
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: 0cVLc4F5zVAwSR5SvvCOGKQXyr0YiNqFDlnFzp6WbW0=
Subject key identifier: DD:1E:A7:64:43:C9:35:F8:DE:2A:5C:07:0C:97:62:40:5D:45:0F:AB
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01A0054BC00E7620D3CA5AD354EAA9E0B0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1A0B
Signing time: Sat 15 Aug 2026 12:00:45 +0000
Manifest this update: Sat 15 Aug 2026 12:00:45 +0000
Manifest next update: Sun 16 Aug 2026 12:00:45 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: mlJCbWrpHhyjNPh/4YgRthTFthAxE8FwUICvl7gsslI=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:4b:c0:0e:76:20:d3:ca:5a:d3:54:ea:a9:e0:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Aug 15 12:00:45 2026 GMT
Not After : Aug 16 12:00:45 2026 GMT
Subject: CN=dd1ea76443c935f8de2a5c070c9762405d450fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:9f:ea:16:4a:df:5f:03:ff:8f:6e:85:37:
3d:bb:19:42:70:2c:02:e4:79:0f:4c:8b:4a:ef:9a:
a1:fc:fd:db:b5:aa:8e:9d:4e:93:21:15:19:94:69:
89:ee:91:88:87:67:50:59:2f:df:c3:b7:33:27:82:
a9:52:20:3e:6f:a0:ba:64:b0:3c:19:8d:a8:0d:ca:
a0:3e:01:6b:f5:88:dd:cc:b1:92:38:d1:1d:05:7c:
94:12:94:0b:6d:01:77:3f:04:72:97:99:c3:e1:33:
4a:d3:65:9b:02:e4:0a:db:a1:ea:41:4d:4a:4f:54:
de:c5:db:58:ff:5e:c6:76:e4:a4:0b:7c:87:2a:23:
42:0f:de:11:eb:9c:3f:80:42:da:ee:d7:e4:9b:79:
cf:11:3f:2a:94:fb:af:c7:32:4d:66:37:71:5f:8e:
2a:04:c0:e8:ab:2e:e3:84:53:04:dd:ad:52:67:a1:
3b:b6:35:02:d4:bb:71:a5:0c:23:78:5a:ec:d7:1e:
f6:fe:62:59:48:fa:9a:f7:fe:f5:40:d1:40:7b:3d:
18:d4:c2:c5:33:8b:94:54:27:9d:57:04:69:61:16:
39:2b:8c:b1:22:00:9f:5e:3c:12:e2:20:19:78:3e:
13:fb:95:15:14:3d:10:b2:ca:41:29:7f:31:8c:9e:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:A7:64:43:C9:35:F8:DE:2A:5C:07:0C:97:62:40:5D:45:0F:AB
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:12:85:48:79:b0:26:4c:f8:e1:7a:58:e6:2b:b2:49:06:87:
66:d1:b2:a5:cc:13:2e:cb:d6:ed:98:f2:bf:c4:55:70:95:70:
6f:0b:01:c0:f5:7c:51:61:2f:74:e3:d7:11:4f:1a:c1:59:c8:
8b:01:e9:81:9e:7d:68:54:68:ee:9a:a0:06:63:ad:71:14:d7:
97:cf:25:a9:e9:f4:c6:65:2b:12:b7:8b:5c:74:df:cc:5d:e4:
0d:ec:13:d3:ad:54:c2:11:c8:14:38:bb:58:a8:32:2f:ba:01:
a1:59:54:db:26:bb:0f:d2:b9:22:b6:10:04:c8:e0:dd:c7:de:
13:c1:33:8e:f4:2a:a4:4b:b6:77:e3:d9:ba:5e:a7:60:b5:42:
bd:f5:cf:65:f1:67:4a:5d:c6:7f:fd:bf:f3:4c:15:8e:90:ca:
f0:48:6b:50:12:de:90:fc:2c:89:d3:c2:ad:2f:4c:9b:cb:e8:
e3:6c:e8:7b:cb:0f:fb:49:6c:48:ac:1b:bc:02:6b:fb:d0:a3:
b1:cf:25:74:83:d7:29:62:c7:f4:1e:2e:4f:aa:92:f7:01:a9:
23:1c:ab:62:96:a6:5f:1e:66:ae:4d:bd:c1:0f:20:77:72:fc:
10:07:1f:a3:35:58:03:f4:f4:81:7a:cc:73:d8:c1:f9:f0:13:
65:d5:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:45:51 2026 by rpki-client