:60:b9:a1:60:
83:d3:23:71:b4:4f:3e:d9:ee:6a:75:d4:95:71:62:
15:df:4d:a2:e4:d7:e2:18:ec:27:8e:07:c8:a8:25:
16:59:fc:0b:8c:82:c2:56:97:8f:ef:ad:f5:4f:a6:
04:45:bf:67:f5:c8:6d:45:5e:10:d0:30:9f:fb:51:
b3:b9:14:82:6d:15:64:86:42:0d:74:3c:95:ce:b5:
70:b4:62:33:36:72:23:f7:79:9d:d5:8e:0f:70:7c:
41:1f:e5:dc:00:5d:71:9b:6c:47:76:5e:ac:00:9c:
65:37:5d:ef:01:19:b1:8e:79:23:8c:02:23:8e:f2:
c5:a7:eb:70:a9:36:89:f8:5c:7e:6d:d6:6d:c1:b0:
18:20:bf:34:78:63:27:e3:e1:ae:14:0e:2b:33:3c:
7f:f1:05:bb:87:18:84:99:e0:be:a0:81:cc:51:b6:
85:d0:e6:74:86:cb:bc:93:80:c6:cc:5b:03:c5:ee:
f4:2a:6c:30:f4:a4:91:95:de:0c:80:1d:77:4e:3e:
7d:49:24:fb:92:b6:1a:f9:44:1f:6c:7c:e1:fc:8a:
c6:72:6c:df:48:51:66:f5:c1:41:e9:c6:90:00:f6:
75:b1:20:8d:55:02:54:54:26:8f:c3:92:f8:06:d6:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:27:6A:B2:72:57:22:AA:1B:6F:69:FF:1D:3C:94:E9:5F:81:DA
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:45:cb:a5:50:a0:35:a9:1c:52:7b:e6:73:d6:87:0d:c6:
5b:b8:a5:2a:60:58:c5:01:f4:df:7e:16:fc:ed:4a:82:4f:ce:
59:a2:42:f4:70:39:91:89:84:91:7d:c8:cc:50:78:8b:81:aa:
c1:49:96:35:ae:9f:35:03:d6:ea:c5:db:e4:92:d8:8f:c7:5e:
92:d1:ae:9f:a8:89:8c:7f:80:82:e2:22:a8:8a:ae:c5:3a:2a:
40:d2:d6:46:63:ac:21:60:e3:84:28:8e:94:8a:2d:3f:3d:f0:
78:fd:00:0c:0f:c6:ec:7c:80:d6:87:b5:ee:40:b4:a4:a8:12:
61:66:ca:ed:9a:d0:cf:ca:09:fc:14:ef:d8:c6:98:99:dd:72:
70:18:02:50:dc:e8:d8:6b:aa:71:ea:df:eb:a5:01:d9:42:aa:
53:4d:61:bc:85:f5:de:79:71:85:46:af:6c:3f:9c:9c:7f:87:
45:9a:8e:8c:d7:e8:a1:cb:c5:32:a4:11:13:26:75:69:34:81:
d2:bc:45:2c:9b:b2:de:d4:15:dd:03:12:5a:85:44:69:a3:e3:
5c:c5:49:7f:6d:fe:7e:32:f7:26:d2:84:f4:d4:bc:34:32:94:
1a:ad:94:92:02:f4:24:48:ed:4c:84:25:24:f8:90:78:15:ff:
f3:7b:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:26 2026 by rpki-client