Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: 0pdRKPipHrER8EwBR45+biRQYbAF7ujR0ou+tP0iokU=
Subject key identifier: 49:D6:6A:D4:A0:8B:5F:54:92:CA:60:20:50:23:C7:31:72:44:5C:A1
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019CE5FF5458A1DAA69BF84D745AAAEBAC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 13B0
Signing time: Fri 13 Mar 2026 07:00:41 +0000
Manifest this update: Fri 13 Mar 2026 07:00:41 +0000
Manifest next update: Sat 14 Mar 2026 07:00:41 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: ++FCyzhThVIe7kM6jb0GpZ+EmcAb2bAGpdCzCHPotvM=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:54:58:a1:da:a6:9b:f8:4d:74:5a:aa:eb:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Mar 13 07:00:41 2026 GMT
Not After : Mar 14 07:00:41 2026 GMT
Subject: CN=49d66ad4a08b5f5492ca60205023c73172445ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:b5:de:2d:b4:ac:ea:a0:aa:a8:0e:0f:84:
20:0f:c8:98:ca:3e:24:a6:dd:a6:08:73:cc:a2:ab:
cb:bb:ce:43:f0:39:73:dc:4b:9e:30:34:9c:cc:66:
9a:77:e8:1d:3e:61:59:79:ca:8e:2d:a6:a5:0a:4f:
33:c3:3a:c2:f7:e4:c0:43:c5:89:12:e0:92:15:af:
66:56:cf:a1:c1:1a:53:71:e0:f9:6b:97:d3:c3:1c:
d3:d6:5c:75:03:71:ef:be:57:32:18:f3:0a:73:68:
84:31:32:e9:ec:29:d3:d0:90:39:56:f3:69:6d:15:
52:fb:d5:13:03:e4:93:ac:21:c6:7a:fd:98:2b:5b:
0c:73:e6:c3:39:ac:48:76:b9:20:70:36:ea:6a:27:
e1:d1:ec:27:ae:33:c9:cb:f5:46:22:b0:5d:47:97:
e6:ea:13:ca:b9:64:63:aa:f7:e2:8c:5b:e8:82:24:
d2:df:22:01:81:fd:36:93:9f:33:8e:e8:85:81:8c:
7b:b6:46:8d:34:d0:a0:a1:8b:c8:ce:19:5f:ee:b1:
5b:6c:06:24:d3:f9:c6:34:5c:e5:95:83:9f:ae:b9:
37:f9:0b:f9:b4:7b:8a:54:58:7b:fb:a1:f2:25:52:
88:4b:65:56:86:28:24:0e:d8:08:cd:b2:91:fd:8f:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:6A:D4:A0:8B:5F:54:92:CA:60:20:50:23:C7:31:72:44:5C:A1
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:09:fd:96:ea:fd:f4:48:57:54:dc:38:28:93:d5:95:32:8c:
d8:a2:26:47:26:70:99:b8:6f:5a:23:cd:e9:ff:c6:26:85:7d:
6b:ca:0e:cc:02:13:18:60:84:37:0f:ac:0d:18:1b:51:2a:b6:
ea:93:36:ea:95:43:d7:6e:6e:5d:c3:1b:90:1b:6a:53:24:d0:
8d:92:12:80:67:b9:7b:02:48:ca:2d:0a:99:75:36:aa:74:46:
42:d7:92:01:56:e2:4e:7f:28:73:7d:01:a9:ae:85:49:87:5f:
34:4f:09:c8:d4:86:2a:50:2d:e1:2d:ba:fb:59:b4:53:54:f3:
c0:fa:8c:b8:f0:8d:53:e6:73:7a:8f:3f:18:08:8b:4f:d9:e0:
ff:ca:f1:04:06:5d:a8:cb:a0:cf:ab:01:6e:a3:cd:4d:22:0d:
4e:2d:20:a9:75:ce:a8:48:05:42:c9:be:9f:92:24:89:17:b5:
f8:bd:2d:5b:37:4f:0b:30:d4:bd:e1:73:bc:69:1e:8a:e3:0a:
7a:f7:bc:cd:5c:dc:be:5c:0a:0f:d4:63:ac:de:2a:49:66:76:
15:b7:76:79:33:b0:a4:ab:cc:24:1d:bd:7b:50:ba:d9:dc:62:
ab:51:5d:af:a9:9e:b9:48:7a:75:d2:02:69:1f:bc:a8:f9:57:
6b:e0:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:45 2026 by rpki-client