Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: XP43N4UX7YFs6EoaqEREig82VoHHgCCPQvCg64c3kUU=
Subject key identifier: 3B:86:9B:CF:1B:AB:6C:4B:48:37:25:68:58:AF:D5:B7:97:23:D9:6F
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01A162D7AE06C911AAEE62BF513F1DE54A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1AC0
Signing time: Thu 22 Oct 2026 09:01:04 +0000
Manifest this update: Thu 22 Oct 2026 09:01:04 +0000
Manifest next update: Fri 23 Oct 2026 09:01:04 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: AvcbmyXXvh8LVuU03guorWZ990pL2yDCHWYKqgXhIWI=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d7:ae:06:c9:11:aa:ee:62:bf:51:3f:1d:e5:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Oct 22 09:01:04 2026 GMT
Not After : Oct 23 09:01:04 2026 GMT
Subject: CN=3b869bcf1bab6c4b4837256858afd5b79723d96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:bf:bb:0e:38:52:e5:93:20:13:6d:40:5f:
32:9d:e8:a2:9f:ea:49:42:07:da:31:73:23:17:30:
c2:65:be:83:97:23:e4:f9:fa:46:4f:9f:6d:a6:28:
da:31:68:8c:bf:ae:50:2a:7b:1f:2c:82:cb:c5:d6:
78:e8:f8:9c:d7:e2:e1:e5:18:f2:4a:a5:67:b9:f1:
22:88:f8:7e:63:73:ae:5c:b4:f9:c4:f6:d9:76:e3:
a8:7a:d6:1b:d8:fc:05:4d:c3:32:b6:a7:44:bb:79:
84:fb:e2:c6:9d:33:70:33:42:3a:4b:cc:7a:b3:68:
67:e2:5a:57:20:b9:ee:5e:8d:2f:dd:22:45:60:4f:
86:b7:b6:92:74:00:e8:c7:6c:fe:4a:1e:25:2f:3c:
84:94:bb:e6:02:ab:85:4c:15:d3:c3:fd:20:76:d8:
bd:f1:e8:a3:c0:e0:75:d8:88:da:6d:20:68:00:f9:
f1:c2:9e:f1:c3:c2:a7:09:02:22:2e:c5:45:1d:a2:
19:e4:34:b0:23:5e:75:b2:1a:0d:77:b7:f5:08:9b:
18:cd:77:1e:bb:99:54:ad:9b:56:eb:18:c4:57:14:
c5:0b:17:ea:b0:16:b5:51:a6:9f:30:2d:57:8c:00:
fa:f9:c3:22:e7:f6:f2:e4:c4:0b:a5:f8:ca:d2:0b:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:9B:CF:1B:AB:6C:4B:48:37:25:68:58:AF:D5:B7:97:23:D9:6F
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5d:9c:9d:df:e1:90:56:6d:3f:7a:dc:f8:41:d4:b4:56:bc:
83:bc:b6:35:db:04:7d:37:48:e0:dc:84:79:24:d9:83:99:2a:
f7:83:72:e5:cc:b2:c3:c8:f8:7b:48:53:61:ab:a8:d0:c1:80:
c5:7f:2e:22:1c:02:b2:62:57:9d:d2:51:41:b9:4f:cc:09:1b:
3f:df:b7:a2:72:c7:f9:0b:81:f8:62:95:ed:6b:26:e8:fe:3b:
ec:bb:56:05:62:80:48:85:f7:f1:f9:33:98:88:11:c9:45:29:
cc:f4:ae:4c:6f:ba:30:6f:44:80:54:44:7a:b0:c0:6b:c9:7b:
8d:02:60:22:b7:71:4f:46:6c:6b:bb:ee:ed:36:45:d7:d0:6e:
7d:9a:9a:cb:f7:4e:78:0d:9a:21:d9:82:66:5b:45:a5:fc:b9:
6a:9c:0e:c0:9b:29:b2:a8:8e:ee:30:9b:1c:fb:05:89:ab:f8:
b0:09:69:59:62:cf:f6:82:40:27:8b:b6:56:7e:12:85:2c:35:
d5:27:82:79:c2:9e:3e:2c:b9:3c:04:23:c4:70:db:46:76:6a:
ce:59:65:2b:75:87:87:4c:21:65:6d:2b:74:9f:66:1b:42:f4:
73:20:8e:0c:c6:4d:51:73:37:3c:3d:04:24:d7:89:90:fc:de:
99:40:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:07:49 2026 by rpki-client