
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: jeWFA/ynRasFRV+W7Sn/0F8pSIB0CKgR6zInSFqk+C0=
Subject key identifier: AD:22:68:C9:DF:E3:DE:40:D3:34:03:23:04:3C:3C:D7:AB:BE:41:09
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019F935B5C0399A68E8F00AB317FA2EDC081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1513
Signing time: Fri 24 Jul 2026 09:01:05 +0000
Manifest this update: Fri 24 Jul 2026 09:01:05 +0000
Manifest next update: Sat 25 Jul 2026 09:01:05 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: yxGhZeNHRZ8M88kQOkHfoae92b5Nou2HRm+PO5x0XAA=)
3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5c:03:99:a6:8e:8f:00:ab:31:7f:a2:ed:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jul 24 09:01:05 2026 GMT
Not After : Jul 25 09:01:05 2026 GMT
Subject: CN=ad2268c9dfe3de40d3340323043c3cd7abbe4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:9e:b5:93:99:f7:97:64:7f:53:1e:da:50:
3e:1c:cc:d3:e7:fc:39:65:c6:02:3f:93:5f:76:ba:
b8:4d:3b:d9:37:ce:9a:33:41:dd:a8:c4:ca:ac:15:
80:d9:ae:3d:be:45:73:bf:a0:86:0d:c1:4a:90:79:
ad:d0:01:c7:8b:e3:9b:af:3a:1b:3b:61:c1:8e:aa:
10:01:59:db:40:48:b5:3b:aa:64:1d:b5:49:7e:b6:
fc:8c:41:62:d9:3d:dc:cc:6e:68:9a:08:74:b3:08:
e7:b5:24:93:84:81:ac:77:0c:05:1d:66:dc:c3:0d:
6a:0a:57:65:53:d6:9c:63:28:e7:bf:5b:96:a8:4b:
bd:0d:f8:cf:4a:df:ab:aa:4e:b4:3d:e2:eb:d7:04:
df:39:8e:9d:74:dc:e6:61:73:ca:f2:e9:f1:ff:45:
3b:1a:3f:d5:0c:9d:29:e5:15:b6:b8:3e:6f:5a:75:
7d:ec:b0:ee:95:30:ed:a0:83:60:5d:c2:b8:87:81:
3a:02:33:14:5b:56:87:64:db:2f:75:ed:2f:32:57:
4f:89:8e:a4:2f:65:5d:2d:b7:66:4f:e6:88:00:76:
c3:f7:a0:61:bd:29:6a:07:dc:4f:5b:ef:1d:8c:5a:
f1:78:4f:c4:58:00:22:25:03:76:6e:4a:5d:35:17:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:68:C9:DF:E3:DE:40:D3:34:03:23:04:3C:3C:D7:AB:BE:41:09
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a6:84:9f:d0:37:52:9b:72:75:a0:c4:58:0f:13:40:aa:6b:
97:03:ca:46:6f:4b:51:35:2b:47:e3:f9:c0:7b:38:7d:e2:92:
23:48:7d:e9:4c:aa:3b:51:58:0e:5f:de:df:96:d0:5b:15:e5:
21:22:db:f1:73:88:fd:a7:b7:f6:b3:68:b1:6d:90:07:70:b2:
bc:13:26:50:45:eb:e4:16:5b:61:98:1d:5e:58:2f:e2:97:69:
f6:17:2b:5d:27:25:20:ba:cf:fe:73:66:4d:b3:70:24:cf:92:
31:48:1c:a8:73:6b:c8:5f:6c:41:35:b1:50:05:a5:e9:50:b5:
35:78:c8:2d:09:4e:5a:bf:69:a8:03:ec:c6:fd:6e:7c:10:57:
eb:5b:93:05:e8:92:a2:2f:3f:1e:22:04:a4:92:16:88:1d:d7:
a0:1d:85:c4:55:f4:45:a3:60:12:db:ce:d4:8c:10:e5:e8:89:
01:6b:17:a5:60:cc:3d:15:92:d3:ad:ba:9c:5f:ae:4a:b5:3b:
34:70:25:dd:04:a3:3b:af:94:2a:33:31:24:71:4b:65:aa:4a:
a8:93:42:d1:87:cc:8e:4b:00:6a:78:56:0c:99:53:27:f4:ce:
7b:2a:1d:9d:45:d4:11:7f:a4:73:6a:13:ed:e6:ce:d7:93:25:
95:6c:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:29 2026 by rpki-client