Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: izdu2sz/xXQYmknQ/MuRl6fOxJusDdqHoawtF3o1yws=
Subject key identifier: 56:3F:C2:14:8E:19:73:C2:18:C1:67:3B:DF:ED:CE:8F:1A:EB:4A:20
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 01A0F3443FF93CF2A1983B7C922B3DEA5ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1721
Signing time: Wed 30 Sep 2026 17:02:11 +0000
Manifest this update: Wed 30 Sep 2026 17:02:11 +0000
Manifest next update: Thu 01 Oct 2026 17:02:11 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: IRRu316WavXY4s06NKcIz3NHdxd6yAieyJlVdaNt0sM=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:44:3f:f9:3c:f2:a1:98:3b:7c:92:2b:3d:ea:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Sep 30 17:02:11 2026 GMT
Not After : Oct 1 17:02:11 2026 GMT
Subject: CN=563fc2148e1973c218c1673bdfedce8f1aeb4a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:88:3a:0a:ce:22:15:f4:3c:b4:86:ca:73:
2d:f5:7c:c3:9e:ac:93:5f:0d:8b:15:63:af:41:07:
e6:63:49:81:86:a4:bc:b8:ec:28:30:46:28:dc:c5:
f8:d3:79:52:6c:13:d0:ad:13:de:14:c4:b6:9a:c7:
c9:11:69:0d:33:41:3f:46:e7:48:40:80:49:d0:2f:
15:00:f4:d7:3e:83:e7:af:3e:fe:ef:6f:d1:76:55:
68:8e:e5:e7:49:cf:8f:4a:e7:5b:a8:f6:9c:7b:02:
46:a9:61:7d:24:52:e6:33:7f:3d:b5:99:a4:fe:6d:
f6:8c:c1:5c:2e:78:a1:0e:35:9a:f4:4a:34:99:3e:
6a:6f:18:c0:7c:4e:53:0d:07:65:22:9e:4e:8d:95:
35:8e:b7:21:4e:e3:57:2b:d4:ca:10:a2:d4:20:13:
f5:99:d0:27:e1:dd:a7:c5:ad:5a:c4:04:40:7f:26:
63:c9:69:3e:39:fc:6b:08:a0:ef:0c:c9:0a:84:89:
99:a5:51:0c:1c:04:2f:f3:92:e5:60:68:06:c6:78:
38:eb:60:d5:2a:ca:30:d2:15:fd:66:e2:fb:6e:09:
5b:f2:a1:99:87:79:ec:b0:22:e7:b1:96:55:a7:a8:
7f:9a:f6:17:45:fa:47:dc:84:a2:c9:83:6d:af:cc:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:C2:14:8E:19:73:C2:18:C1:67:3B:DF:ED:CE:8F:1A:EB:4A:20
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e7:92:e2:02:b5:c0:71:05:27:3f:5d:82:2e:75:b5:2c:56:
5d:89:b4:3a:c2:a4:78:fd:f4:4e:aa:a1:0b:ae:2e:cb:3e:69:
b6:e7:6d:a2:f1:d4:3d:ed:16:20:93:0a:75:fd:b4:9c:44:9c:
0c:ca:95:90:2d:47:4b:d0:43:64:de:48:e1:1a:41:bf:0c:f6:
7f:91:eb:a3:43:74:49:36:1d:36:55:72:3d:4e:13:57:48:ca:
8e:13:d2:73:85:5e:34:1e:39:b3:44:a6:bd:3c:f4:64:6a:04:
3e:91:53:a6:16:85:27:3f:83:36:fa:b4:7e:82:52:12:e6:59:
35:20:c7:6d:ac:51:13:bd:84:90:05:ff:9a:ee:f2:8d:78:4f:
64:98:8f:43:a5:bb:d0:a6:8e:3d:b6:9a:b0:42:18:a7:84:ab:
1c:6f:d8:c8:e1:8e:4a:df:a5:41:38:d4:46:9e:1d:85:6b:fd:
a2:57:dc:86:87:76:46:a6:c3:b5:55:fe:7f:44:49:9f:25:8f:
db:e8:3d:5b:bc:48:55:2f:4f:97:62:c7:58:5b:cb:38:1d:b4:
02:ed:75:59:b2:f1:76:f4:48:d7:18:e9:a0:1a:49:a4:19:2f:
81:ee:54:9b:51:8b:39:d4:da:88:c4:60:b8:fe:b6:85:b1:54:
f7:73:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:12:01 2026 by rpki-client