Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier: RbfhPJuLm8PZLqsNS+KeyqeNp/oHxbyrSmim8scUkHk=
Subject key identifier: 7E:EE:97:61:9A:50:A8:AF:67:E3:46:1D:75:90:00:2E:23:E3:AD:65
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019FAAF60BD0DBFB4929C1AFD376A2C76D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 23:01:19 +0000
Manifest this update: Tue 28 Jul 2026 23:01:19 +0000
Manifest next update: Wed 29 Jul 2026 23:01:19 +0000
Files and hashes: 1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: CmHCp6UXeBVIN6V2Ka8XSaGYTPuyl+nrYkZUXvuA7NA=)
5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:0b:d0:db:fb:49:29:c1:af:d3:76:a2:c7:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jul 28 23:01:19 2026 GMT
Not After : Jul 29 23:01:19 2026 GMT
Subject: CN=7eee97619a50a8af67e3461d7590002e23e3ad65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:de:8e:77:78:f1:dc:08:b2:90:fe:62:a6:
c7:8b:34:89:8f:4b:7b:ef:dd:0a:50:9e:8c:2e:75:
ab:29:f7:8e:76:3e:d6:28:62:89:b9:18:5d:e0:6c:
ff:f7:f1:93:a9:8f:7c:47:85:2a:7c:10:92:67:5a:
a7:19:95:87:0e:bf:05:4f:7a:b6:7b:13:bc:5f:8c:
c1:a0:07:cc:51:38:8f:3c:7b:a0:15:6d:a1:3e:13:
47:9e:67:4e:53:84:b9:62:b7:91:f6:49:8c:7e:64:
ef:99:dc:ac:19:d0:15:8d:a9:6a:d2:48:ca:b6:d0:
46:dc:3f:71:35:e8:7e:da:69:bc:87:aa:bd:2f:0e:
d8:4e:6b:97:e3:c3:e6:fa:be:7b:ac:d9:58:53:c5:
b7:c0:84:45:3a:e5:7f:67:d6:6b:3a:fa:48:17:ac:
7f:2c:51:06:cd:ab:54:68:b6:e6:e1:e4:9a:28:dd:
ff:e9:c8:cc:4c:19:ae:0c:72:08:4a:27:b6:13:1e:
f9:c5:13:16:48:f8:ad:75:f1:40:5c:6c:d4:87:81:
77:2d:31:5a:74:b2:f6:24:19:47:12:2a:53:58:83:
99:c3:10:e7:fd:94:4a:72:39:96:33:47:d4:aa:4c:
01:f2:1a:09:39:c5:0d:f6:d8:87:ea:df:2d:bd:d9:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:97:61:9A:50:A8:AF:67:E3:46:1D:75:90:00:2E:23:E3:AD:65
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6a:ab:1f:3f:69:0e:6f:66:7b:12:2b:be:8f:3b:d7:23:93:
fd:69:c6:a8:f9:ef:2c:a5:9f:f1:ff:dc:b3:91:a2:05:a4:59:
05:64:23:fa:27:e2:c0:a1:92:67:d4:7b:8b:72:ff:5d:6b:bc:
53:a1:26:a1:57:60:cb:ac:59:94:7c:96:0b:40:ae:50:66:29:
28:5f:37:8d:2b:85:a8:9e:e6:f5:6d:61:a9:7b:97:fe:6d:84:
07:46:8e:90:1c:ec:e0:71:a9:62:7e:1d:4e:15:d6:c2:1b:25:
92:d6:15:3c:d8:1d:0d:cd:26:c4:e7:12:91:54:d5:c3:d4:f7:
73:72:4b:8f:db:b6:b0:40:cf:14:60:53:1d:07:93:81:ba:84:
dc:b6:9d:cf:27:28:78:3b:07:65:84:7e:de:a6:66:1d:b8:61:
e7:6b:51:b6:1e:7e:2e:47:7f:33:39:c1:fa:2c:32:7f:01:15:
dd:cd:d6:70:50:e8:38:b8:1e:cc:fd:89:97:6d:d4:8f:96:e1:
b6:9b:6a:16:1a:16:ef:e5:f6:d6:54:94:79:bd:61:51:9b:65:
db:81:ad:6f:83:e9:29:20:97:0e:2a:d8:76:2c:95:ff:38:5a:
b6:bc:ce:e9:76:a0:e1:1d:40:e0:ed:dd:8d:b1:3a:93:d9:bf:
0b:5a:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:52 2026 by rpki-client