Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: cvutHyif20pf7r7gBSu0+tozQiBX1J1z3LyG5u7PdXM=
Subject key identifier: B9:A6:90:73:87:7B:27:E8:5E:A1:5A:87:0B:A5:56:9C:BB:71:06:1E
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019D38D309CD289C59545B65F41165B8F826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: 5cEjwHGM2BXRxl2mmZnfLuMCl7SRYJXv0Pu5y031qk8=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:09:cd:28:9c:59:54:5b:65:f4:11:65:b8:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=b9a69073877b27e85ea15a870ba5569cbb71061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:23:5c:f1:a9:8b:f6:68:c2:d5:b1:a5:e5:
d1:2d:8e:e9:a6:a5:79:79:ec:a6:68:fd:70:43:8e:
0a:de:d5:26:2a:6c:67:bc:28:61:03:20:8e:9f:97:
ba:d5:0f:5d:9b:b7:75:12:d7:80:25:ce:df:3d:5b:
3a:79:1a:89:26:da:af:04:74:5f:49:94:40:58:76:
f7:59:7d:34:de:3f:e1:59:e6:1d:0e:1b:81:82:34:
52:ca:e3:d8:eb:3a:e5:ca:6e:bd:e0:fc:16:cf:a9:
e7:4e:59:18:15:51:0d:51:36:bc:0b:d5:07:36:4d:
1e:4d:6b:7e:81:03:e4:d5:f0:a9:bb:22:ac:46:bb:
f6:d1:44:c9:2a:24:bb:cc:0e:50:ec:59:e8:5f:4f:
8f:aa:4f:32:8d:09:4c:f4:1c:d6:b8:49:da:4e:8b:
cd:ed:59:95:97:55:06:bf:ed:03:78:b6:67:00:7f:
b2:38:e2:64:16:ce:fc:cb:dd:bf:1a:2a:b6:d7:98:
cf:15:a5:de:f8:47:8d:44:4d:d5:c6:43:4c:04:8f:
cf:1d:e5:a6:8b:f3:35:c1:43:c0:6b:43:75:00:75:
fe:e6:4e:de:1c:31:ec:b9:6c:36:ca:6a:74:0c:4c:
69:38:05:2c:d0:8b:51:33:ba:8d:6b:b5:49:cc:9d:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:90:73:87:7B:27:E8:5E:A1:5A:87:0B:A5:56:9C:BB:71:06:1E
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:92:8b:16:5e:c7:3a:72:79:19:fa:4b:b7:39:b1:77:c3:1d:
fa:35:c3:75:a8:cb:24:fe:02:15:e0:bb:c5:a0:b2:30:bd:be:
05:85:ee:81:15:e7:8d:3f:fc:83:29:5b:d0:c2:80:aa:8e:f5:
10:45:5a:ca:b3:10:26:80:4e:42:a5:ac:70:6c:01:a4:95:00:
f2:51:e1:2f:4d:08:75:07:7c:bf:f6:01:5c:9c:85:62:c9:6c:
cd:b6:87:d8:74:0a:45:54:b3:71:d5:dd:92:9f:dd:21:4d:e5:
b6:5d:98:37:98:46:81:75:ab:2d:c3:16:b3:b9:a9:24:19:c0:
94:e0:0a:5b:a2:b7:91:00:6b:59:e7:92:11:f6:fa:66:2d:0f:
9d:0b:02:88:69:c8:d3:0d:37:8c:a5:64:f3:a3:2c:46:a2:a9:
65:52:fb:c9:59:e3:04:da:0e:34:f6:8d:3b:ed:bb:50:e5:d9:
0a:98:aa:9c:a2:61:94:6f:30:44:99:b3:d7:a3:b3:65:e3:a2:
59:bc:05:ea:c6:75:8f:47:18:55:c4:2a:87:9e:b0:3d:d3:5c:
61:f1:ac:2a:cd:7d:62:4f:e6:e2:77:b6:a2:cd:59:72:ee:36:
db:89:cf:db:26:9a:76:57:f1:1b:07:89:67:3b:2b:3e:36:2c:
3f:fd:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:59 2026 by rpki-client