Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: fsmaJOsPO08re3eShsEw/2OmLT4CoqmjcLKvKNaQNH0=
Subject key identifier: A5:AD:55:5E:7B:69:BB:DD:D7:09:D8:A4:59:C6:D5:0E:A8:B1:E7:27
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019D27727DE440DD7F816957CEDC8BF7DC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1529
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: a1DrQhNPYuHER8TczEfGTrF/IE6LjjvNVTDs4/VdlL4=)
2: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (hash: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ=)
3: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (hash: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7d:e4:40:dd:7f:81:69:57:ce:dc:8b:f7:dc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=a5ad555e7b69bbddd709d8a459c6d50ea8b1e727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0d:4a:1b:fe:8f:46:ae:60:85:b5:ff:55:33:
b7:33:b6:71:15:40:e3:41:b8:81:71:e4:71:bf:fb:
75:f2:0d:b8:25:e3:fb:f6:5a:8a:8e:2b:d3:c8:ed:
cb:97:96:ed:f2:11:1b:6c:c6:94:8a:63:55:1f:90:
f2:93:fe:79:7e:e2:c2:d4:be:1c:9d:c4:7f:8b:b7:
96:a2:01:85:c8:67:0f:28:0a:56:65:43:bf:8c:dd:
47:3f:e9:b7:be:04:4f:2c:36:f1:02:aa:43:4e:1b:
30:a6:b8:a5:63:8b:1d:9d:da:22:6c:65:2f:02:99:
a6:e5:00:9f:8f:e4:e7:b8:eb:c5:ad:d3:69:60:08:
e4:cf:96:28:0d:a7:79:bc:4b:51:98:a1:9c:bb:91:
14:d4:97:5f:80:35:c7:6d:02:66:e7:83:1a:ad:71:
41:82:9a:10:99:47:65:e8:43:65:9e:fd:c0:84:ed:
61:dd:82:80:a1:9f:c2:13:93:c1:ea:b6:1a:35:7d:
af:52:bd:eb:88:fe:dd:bd:db:84:05:b3:9f:4d:e2:
04:e1:a1:48:ab:d5:b4:9a:a4:03:8b:ec:f1:e6:42:
17:89:ce:c7:fc:20:99:83:98:52:fb:75:36:c0:e2:
b7:ce:a0:27:11:ce:e3:7b:0e:de:85:80:ba:17:5f:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:55:5E:7B:69:BB:DD:D7:09:D8:A4:59:C6:D5:0E:A8:B1:E7:27
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c5:ef:d1:66:78:cc:af:44:c4:10:b6:ec:27:9c:4b:cd:57:
87:a2:cb:ae:6f:fa:55:3a:1e:95:65:f0:1b:f5:86:3f:d7:22:
1d:79:ee:86:38:d8:20:f8:d0:6e:f1:3b:8e:34:f9:96:3c:e4:
c8:e0:c7:c3:f0:2b:cb:35:2e:ac:51:ca:95:92:8f:16:bf:ae:
4d:20:d0:b3:72:4f:0b:44:81:9b:fd:de:30:76:2b:41:81:bf:
d2:e6:3f:f4:e9:74:3a:83:cb:e6:f5:36:29:5d:48:87:74:a7:
44:0c:3b:9b:af:99:6d:27:45:32:45:18:38:21:c6:2e:04:b6:
0c:c5:98:8f:b0:6e:1b:82:11:2c:a6:d3:56:64:00:ef:e2:83:
7d:74:d6:11:e8:4a:fe:6c:89:57:2d:e4:bf:88:de:9c:84:6d:
9b:f8:c6:bd:30:c0:2c:fd:67:36:d1:87:b5:dd:91:b4:48:a5:
07:13:73:e8:ac:de:da:36:4e:f4:fb:61:b9:1f:3d:53:4a:78:
77:35:7d:0c:0e:a5:44:9d:c7:51:31:2e:f2:b0:da:6c:c9:29:
f1:62:88:bd:c4:3c:26:9e:42:f5:f7:24:f3:60:a5:56:4a:dd:
e0:32:ef:f9:a3:ec:50:5b:09:a0:70:96:d0:bb:d6:6a:89:99:
49:a7:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:59 2026 by rpki-client