Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: Mrcb0mN2Z89JC6TJdAqzWg+9/HhPY+KpoRD1USweBXM=
Subject key identifier: 0B:76:D2:71:C1:E7:2D:0E:54:D7:50:E4:A5:44:71:F4:51:31:CF:3C
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01A15D79E481EDB5E88C785E76B46E279910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 1426
Signing time: Wed 21 Oct 2026 08:00:31 +0000
Manifest this update: Wed 21 Oct 2026 08:00:31 +0000
Manifest next update: Thu 22 Oct 2026 08:00:31 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: coOL36xEL3GTVxUC904H9rdwkIAwnH31M7ruhBVjUAM=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:79:e4:81:ed:b5:e8:8c:78:5e:76:b4:6e:27:99:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Oct 21 08:00:31 2026 GMT
Not After : Oct 22 08:00:31 2026 GMT
Subject: CN=0b76d271c1e72d0e54d750e4a54471f45131cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:98:5b:e0:93:0b:3c:c1:ab:1f:63:51:9c:
23:2b:18:49:a8:f5:8e:25:e9:93:9f:56:22:8d:3d:
67:1b:69:10:b8:23:28:1e:1f:21:aa:e6:51:9c:d8:
22:d8:9a:f9:e1:06:37:63:a0:1a:a6:82:2f:4f:61:
19:c6:de:2e:f5:4b:92:9d:fc:7c:39:23:4a:aa:e9:
ed:b4:92:63:00:3b:54:0f:78:0a:8c:3b:b7:21:ac:
e0:a4:f2:7b:f4:b5:1c:dc:a2:68:1c:9a:fa:e3:f1:
27:9a:00:63:e3:2e:45:a4:5e:cd:dc:52:2a:a1:41:
95:3c:e9:be:2e:bb:b0:49:9e:50:33:fc:70:d2:8f:
de:97:ea:8e:e2:02:cb:32:41:84:70:0c:2a:f4:5b:
98:85:7c:74:bf:50:82:4f:a1:4c:dd:b2:33:ee:9d:
8f:fd:86:df:61:66:a3:25:7f:9f:e5:92:2e:6a:58:
24:c4:50:58:3b:f1:be:b2:d6:8e:44:de:74:4f:b2:
96:1e:9e:b4:9d:da:2f:0c:66:8c:08:1f:ba:fb:70:
7c:12:4c:8f:4f:65:cf:d2:b5:1a:a1:c1:3a:95:fb:
ea:f2:33:9c:eb:5b:1c:cf:a5:1f:89:7a:b8:23:a6:
87:8c:78:63:1f:eb:d8:d9:5d:d7:ab:ab:21:54:60:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:D2:71:C1:E7:2D:0E:54:D7:50:E4:A5:44:71:F4:51:31:CF:3C
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:88:00:fa:05:af:63:4c:15:4d:8e:6c:2c:6a:83:e4:8d:
35:d5:9f:e6:f7:b9:66:08:bf:55:03:58:3e:2b:02:ee:cb:ee:
49:20:eb:9d:d4:3e:b1:12:c1:1b:80:b3:0d:f8:65:50:c3:6c:
78:83:31:12:91:e1:fc:b1:62:89:e5:b7:8e:31:17:58:7a:c8:
3f:69:fd:52:86:46:3d:29:dc:2e:25:8c:41:7b:ec:69:f1:b3:
72:b6:11:97:45:2b:32:95:6d:fc:c9:9a:8d:78:96:f7:12:bf:
ef:ff:34:78:c3:0d:bf:7b:71:5c:aa:a8:13:09:11:4e:a3:a3:
5a:ea:86:25:d3:3c:66:bf:6d:a9:72:b6:e4:f4:2c:e0:ef:a8:
ab:2d:db:a4:fe:29:52:a0:54:25:28:5b:43:8f:62:e7:86:66:
64:31:41:10:c4:5d:8b:c4:a1:4d:37:cc:17:ce:9d:5e:5e:2e:
72:78:9b:5a:6b:f7:16:ec:53:79:f3:fd:e7:b8:e1:42:0b:77:
2c:eb:55:5d:62:b2:f2:4e:05:43:1c:00:cd:e9:c9:30:47:0c:
1a:42:2d:56:33:e8:b5:4f:3e:04:68:d1:e7:92:b4:70:4c:51:
da:8d:12:2b:54:c1:fb:37:2e:ed:16:5e:ec:48:f6:7c:1c:9f:
ae:72:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:39 2026 by rpki-client