Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: qWcPcUV22nDb4Xw7S03KByW7WcyD7J+ffsn6WNWJORo=
Subject key identifier: EF:DC:6D:9A:FB:30:89:1C:AC:84:DF:CF:45:ED:E0:57:86:96:4B:CE
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019DCDBDD861424A977FFA764B48C9C93F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1428
Signing time: Mon 27 Apr 2026 07:01:03 +0000
Manifest this update: Mon 27 Apr 2026 07:01:03 +0000
Manifest next update: Tue 28 Apr 2026 07:01:03 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: dPsCjhqlUqn0zjesd0K1+qPjTtvyTNbfoYRbtLuzACY=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:d8:61:42:4a:97:7f:fa:76:4b:48:c9:c9:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Apr 27 07:01:03 2026 GMT
Not After : Apr 28 07:01:03 2026 GMT
Subject: CN=efdc6d9afb30891cac84dfcf45ede05786964bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:b1:00:f2:97:ae:2b:e1:73:fa:23:7b:ac:
99:2d:bb:8a:5c:ce:3a:ff:3f:93:31:b2:2c:eb:3c:
8e:ba:9d:23:a4:84:ae:76:b8:4f:65:ee:c9:0a:b7:
4f:f2:4e:c5:bc:65:f2:8a:37:a6:6e:53:83:98:73:
0b:f5:23:c1:33:b0:85:4a:f0:b6:6d:9e:9d:e4:ca:
dd:d5:d8:87:88:4c:cc:d0:b1:be:2e:1b:8c:ea:bf:
59:7b:83:05:ec:87:8b:3f:fa:5f:68:3c:1d:23:48:
fb:dc:94:05:33:83:8c:f2:26:71:26:d0:99:6d:f1:
0e:5d:94:7a:b5:f4:1d:c6:f1:f6:7a:56:b0:97:7d:
15:ad:b8:4c:8b:32:73:1a:0e:7d:e7:ce:dc:71:e6:
19:eb:c3:65:24:96:25:40:81:fc:ff:16:a5:2a:fb:
3f:56:58:ba:5e:69:98:f9:87:87:79:83:c7:72:14:
ee:12:8f:c5:3e:95:37:46:8b:e1:c9:54:68:d9:eb:
d5:43:2f:ae:a6:a3:b4:3b:b1:f2:f6:32:6a:1d:48:
7b:2b:1f:78:7a:73:9f:40:aa:43:3c:d3:cc:24:d7:
1e:ca:3e:1c:71:aa:a7:b0:8f:73:3b:9c:88:8d:70:
12:f2:a3:ca:f2:c2:fa:f0:57:75:e8:f0:d8:28:91:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:6D:9A:FB:30:89:1C:AC:84:DF:CF:45:ED:E0:57:86:96:4B:CE
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c9:a7:53:b1:19:cd:14:84:6f:35:2a:22:35:97:8c:01:fa:
2c:75:cd:98:65:58:16:ed:ea:cf:e1:e0:e4:6f:ff:cd:69:0b:
cc:1e:96:50:c4:29:c1:20:46:6f:37:ab:ae:58:89:6f:85:ab:
ea:f7:37:c1:00:ff:04:cc:28:89:bf:a8:1b:e2:5c:6a:f4:18:
f6:3d:1a:1b:5f:f5:ca:2c:96:0c:22:3c:e4:32:23:f8:42:a9:
a7:1b:ef:e0:8e:84:37:ab:0a:aa:bb:34:84:79:58:9e:03:e6:
ab:8d:ee:4f:b3:9e:37:8a:cf:45:8f:d9:a2:66:4c:8c:c0:09:
4e:af:bc:f4:00:15:c1:1d:c5:0b:eb:04:ab:9f:a0:1c:4c:73:
3c:32:7e:ef:05:27:13:3e:cb:2d:21:0d:19:b3:2c:3a:1b:f1:
c1:07:c4:87:c2:3d:77:04:61:2e:d4:02:17:fc:0f:d7:87:b8:
c2:06:97:68:fc:a6:43:ff:cd:10:94:f0:9e:bf:73:a1:d7:c3:
f0:6a:29:22:2b:cb:cf:15:e8:70:a6:af:e5:6b:64:44:ee:a7:
13:17:bc:0c:93:3a:56:8a:82:ba:53:83:1c:58:c2:d5:e6:ad:
34:c2:1d:e8:55:4a:f7:f3:24:a9:ae:56:da:50:cb:27:dd:a6:
ed:23:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:07 2026 by rpki-client