Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: qovgLeUX9tFufxMjicN2H0lSvq7lbE2dTNIREFZ2XiU=
Subject key identifier: 31:75:99:E0:35:24:5E:85:75:F2:F0:85:6B:CC:81:09:5C:5A:93:D5
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019F93C90CBB08E2B4BA5C724087097160F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 1339
Signing time: Fri 24 Jul 2026 11:00:54 +0000
Manifest this update: Fri 24 Jul 2026 11:00:54 +0000
Manifest next update: Sat 25 Jul 2026 11:00:54 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: 9Q3ri7jlTv8b08PPOrWXMgOhmEk6HZFMRFIGGTtKkDk=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:0c:bb:08:e2:b4:ba:5c:72:40:87:09:71:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jul 24 11:00:54 2026 GMT
Not After : Jul 25 11:00:54 2026 GMT
Subject: CN=317599e035245e8575f2f0856bcc81095c5a93d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:15:ac:8c:2a:24:c1:55:be:64:87:05:95:
fd:c5:17:5a:9e:0a:5f:aa:de:01:0d:3c:48:a7:30:
0b:d7:48:57:fb:59:87:00:63:e9:ea:49:1d:90:36:
1a:c2:44:54:69:c8:e7:99:9b:c2:bc:59:5c:c4:5f:
94:80:37:82:92:03:53:4f:ee:13:de:8b:2a:03:9b:
45:c9:b7:e9:6e:8b:97:57:ea:f5:d1:d3:48:a2:bc:
a2:6c:c6:44:33:8f:65:d6:11:49:c6:cc:8f:73:1d:
f0:58:6d:28:c3:50:33:88:7f:9c:68:53:41:62:ff:
f7:54:2f:3b:e8:f0:66:b6:e4:6a:7e:47:69:fb:5a:
cf:17:32:bf:44:35:a6:0b:31:ce:ac:cf:ad:38:85:
d2:96:6a:82:fb:41:eb:94:eb:9c:3b:26:f7:31:cf:
e3:df:10:b2:25:76:01:dd:b3:da:71:73:49:b0:9c:
8d:12:aa:42:55:58:fe:13:90:08:fd:cb:a0:b3:3c:
f9:47:4b:81:fa:27:9f:6b:34:36:fd:11:76:c4:b2:
9a:1e:03:a4:4c:9e:9b:26:49:b9:07:39:c6:39:19:
e7:7a:eb:02:04:49:b5:bb:4e:10:25:35:89:77:4b:
c3:10:e3:03:dd:38:53:57:88:64:9d:23:e6:7e:f9:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:99:E0:35:24:5E:85:75:F2:F0:85:6B:CC:81:09:5C:5A:93:D5
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:99:90:c7:c9:58:c3:93:e6:fa:8c:d8:c7:18:d4:84:e2:33:
be:b4:18:c6:3b:60:55:1d:a2:0a:2d:91:e0:0d:c3:57:92:d2:
51:71:dc:48:b8:5b:3e:29:4c:c7:8a:2c:03:ae:9d:8b:61:be:
0c:73:bb:90:fd:d4:4a:d2:8c:c6:4e:a7:db:0e:c5:63:1f:d1:
2c:fa:76:36:53:5b:4b:1a:ad:e2:66:61:6d:4d:15:e3:79:0d:
b9:37:e8:2c:4d:91:4d:48:4a:53:19:dd:79:81:82:68:73:54:
7c:10:85:d3:11:91:7e:00:2c:d0:c8:bd:0b:97:20:9b:fd:25:
0f:76:f7:ad:47:fa:57:af:29:fa:26:a1:59:8f:75:7a:b3:6b:
a0:3f:6f:01:a7:ba:93:e0:85:66:0b:21:4d:65:d4:9d:c2:0f:
4c:bb:33:c6:83:3b:88:70:a0:e0:73:74:c6:f7:a5:79:0c:32:
b4:6c:2e:1f:1c:37:7f:5b:ba:a3:12:9c:9e:de:47:9d:7f:28:
25:37:b9:16:b2:d8:29:d8:dc:51:7f:4e:88:cc:74:ec:3b:36:
79:47:2f:92:10:d0:4e:96:a6:35:5a:68:92:0e:7a:4a:76:54:
5a:a3:f1:02:a8:cd:67:8e:23:78:72:5d:71:98:ca:e0:a9:64:
a2:ae:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:28 2026 by rpki-client