Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: MWqII4qUp0kNzPScRfjp3iOyOOI3x6hiEDgM1aiJuf8=
Subject key identifier: 27:30:99:D9:D6:84:CE:22:B6:1D:B3:AB:B9:B1:51:C3:C4:BB:E3:EC
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019FD3169DCCFA9572A49D48FFD2EA3A6ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1534
Signing time: Wed 05 Aug 2026 18:01:42 +0000
Manifest this update: Wed 05 Aug 2026 18:01:42 +0000
Manifest next update: Thu 06 Aug 2026 18:01:42 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: IPeQI16/CJETjZu1ErE5ImwKXZWiw2kxfL9+tQ3arxg=)
3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:16:9d:cc:fa:95:72:a4:9d:48:ff:d2:ea:3a:6a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Aug 5 18:01:42 2026 GMT
Not After : Aug 6 18:01:42 2026 GMT
Subject: CN=273099d9d684ce22b61db3abb9b151c3c4bbe3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:ce:10:0c:22:2b:d9:da:6e:dc:72:85:2d:
85:8c:88:0e:7a:1a:bc:5f:f8:81:5b:48:3c:2c:ce:
cb:bd:5b:8a:eb:1d:39:a7:e7:f9:a2:b1:1c:6a:18:
67:18:6d:ff:c9:0a:f4:b7:67:45:ab:d9:60:ef:be:
5c:71:c9:dc:85:f3:1c:c4:98:ae:20:96:de:90:7c:
79:fa:ed:8a:9a:7f:a2:6d:ac:5c:75:03:04:b3:9b:
ca:f5:24:9c:76:e0:37:55:78:92:78:18:bb:de:f7:
75:3c:ab:1c:f5:18:43:bd:b6:91:b8:cb:1b:29:f0:
0b:9d:f3:bd:e5:44:c3:3f:03:96:5e:12:af:b1:df:
bf:3e:01:53:b1:01:78:4e:e0:e8:10:c6:72:a9:b7:
36:e9:9f:29:5d:37:86:1c:c7:89:00:4c:79:5b:8e:
99:45:2b:6c:9d:90:84:73:80:05:2c:e2:65:e1:6e:
b6:e4:ec:68:06:9e:f2:0b:26:53:75:4a:ab:97:c7:
f9:df:9c:71:ec:f6:a9:74:32:8e:74:42:0a:ff:7b:
46:d8:a0:55:8a:5b:8b:f0:57:7e:67:18:0d:4e:70:
b1:34:28:d8:ea:b5:96:17:02:63:e8:0f:ea:a9:a0:
5f:4b:67:ea:a0:d8:f7:95:8d:9e:1c:3c:10:66:27:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:99:D9:D6:84:CE:22:B6:1D:B3:AB:B9:B1:51:C3:C4:BB:E3:EC
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:0b:f1:2b:57:66:3a:df:cb:58:b1:77:ae:78:f1:57:e4:
47:53:ef:3b:71:45:2f:56:de:b8:16:9b:64:1f:c2:54:2a:8a:
0c:3c:58:8c:43:06:4e:b1:8b:7b:08:f7:31:dc:6b:9d:b3:94:
a5:63:39:ec:56:b3:57:43:75:28:6b:05:65:44:d3:be:57:f7:
c7:81:98:4a:a0:f2:5d:f0:a8:0b:f3:04:f0:30:8b:53:93:a2:
ab:f4:20:cf:33:4b:69:0a:e2:0d:8a:89:51:a1:87:cc:e4:de:
5b:0b:d3:9b:a1:54:88:b4:f1:5e:dc:49:b1:c9:cb:51:91:8e:
77:3d:36:25:7a:45:da:f7:9d:b8:ac:72:7c:37:6d:c4:2f:7f:
3c:26:2a:ea:d7:1b:34:19:fd:03:b5:73:96:64:0a:6b:9f:c0:
bb:38:b0:dc:1b:30:da:53:13:48:7f:1d:08:32:45:17:09:17:
19:ba:99:67:6f:ec:d3:99:f1:ca:50:c3:22:59:6f:32:79:e3:
ea:81:49:e9:c5:93:3d:ad:a5:ec:9b:c0:90:64:f0:e4:bb:80:
ed:6c:60:5c:f1:de:b3:55:2d:e1:3f:65:66:21:ce:15:88:f1:
82:cc:61:d3:5e:1c:6b:71:84:34:74:f8:75:46:e7:57:93:20:
a8:88:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:42:09 2026 by rpki-client