Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: 8pljYqhQzHPfMKQmdnMUtJf7CEVTpK30Ed/Dwi/d+iY=
Subject key identifier: F3:15:1D:F2:FA:11:92:13:A1:38:AB:04:5F:E7:BF:62:39:EC:FF:A9
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019D27A8BE65CC40FC7236ED2FB1F695C769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 13D2
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: K7XQ2pfibvcCbJc5Lb2GnXzE0LlSTuirBypbRKPdbE8=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:be:65:cc:40:fc:72:36:ed:2f:b1:f6:95:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=f3151df2fa119213a138ab045fe7bf6239ecffa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:8b:83:48:70:d6:34:f9:1b:80:df:26:ef:
97:f8:5a:da:6e:32:3a:8a:99:01:a1:8d:31:4b:8c:
90:56:4e:f3:a7:c6:6e:ff:44:88:43:e5:79:60:eb:
02:66:56:0e:33:03:2c:23:95:bd:fe:2d:cd:04:73:
bf:da:ac:39:38:bd:5d:c3:d8:1b:91:d3:d9:25:fb:
12:29:3e:c8:05:38:4a:ab:db:a6:7e:a9:f8:22:6a:
d5:eb:26:0a:ba:2a:68:ab:26:d6:49:5f:00:7e:52:
6f:eb:02:93:40:00:9b:0c:46:bd:bc:f9:34:b5:0a:
59:41:63:13:67:05:d3:7f:ed:10:6e:5a:9b:4e:fb:
31:21:04:52:8c:82:03:98:83:7a:21:92:fa:08:31:
6b:b1:c7:4a:a4:b9:a2:09:5e:8f:a4:1e:c1:d0:08:
03:0d:60:2c:63:cf:dd:dc:86:4c:bd:40:7c:e7:8d:
9d:b2:63:14:72:9f:b9:7b:02:58:54:2d:a9:1a:40:
27:8f:74:4b:bb:46:d0:11:17:03:39:0a:7b:a1:a5:
67:b8:b9:c5:22:7c:67:e1:7e:5b:98:be:09:2d:96:
03:34:41:45:3c:0e:7a:59:18:55:37:cb:5f:da:24:
4d:06:89:41:83:df:7c:ef:ac:23:c2:87:35:3c:46:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:1D:F2:FA:11:92:13:A1:38:AB:04:5F:E7:BF:62:39:EC:FF:A9
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:39:ed:23:3f:1a:09:1e:d2:84:08:a1:7f:53:8d:26:2c:
09:f7:4e:4b:ab:3c:51:ee:7e:4d:83:bd:79:30:ec:01:52:ee:
41:48:ce:37:3b:ae:a8:60:93:b1:7b:09:fb:06:b8:c3:9f:95:
8c:c6:61:d4:9a:41:3b:a0:1b:b1:51:7f:74:55:82:f9:84:e1:
b0:4f:04:29:e1:3f:7b:79:be:94:2f:e8:ba:5d:c3:b0:59:0a:
51:85:34:46:e7:2a:9a:02:f7:7f:b0:6f:08:69:2d:35:66:6a:
85:6c:80:ee:73:6f:af:d6:b8:7c:d9:3e:c6:2b:dd:b8:74:50:
e9:25:0d:03:b5:f4:33:59:55:89:a0:86:de:f3:c0:34:79:57:
1c:23:60:de:af:30:71:1c:cf:bc:2c:6b:84:b8:f5:d2:83:28:
d0:fe:8e:f4:cc:1b:6f:30:65:3a:54:49:61:db:5a:58:fa:4c:
2d:4b:cb:67:df:f0:56:31:6d:c7:f1:29:9d:2a:fd:50:90:ae:
0d:84:79:9a:23:a8:48:99:ec:68:f5:29:cb:ae:d3:52:d5:27:
47:d4:29:f3:12:a5:e8:9a:8b:ea:0d:b5:07:d3:31:e8:53:41:
f2:60:ed:94:45:5a:f6:29:d2:f4:8a:d4:9f:93:47:56:38:cd:
2e:b1:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:17 2026 by rpki-client