Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: 0hgKs4iB9ECYZmJxmIi6dHfAVO0hH53kd71OemZ8ros=
Subject key identifier: 2D:76:EE:70:D8:07:43:EB:01:31:22:EC:14:23:94:A5:29:34:0F:97
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019E1F1116AF3E316286B4F6A28301B3FB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 15AA
Signing time: Wed 13 May 2026 02:01:13 +0000
Manifest this update: Wed 13 May 2026 02:01:13 +0000
Manifest next update: Thu 14 May 2026 02:01:13 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: JBPtROM/HOCMOWZa7HSIQx/I1dVQ5LPIU5zj9TMaO08=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:16:af:3e:31:62:86:b4:f6:a2:83:01:b3:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: May 13 02:01:13 2026 GMT
Not After : May 14 02:01:13 2026 GMT
Subject: CN=2d76ee70d80743eb013122ec142394a529340f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:4b:20:bc:f4:83:b7:4b:f3:7d:32:8d:a4:
d5:09:d9:c4:28:ea:d3:10:e6:56:92:49:ae:a5:90:
4b:fd:e1:e9:16:75:fe:f0:ee:f7:2c:14:0f:41:db:
76:c5:7b:e5:b5:28:d8:6b:11:cb:e6:02:4f:e3:3a:
07:86:00:06:b3:99:94:73:13:e8:8d:c6:bb:cb:98:
7e:17:bb:48:ba:e2:24:5a:60:94:44:ad:1e:be:dc:
44:c5:9e:f0:c3:aa:6b:b9:36:7c:a6:43:42:96:09:
db:d3:e8:db:e7:cf:40:6c:0f:53:cb:22:42:a8:0b:
53:c6:ed:42:7e:47:09:75:5f:48:46:64:7e:1f:66:
19:c3:cb:d6:50:bd:9e:e5:be:ea:e3:fa:00:1e:bb:
e6:c7:28:ba:66:0d:ba:fd:c7:d4:09:ce:b7:4d:8b:
ab:37:c6:60:dc:57:8d:d0:76:5a:f0:17:9d:08:8f:
9b:f4:57:37:c6:60:ab:f1:f3:8f:06:2c:5c:d7:7d:
f2:5c:7c:b9:49:4a:0a:60:0f:34:10:fe:7a:8d:5c:
9b:a3:02:82:3d:d3:55:b4:bd:27:e5:82:2f:05:6c:
28:84:e4:20:8a:6d:a0:cd:cf:ad:75:b0:b3:47:be:
09:68:88:b2:a5:dc:31:f6:83:6c:65:ff:3f:f0:b9:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:EE:70:D8:07:43:EB:01:31:22:EC:14:23:94:A5:29:34:0F:97
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:39:56:93:20:f6:a5:8c:e9:74:78:55:35:c8:eb:c7:94:f9:
d0:e4:7d:7a:a0:01:5a:6f:5d:f0:fb:99:2c:bf:9c:8b:60:2f:
4a:09:cb:e5:ec:2a:35:43:ad:a1:b1:a8:c7:89:7c:fe:26:0f:
8e:0f:9b:65:9b:12:7d:22:27:5b:3f:40:ca:25:dc:25:40:e6:
2c:00:02:26:bd:ff:d7:2f:01:7f:5b:15:46:7f:52:cc:13:50:
0a:7a:a3:3f:fa:e5:39:61:b6:9b:81:c0:3d:1c:8c:75:2c:59:
c1:47:71:19:e1:05:9b:2d:d8:d9:5c:55:8d:2c:f8:33:11:23:
53:7b:ce:19:15:c5:08:ca:67:33:8a:e4:bf:0a:5c:d0:53:a8:
9e:7a:ef:7f:4b:23:f6:50:cb:f0:93:7c:f7:03:e9:27:da:c4:
fb:d0:68:c6:8c:a5:0d:a3:1d:22:e4:9a:85:55:93:64:6d:71:
a0:1c:98:8e:10:35:a1:30:00:ed:54:a5:7b:93:24:d5:0a:41:
74:b0:0d:f0:55:59:1c:c0:9b:02:c7:7d:2f:6f:27:1a:a9:29:
4a:99:c1:30:99:c7:49:6b:8f:75:8f:9f:4e:b8:40:d9:0c:ea:
ae:b8:f3:68:8f:68:28:8d:fc:58:05:11:4f:2b:cd:0d:d8:20:
2e:1d:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:07 2026 by rpki-client