Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: 4XdaKllfV/RMpjeREdJB9ftX4FLUfWuljMj8PS7keKw=
Subject key identifier: 6C:54:74:40:ED:3F:6E:D9:AF:43:A4:F2:3B:B9:4D:9C:82:57:78:8F
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01A001DCCD44DEDB672329AD3A1177A0755D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 1372
Signing time: Fri 14 Aug 2026 20:00:42 +0000
Manifest this update: Fri 14 Aug 2026 20:00:42 +0000
Manifest next update: Sat 15 Aug 2026 20:00:42 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: R1gUAbCnAmWRP7qAq6LTBfZxFhCKf0SrExV2vmQf5xU=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:cd:44:de:db:67:23:29:ad:3a:11:77:a0:75:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Aug 14 20:00:42 2026 GMT
Not After : Aug 15 20:00:42 2026 GMT
Subject: CN=6c547440ed3f6ed9af43a4f23bb94d9c8257788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:0f:3b:a9:e0:1d:1f:20:4d:a2:69:b0:b8:
41:56:8a:d9:a0:8c:42:86:02:85:ae:50:7c:ac:05:
9c:3c:b2:ad:40:5a:ea:75:55:52:e7:f6:f8:01:d5:
08:aa:0b:06:b7:08:1c:ea:d7:c0:7d:84:ef:92:4b:
98:37:05:43:ee:1a:af:19:cc:82:b5:cb:f3:7e:8d:
f0:08:48:90:e8:c9:23:0d:34:bd:00:aa:e6:6f:de:
b0:ee:19:83:b2:c3:32:0d:37:e4:e2:de:80:92:0f:
0b:d7:1f:e8:21:cf:8e:cb:59:f9:2f:e7:f5:71:01:
be:23:b3:2d:5c:c6:27:c9:cf:dc:d5:70:6e:bf:37:
c3:cd:c2:7f:6b:d6:c1:b7:6c:b8:1e:66:e1:43:ad:
ca:98:6b:32:fd:1f:e2:d2:3f:9d:a6:6d:d3:a0:5b:
60:b1:1c:b9:d4:ce:ed:60:f2:70:6b:46:d2:e4:a7:
6e:e5:63:97:a6:55:aa:46:f9:6b:74:8b:6b:6a:68:
81:56:61:fc:05:41:08:fb:db:b5:94:9f:de:b7:dd:
ee:5a:9c:1c:a3:57:25:8b:8c:de:57:43:39:0c:d5:
ce:26:15:63:95:2b:a4:c5:25:ac:91:45:99:ba:c5:
73:fe:e2:f6:48:c9:6e:c9:58:0c:98:34:cc:11:33:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:74:40:ED:3F:6E:D9:AF:43:A4:F2:3B:B9:4D:9C:82:57:78:8F
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:74:87:b5:cc:3d:b9:6b:24:1e:c1:75:c3:2c:5b:46:52:4b:
35:88:95:b4:5f:bd:c0:e5:ad:f6:fd:e6:92:5b:be:6f:19:52:
9c:99:a5:ec:59:9f:e2:ed:d0:ac:18:12:e6:2d:d3:bb:f7:12:
cd:80:6f:90:70:27:72:e7:ea:df:4e:0b:97:aa:7c:40:50:f3:
cd:02:8b:e7:90:cd:99:a1:2c:a7:a4:04:2e:c1:45:f3:ba:e4:
d0:b6:da:17:a1:35:e6:e7:91:35:11:e8:c5:21:63:a9:d9:b4:
c4:4d:0d:0b:af:45:49:3a:72:79:da:4e:3f:d4:bc:1e:a0:02:
69:bc:2f:53:55:bf:dd:c0:e1:83:b0:b2:b9:25:43:0f:b4:61:
28:06:a2:b6:73:bc:9a:b1:b0:8c:62:21:88:c5:06:e3:ef:a6:
5a:0f:92:aa:27:1a:e7:e1:c9:07:4f:97:4d:d0:e3:97:bd:b2:
c4:17:3a:63:82:05:fd:82:57:70:d7:c8:dd:b7:a5:ea:09:a2:
dc:cd:1c:40:b3:bb:63:48:f6:49:0c:17:29:47:11:18:f6:66:
32:06:38:5d:67:9b:2b:48:87:9b:8b:56:69:c9:a9:a6:a5:a6:
9d:04:05:fa:82:a6:3d:82:90:c5:0e:9d:53:f7:0a:37:f1:f1:
0f:67:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:52 2026 by rpki-client