Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: Uakm2FDHv29h6VjiAfqBZ7rZVUALrApReCUfiBMaJ00=
Subject key identifier: 5E:A8:88:EF:D5:09:2F:41:02:A9:08:53:9C:DD:22:E2:C4:47:1F:DF
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01A10A6FB00FACABF074E51013E80733A7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 13FB
Signing time: Mon 05 Oct 2026 05:00:53 +0000
Manifest this update: Mon 05 Oct 2026 05:00:53 +0000
Manifest next update: Tue 06 Oct 2026 05:00:53 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: NHXer7T1IBypPdDcyYTl6rzdotXkV9rJj0f8J9uWrA4=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:6f:b0:0f:ac:ab:f0:74:e5:10:13:e8:07:33:a7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Oct 5 05:00:53 2026 GMT
Not After : Oct 6 05:00:53 2026 GMT
Subject: CN=5ea888efd5092f4102a908539cdd22e2c4471fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:47:6c:1d:c6:f9:db:82:02:49:88:d5:14:
2c:ca:1d:f7:8e:88:d7:c9:ea:26:f7:be:da:cc:e5:
c0:5d:17:a2:b8:56:15:f5:05:b1:5a:20:30:3a:24:
7a:de:84:17:99:32:74:f7:f2:da:eb:8a:e6:a0:3c:
03:55:08:c4:ad:ba:f2:f7:4e:d3:bf:cd:59:b2:63:
1a:78:a7:3e:48:10:06:c6:4e:ff:2a:f4:fa:e9:fc:
5b:77:fd:d3:ba:a4:d7:74:16:36:9b:50:f5:7a:b8:
ee:b5:e3:4e:f1:93:7d:68:23:ed:7a:b6:0d:98:06:
ec:e9:e8:c1:05:66:d4:c7:13:80:1b:d0:29:45:f1:
c2:35:b1:69:ee:f4:75:a1:83:10:50:2a:ea:0a:36:
e1:0a:1f:45:41:c0:71:3d:d7:62:5a:30:72:cc:f6:
45:ab:53:00:f8:46:94:2a:c1:27:5b:7d:5e:9d:43:
ad:7e:b9:b4:b8:f6:b8:b0:af:a0:a0:94:48:60:f4:
7b:e7:4c:e3:d5:d3:f7:17:da:fd:36:02:a2:f7:9e:
57:42:68:30:be:58:1d:e1:8a:01:2a:19:9d:bd:b9:
97:70:e1:5b:69:6f:5e:e7:44:60:de:4a:a3:a8:3c:
1c:80:7d:d2:15:b8:ab:47:54:f1:89:de:3a:54:4a:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:88:EF:D5:09:2F:41:02:A9:08:53:9C:DD:22:E2:C4:47:1F:DF
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:8f:66:04:ea:4a:b4:9d:16:3b:e7:f0:f7:a8:49:0f:b2:
85:c8:16:a6:62:5a:0d:eb:de:40:21:83:b0:ee:09:dd:2f:0d:
0d:d1:57:e9:80:d0:17:01:b8:8e:0e:88:ba:e4:dc:99:e4:18:
43:3e:d6:fe:b1:a3:fb:40:81:1b:8c:98:b5:43:3c:db:3b:7b:
65:fc:58:3c:2b:44:c0:f8:02:cd:01:a8:51:1d:20:cb:64:37:
55:9b:f6:ee:72:6d:3e:76:d2:f2:15:80:77:06:3f:69:48:45:
58:5f:8e:51:df:50:05:74:8a:4a:cb:fe:27:a0:99:34:79:88:
b3:7e:78:07:2c:b4:dc:5e:48:f2:ac:18:42:54:31:f5:90:dc:
45:2d:12:68:7f:7b:46:4f:71:ef:9d:6c:f2:6f:7f:47:39:9b:
99:e9:fa:37:75:d8:91:16:24:ff:2d:79:9c:55:4d:73:7b:10:
b9:04:b2:16:68:82:ea:d5:dc:fe:2b:c1:0b:0c:b8:7b:26:b8:
aa:12:70:fa:36:4d:e9:49:5c:f4:71:27:a0:3f:2c:9c:5e:77:
a6:24:db:8c:2a:8c:f5:5e:f1:d9:c6:aa:00:38:d3:3b:ea:85:
ad:23:30:4a:2c:8f:ef:42:41:ad:39:b2:35:4a:a6:31:e5:55:
cf:2a:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:45:48 2026 by rpki-client