Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: 5mRayoOuJrgyBDrz2o69qBblmkiSh7SwywiDB3qIJsA=
Subject key identifier: 28:40:0C:93:45:E1:CE:F5:5B:8F:F1:8E:3F:99:A0:D0:FC:5D:11:3B
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01A0BCC1FF79FD3897C550F43273F0231FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 15AD
Signing time: Sun 20 Sep 2026 03:00:25 +0000
Manifest this update: Sun 20 Sep 2026 03:00:25 +0000
Manifest next update: Mon 21 Sep 2026 03:00:25 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: xV+zVtNBDeFk08om2KqqsJuZvmNaj/FW6i92BTbKLOQ=)
3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c1:ff:79:fd:38:97:c5:50:f4:32:73:f0:23:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Sep 20 03:00:25 2026 GMT
Not After : Sep 21 03:00:25 2026 GMT
Subject: CN=28400c9345e1cef55b8ff18e3f99a0d0fc5d113b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:9d:2d:92:3b:39:05:9c:fc:0c:1c:c3:38:
0e:20:0d:72:a0:74:af:7e:2b:d3:47:67:44:7a:8e:
ca:c7:b5:69:c3:d8:52:90:51:ef:a6:a3:2a:10:a7:
e3:5c:e9:58:d5:d8:1f:88:41:44:2f:45:53:4a:04:
b8:cc:80:e2:e2:75:be:3c:48:e9:b8:b1:68:5d:c6:
d9:5b:34:fa:06:67:36:99:bb:5e:d5:da:8c:44:f4:
99:b4:aa:22:1a:e1:2f:7a:43:c7:df:85:1e:f7:97:
a2:37:7c:5c:25:b8:65:9e:ad:8b:0f:bc:9f:1b:50:
1c:92:48:ab:b9:44:88:d5:7f:7b:9a:4a:da:49:95:
df:e2:5a:29:4c:df:70:e1:cf:43:64:90:16:6e:f9:
42:87:64:c1:af:f0:44:65:16:c8:e1:54:5d:34:d7:
12:44:cb:f6:86:69:4a:7f:ca:ca:a0:e6:e1:21:68:
f7:90:d6:fe:e0:ac:6c:1d:aa:70:fa:aa:5e:cb:52:
9e:44:f3:a2:d1:7c:f9:0f:dd:3e:6a:97:1a:16:41:
97:ee:73:36:2b:71:c9:25:a5:c1:5b:2e:55:7b:36:
fb:98:4c:b8:63:ba:e4:3d:16:56:7a:65:d3:da:33:
a7:49:8f:a9:a8:aa:c2:1c:90:f3:d9:fd:cf:f5:86:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:0C:93:45:E1:CE:F5:5B:8F:F1:8E:3F:99:A0:D0:FC:5D:11:3B
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:62:c2:bb:16:ed:37:0a:82:1b:29:1a:f9:53:38:c8:7a:
ac:02:03:09:c4:36:d2:d3:88:91:c9:dd:05:03:cd:d4:25:86:
f0:78:fb:d1:d1:05:02:26:9d:a1:a3:86:65:d0:dd:c4:2a:41:
f0:fc:c8:24:a5:39:7b:08:d7:85:40:01:3d:e8:bc:86:a9:62:
b7:63:af:bd:22:80:ce:2e:4f:3b:cf:6b:8f:bd:48:86:32:22:
b0:3d:e1:f1:cd:30:62:1c:9a:fe:9c:90:3d:9f:7a:f8:4c:e5:
8a:a4:14:29:2a:a1:ee:4c:93:c0:3b:7d:14:77:49:dd:3f:75:
c1:d9:3b:0c:d6:3e:77:c4:a2:f2:3a:36:0a:c1:77:0d:ef:ea:
54:7f:a5:93:60:28:76:a2:d4:06:e8:16:d7:a9:55:18:3b:cb:
52:6b:2c:04:47:8c:05:1e:d0:66:de:b4:53:5b:a7:31:9f:ec:
5b:a0:f9:e8:04:32:f6:3e:f9:72:a8:e1:b0:70:e8:bf:0b:0e:
2f:29:22:bc:da:b9:6f:07:a7:6e:4e:b1:f6:9b:fe:a5:a1:3d:
82:1a:9e:d4:eb:31:57:83:0e:75:cc:0e:41:d7:ba:be:db:b1:
0f:c4:80:40:89:00:bf:91:39:0f:89:82:f8:59:a3:e5:50:42:
d3:54:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 06:50:00 2026 by rpki-client