Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: GHGeHcNiWkMWUVWM1oC5dNkRSYaxSBEpofTmC2xbnHA=
Subject key identifier: 22:4F:DB:2A:2B:66:E0:ED:4B:C1:C8:47:0F:86:D6:E6:9D:80:C6:27
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01A0D7CC42E7637BA37FA061AFCB61B473CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 15BB
Signing time: Fri 25 Sep 2026 09:01:22 +0000
Manifest this update: Fri 25 Sep 2026 09:01:22 +0000
Manifest next update: Sat 26 Sep 2026 09:01:22 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: m59tjzGhJQyA/mv5W41vNqAJKGdKKuUxdStCbItXFqI=)
3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:42:e7:63:7b:a3:7f:a0:61:af:cb:61:b4:73:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Sep 25 09:01:22 2026 GMT
Not After : Sep 26 09:01:22 2026 GMT
Subject: CN=224fdb2a2b66e0ed4bc1c8470f86d6e69d80c627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:ef:10:a1:a9:78:35:a8:26:50:70:1d:8d:
90:2a:73:07:39:29:45:fe:6e:57:a7:dc:0f:1f:7d:
a3:e8:b7:28:e1:d6:c7:c9:d2:dc:85:d7:c2:75:39:
98:f4:79:c7:5e:a9:26:88:57:c2:8f:a5:99:35:1b:
d0:d4:10:cb:fc:fc:7a:45:37:93:1a:91:24:be:80:
3f:8b:50:91:61:10:b4:ed:67:e1:91:15:1a:35:5f:
9a:89:47:9c:74:ea:df:3f:b7:67:82:69:7e:12:e0:
43:33:26:c1:c2:a6:d6:9e:8f:d1:9b:a6:1a:88:ac:
85:bb:b8:70:02:f9:4c:5a:43:af:70:49:aa:f0:40:
24:30:64:59:64:00:eb:d7:db:20:48:e1:ff:01:bf:
15:e5:8e:42:32:82:e0:b3:7e:08:99:be:d2:87:bb:
59:d0:1c:25:1f:c2:89:e1:92:f4:8f:08:fb:67:b9:
11:fb:6e:96:ce:6d:ae:3d:ab:a5:6b:97:91:7d:d0:
1d:b7:de:10:8a:56:bf:eb:57:7b:96:d4:24:9a:cb:
c2:8a:12:d3:74:b5:32:23:4f:8d:35:3b:f9:75:27:
e7:e1:b5:a3:5f:25:90:ff:59:4e:24:f2:31:85:6b:
03:a8:b2:95:43:bb:23:8c:4d:51:7f:26:de:e3:35:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:DB:2A:2B:66:E0:ED:4B:C1:C8:47:0F:86:D6:E6:9D:80:C6:27
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:b9:fb:95:01:57:29:e6:a6:8c:36:0b:ce:b0:ac:24:75:
26:5c:1b:4d:88:c6:62:72:84:2e:1d:71:25:e8:3c:16:54:90:
52:f2:be:3c:8c:df:27:cf:8e:2c:10:a3:f9:8a:92:53:27:9b:
ce:7c:52:6c:16:e2:a8:f1:ae:01:09:3d:c7:80:b7:ff:e6:c9:
00:7f:d3:7b:65:f1:26:ba:69:e9:32:a8:de:ca:bd:a0:f7:f4:
f1:7c:14:d7:b9:04:17:8c:1a:79:45:39:d9:63:c1:ee:a4:44:
34:47:ab:44:36:21:e5:8f:23:c2:a9:a2:c7:5c:62:c7:e1:a1:
4c:0c:80:7f:4d:02:b1:43:04:19:ac:ac:1f:ca:70:c6:43:a1:
47:68:55:11:5b:79:ad:a7:9d:27:41:72:f8:96:6c:9f:60:bb:
4b:9d:60:e5:4d:6c:6b:91:d6:c7:64:de:06:79:5c:69:9d:11:
a3:18:21:ed:d2:cf:a7:b7:3a:3f:92:6e:f5:4a:f2:ac:f5:12:
26:8e:b8:f3:d1:a2:05:98:cd:37:ce:b6:23:69:5b:7e:53:37:
c9:2a:62:9d:67:a3:3e:fb:3f:0f:56:4a:7f:94:15:dc:15:26:
87:f6:83:60:91:59:e4:e1:b2:dc:f0:58:29:9a:89:1b:32:e2:
fd:10:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:43:21 2026 by rpki-client