Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: qFhXcnqmWBgYGIUMwb71PHd8zdt0EEJbbRQWuvjX3kU=
Subject key identifier: D1:C9:16:E2:24:47:99:D2:33:BE:56:EE:9A:B9:0B:5D:61:05:66:20
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 01A19B4630FC860D818A030F5FFB708E2AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1778
Signing time: Mon 02 Nov 2026 08:00:30 +0000
Manifest this update: Mon 02 Nov 2026 08:00:30 +0000
Manifest next update: Tue 03 Nov 2026 08:00:30 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: RKiLts9tB7+oQyoI+MpP12mh2PlEMdIyk3tGZUMx2yE=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:46:30:fc:86:0d:81:8a:03:0f:5f:fb:70:8e:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Nov 2 08:00:30 2026 GMT
Not After : Nov 3 08:00:30 2026 GMT
Subject: CN=d1c916e2244799d233be56ee9ab90b5d61056620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:1b:6d:dc:e5:cc:09:11:20:9a:d8:ab:32:
a8:4b:83:da:17:6b:a7:42:b6:00:59:90:4f:e8:ca:
cb:a8:ea:05:e0:ac:ab:85:b3:2f:06:97:ce:fc:9e:
a7:b8:56:3b:76:76:f9:cc:2a:fa:d3:5d:86:b2:f4:
51:fd:e2:1d:5f:66:88:95:bc:1b:31:74:6e:79:c0:
93:75:58:44:3a:c8:11:5b:c2:dc:1d:73:4c:49:a6:
9e:2d:dc:61:b3:4d:b9:60:22:6b:d6:a5:3d:a2:63:
04:3b:d9:55:3b:6c:3c:ed:21:55:97:9f:7b:f3:bb:
0b:55:f0:fb:20:b8:1c:e0:85:f6:44:0f:f7:d7:de:
61:40:3d:79:17:13:0f:67:66:4e:73:e0:5c:b8:d8:
3e:65:28:85:1b:58:ef:9f:be:a9:de:4a:b5:62:b5:
8f:df:1e:be:39:ed:7d:41:3c:80:20:35:c6:34:1f:
33:5e:c9:bd:ca:c6:00:e8:ce:06:d3:d5:fa:49:f0:
36:cc:52:dd:94:6b:6e:62:ee:97:36:03:2d:f3:64:
6f:bd:d0:36:f0:b3:4e:37:ec:dd:07:70:5a:17:28:
10:e3:c8:7d:92:53:fb:68:a1:3f:18:c8:78:a0:fe:
25:34:b2:42:22:30:e0:23:ef:e1:01:fc:5f:a0:02:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:16:E2:24:47:99:D2:33:BE:56:EE:9A:B9:0B:5D:61:05:66:20
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:09:b1:88:36:bc:50:68:08:d2:51:16:ae:7c:be:a3:26:
cc:0e:aa:92:7d:8f:24:49:85:34:08:13:79:88:6e:6a:07:e1:
a0:12:7b:b3:14:77:4a:0c:b0:16:5a:83:42:f8:d6:ee:0f:d0:
a8:94:44:bb:1a:76:bd:3d:07:2e:6e:19:9e:75:4c:4b:90:fa:
43:fc:2a:67:72:7f:e9:9c:5c:36:eb:55:7e:f6:ab:0a:ae:4c:
b4:89:dd:66:bb:70:f3:07:16:a4:99:ea:47:75:cb:b9:81:3c:
98:16:96:72:09:fc:9b:2b:de:b9:d0:66:b7:9c:a0:97:68:ee:
7f:cd:70:9f:40:68:c8:6b:ef:38:0e:83:c0:8c:3d:a8:30:41:
c1:46:85:a9:6f:31:ed:4a:eb:f6:85:7f:54:65:f9:0d:32:16:
3c:06:fa:87:79:9c:8b:d1:54:be:a8:84:f9:1e:d0:3f:15:a3:
4c:b9:a3:72:ce:3c:bd:1f:8a:20:31:b1:8f:24:55:16:db:4a:
f4:ee:09:82:fc:85:9c:90:01:2f:7c:5e:e1:98:d1:e3:bc:3b:
59:01:c4:a8:9f:40:11:d6:a9:e5:6b:73:6b:1c:23:d7:70:05:
40:db:8a:56:bb:2e:7b:e5:ec:f5:c7:37:ac:98:9a:0d:a2:68:
08:6c:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:53:23 2026 by rpki-client