Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: gxWcgmR6fOVTXUzm/h0GS73oJ7dN0yjwG/yKqhEqRI8=
Subject key identifier: 9C:3B:C0:3F:6A:3B:CB:71:FD:DC:78:87:2A:B6:AB:68:C5:A8:B1:09
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019D273AAEEC85BB81C82F73F38E9A65C6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 15F8
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: I9HH-b3uhEYMGd5k7Iye-im2vcM.roa (hash: 4R5IweuaeIYK4isAQkRjmQfBB4/D3ub3P+G0IZYR6QU=)
2: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: ATB6eaAp+xhi6EJDPMf8AhUZCVmRfKu9vhofSiswdsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ae:ec:85:bb:81:c8:2f:73:f3:8e:9a:65:c6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=9c3bc03f6a3bcb71fddc78872ab6ab68c5a8b109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:35:fc:d4:18:67:5b:fb:fe:a9:32:e0:29:
a7:f8:95:2d:02:81:c5:ff:ea:68:ae:7c:9a:eb:de:
64:89:04:1e:1d:87:ed:29:f8:10:e4:c2:fd:7e:f8:
99:e0:cf:08:bd:dc:10:a2:88:10:9d:59:8b:4e:03:
1f:2c:ef:26:ae:de:b3:c6:8d:19:55:77:8f:1a:c7:
84:a1:97:0a:01:91:9c:a5:e0:88:b6:d7:8c:5c:61:
3b:96:63:51:1d:4a:d2:45:94:0e:e9:31:87:86:5a:
5d:b0:a4:54:26:f5:45:70:d6:38:dd:15:ef:f4:f0:
e2:4b:dc:b8:04:c1:7a:be:af:fd:72:bd:74:91:25:
b9:ff:4b:ed:31:d4:52:3f:1f:20:68:73:d4:06:aa:
7d:b4:35:6e:24:77:86:51:e0:f5:3b:dc:f7:0f:42:
18:ec:be:e2:38:65:b2:09:56:6a:a8:a5:24:ae:3e:
27:6e:f3:bf:4c:39:6d:19:2c:ef:ee:a7:64:27:eb:
91:c0:0b:1d:18:e9:1c:79:31:92:74:32:a9:51:a2:
75:52:ad:73:8d:05:fa:a9:6e:8d:83:94:fb:24:a0:
44:81:15:42:ed:4e:f9:aa:89:e3:10:0b:ae:9a:45:
47:1e:35:7c:17:46:eb:26:30:60:7d:7e:0a:c1:54:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:C0:3F:6A:3B:CB:71:FD:DC:78:87:2A:B6:AB:68:C5:A8:B1:09
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:ff:8c:04:42:8c:a1:7e:2f:13:aa:ef:ac:b2:69:60:0e:
15:de:18:0c:c2:fa:61:dc:5c:28:4a:ed:75:d2:d2:5d:0a:e9:
9f:52:03:dd:13:f1:d8:24:24:9a:43:51:28:82:19:2a:44:9b:
a6:95:9b:f5:25:b1:e5:56:74:14:5d:4b:4c:eb:8e:e7:1b:c2:
4e:00:98:7f:70:4a:7b:13:84:ae:91:f9:05:3b:30:dc:1a:81:
00:7e:88:b6:b5:37:c7:2a:bf:7e:20:c8:f5:6b:41:86:11:9d:
64:43:68:1e:aa:fb:fe:a4:4f:44:1c:a0:3b:2c:0e:55:17:6e:
cd:18:0f:e3:66:81:e3:9f:53:cc:b4:3b:30:5e:6a:75:61:8d:
12:85:8a:99:7b:ac:4c:73:a4:98:63:a8:f3:e9:ea:6d:49:df:
1c:2e:27:be:2c:71:0c:86:9a:bb:68:9b:f6:30:54:10:59:e0:
17:d4:10:ab:82:d9:22:79:2b:46:d8:c4:94:16:e3:37:ed:7e:
af:90:ef:6d:ca:71:80:39:81:f7:78:4b:89:d6:95:75:67:4b:
c2:17:e5:b7:08:89:4d:47:3f:20:9a:6c:c5:3e:18:0a:c2:8f:
3e:16:58:25:b4:00:64:c4:3d:98:20:f9:91:82:31:5e:c3:79:
52:06:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:54 2026 by rpki-client