Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: NukZWKe+O7ObnMBjTUMzZieWlhcHgAXY4GmkZTzk9Kc=
Subject key identifier: DC:18:7D:5E:73:FF:28:FD:E7:52:C3:C9:03:51:7A:0C:42:24:48:26
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01A1DEA72BF88E022115C3DE5EF2DFAB8937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1644
Signing time: Sun 15 Nov 2026 10:01:00 +0000
Manifest this update: Sun 15 Nov 2026 10:01:00 +0000
Manifest next update: Mon 16 Nov 2026 10:01:00 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: w/Qf1m3hskr+mOJBgu1XnLfzAkRP4uM5cALjQgYgHLo=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
5: zfed5Gh-YL_f-gpUM6GV82MHD8s.roa (hash: FZsay/Z83rJ+JGP9nxzdeGsLg8wEb2D/RMGBnuAZQuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:2b:f8:8e:02:21:15:c3:de:5e:f2:df:ab:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Nov 15 10:01:00 2026 GMT
Not After : Nov 16 10:01:00 2026 GMT
Subject: CN=dc187d5e73ff28fde752c3c903517a0c42244826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:1c:16:73:02:41:6c:c0:d2:e8:c7:ec:81:
95:28:ed:76:9f:39:05:6b:76:60:01:71:c4:9b:eb:
08:e2:f3:f7:88:45:75:d2:54:e7:95:5d:e0:56:7d:
a2:06:0e:0e:25:d8:a6:fd:f5:d6:80:53:94:3d:68:
2a:7b:13:86:fa:f0:72:19:ae:cb:44:36:bf:a7:c0:
fc:09:ac:07:ad:57:6a:62:2f:28:b6:fb:62:0c:b0:
2b:a2:d9:81:2d:ce:b9:04:77:a9:f7:55:b1:04:e1:
45:f6:0e:b5:87:b7:91:1b:e2:17:57:9a:10:f8:55:
4f:39:a9:7a:b9:b5:07:98:f8:6a:a5:42:8e:d4:f0:
7c:7e:a3:ea:ab:cd:7d:8d:7d:a8:96:9f:5d:fa:dc:
08:0e:62:f5:4d:97:ea:62:c3:41:cf:44:75:c5:48:
08:cb:4e:43:d4:0d:cb:50:f1:66:bf:06:35:43:99:
91:b9:2f:92:03:14:56:c5:bb:ce:47:85:ff:8e:ea:
37:f0:62:5f:8b:54:bb:2f:3a:32:a5:60:11:50:8b:
09:48:f6:dc:46:04:75:62:6b:32:94:45:cc:86:23:
0f:d5:8d:29:71:72:21:81:71:90:ea:6a:25:0f:7c:
ad:25:9c:ad:af:54:fc:55:3b:12:51:44:9e:d3:3e:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:7D:5E:73:FF:28:FD:E7:52:C3:C9:03:51:7A:0C:42:24:48:26
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0d:1a:b4:c2:ec:03:75:5a:96:e2:88:3d:97:c0:9f:cf:27:
3d:eb:28:f4:0d:cd:ab:1a:93:07:5d:7e:ff:94:d4:e5:8f:71:
c2:6e:34:9c:e1:66:c3:d7:8f:28:76:85:eb:f4:ee:64:be:79:
cc:f0:5d:89:e5:84:b3:5d:a2:6d:23:06:c3:88:a1:21:6e:73:
c7:f6:72:15:ef:34:f1:68:bf:de:c5:a5:9b:54:a2:bd:2f:5e:
83:14:ab:9b:44:2c:eb:19:d9:1d:0a:d7:e7:c1:6d:6c:d7:12:
ee:e2:77:64:38:c1:b2:99:9d:cb:fd:e9:1f:0c:f4:f0:c8:22:
99:90:be:cf:5f:c5:63:d3:b4:3b:78:e4:10:e1:99:2f:10:54:
fb:7e:5f:c3:02:b4:ee:1d:88:34:ac:df:bd:ea:b1:a6:21:80:
1a:50:ef:75:97:09:f8:c2:3e:2e:11:8c:55:45:c7:32:81:f2:
8f:fe:53:54:23:bf:ae:46:2d:f4:87:86:eb:49:9b:28:2f:76:
42:be:69:25:d5:00:c2:f1:45:d7:04:39:15:e0:20:c6:ea:c7:
7a:0f:ed:7a:43:10:d5:55:b6:23:51:83:1f:d5:ee:b4:b9:ad:
09:3b:44:47:ed:d7:b9:6d:a2:c3:f2:60:cc:1b:09:37:0d:54:
a3:c5:58:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHepyv4jgIhFcPeXvLfq4k3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjYxMTE1MTAwMTAwWhcNMjYxMTE2MTAwMTAwWjAzMTEwLwYDVQQD
EyhkYzE4N2Q1ZTczZmYyOGZkZTc1MmMzYzkwMzUxN2EwYzQyMjQ0ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XocFnMCQWzA0ujH7IGVKO12nzkF
a3ZgAXHEm+sI4vP3iEV10lTnlV3gVn2iBg4OJdim/fXWgFOUPWgqexOG+vByGa7L
RDa/p8D8CawHrVdqYi8otvtiDLArotmBLc65BHep91WxBOFF9g61h7eRG+IXV5oQ
+FVPOal6ubUHmPhqpUKO1PB8fqPqq819jX2olp9d+twIDmL1TZfqYsNBz0R1xUgI
y05D1A3LUPFmvwY1Q5mRuS+SAxRWxbvOR4X/juo38GJfi1S7LzoypWARUIsJSPbc
RgR1YmsylEXMhiMP1Y0pcXIhgXGQ6molD3ytJZytr1T8VTsSUUSe0z7hHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwYfV5z/yj951LDyQNRegxCJEgmMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw0atMLs
A3ValuKIPZfAn88nPeso9A3NqxqTB11+/5TU5Y9xwm40nOFmw9ePKHaF6/TuZL55
zPBdieWEs12ibSMGw4ihIW5zx/ZyFe808Wi/3sWlm1SivS9egxSrm0Qs6xnZHQrX
58FtbNcS7uJ3ZDjBspmdy/3pHwz08MgimZC+z1/FY9O0O3jkEOGZLxBU+35fwwK0
7h2INKzfveqxpiGAGlDvdZcJ+MI+LhGMVUXHMoHyj/5TVCO/rkYt9IeG60mbKC92
Qr5pJdUAwvFF1wQ5FeAgxurHeg/tekMQ1VW2I1GDH9XutLmtCTtER+3XuW2iw/Jg
zBsJNw1Uo8VYgA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:39:56 2026 by rpki-client