Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: Nb9Ywf8b7dyxMgdnSzwKzkrIMAi2vZNj2eOEeQWQHXw=
Subject key identifier: 15:17:F4:CF:34:C8:C7:81:DF:79:A9:BA:8B:44:1C:3C:EC:55:4C:0D
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 01A08ED6CE1F72AE92C25A8BF3347D049268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 16ED
Signing time: Fri 11 Sep 2026 05:00:36 +0000
Manifest this update: Fri 11 Sep 2026 05:00:36 +0000
Manifest next update: Sat 12 Sep 2026 05:00:36 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: HVT1n29U1O0favFu4wfH91PCVcKBwYAjpD+CnzBRef0=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:ce:1f:72:ae:92:c2:5a:8b:f3:34:7d:04:92:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Sep 11 05:00:36 2026 GMT
Not After : Sep 12 05:00:36 2026 GMT
Subject: CN=1517f4cf34c8c781df79a9ba8b441c3cec554c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:a5:39:61:d5:08:8e:58:19:5e:8b:2e:a5:
3e:c2:8b:9d:a9:a8:a9:b2:12:a4:ac:41:77:87:2b:
8f:7c:06:34:c2:b1:64:7b:b2:ad:8f:87:bc:8b:61:
52:81:80:a1:68:97:d0:7c:83:3c:66:03:1c:e1:4a:
10:3b:8b:31:ba:3b:35:a1:aa:b5:12:c6:5a:a1:f5:
56:ed:0c:8e:61:3b:a6:ed:41:67:c2:63:a2:97:22:
0b:3b:a2:20:38:73:7d:77:7e:68:d8:83:b3:86:2c:
4b:c0:98:15:17:95:cf:28:2b:a7:b4:2c:a1:b0:fb:
a3:5b:7a:00:59:09:6d:f9:e6:20:a7:75:0d:dd:2b:
b0:70:5e:6e:20:81:f2:a4:27:a6:e6:79:e6:24:7e:
04:64:95:46:84:d8:53:1c:03:c5:02:ff:ab:a8:ef:
c5:ce:7f:f5:07:c8:94:a3:8a:26:ff:6a:f7:42:46:
60:87:21:4a:2a:51:76:a4:c0:86:8a:88:91:66:20:
f6:e2:03:76:25:db:ae:c0:6f:d3:6c:df:f5:65:b2:
16:77:d4:cc:8b:d0:fe:1d:d5:5a:2e:ab:db:26:64:
fa:40:84:c8:62:18:e3:79:9b:10:aa:78:17:65:dd:
17:b5:08:15:36:2b:48:6a:b8:19:5a:aa:7a:47:4d:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:F4:CF:34:C8:C7:81:DF:79:A9:BA:8B:44:1C:3C:EC:55:4C:0D
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:58:d9:f5:d5:a0:be:e5:75:aa:29:45:fb:a3:2c:d4:3c:
0d:ec:7f:a3:04:13:2c:2b:79:dd:da:cf:fa:df:e1:46:99:49:
2e:7c:4e:a4:e5:b1:a2:ea:c4:07:c5:64:06:1f:f9:21:f1:06:
61:e8:3f:3f:e8:90:ad:a1:cd:ae:51:fe:0a:0b:c7:03:0a:da:
e5:ab:85:c5:ca:ce:0d:f3:c6:32:9f:34:91:b2:33:96:7e:b8:
67:94:95:ae:f9:99:d4:f3:56:6e:16:93:db:5b:af:32:51:ef:
09:4b:ec:68:33:f3:99:df:8f:cb:38:20:f9:24:ff:56:d2:be:
5e:f0:8e:a6:09:2d:21:6c:f0:4a:0f:38:8d:da:6a:d2:35:6b:
e8:ab:b3:bc:f7:7c:07:fa:9f:ba:9e:7b:bf:bc:23:c7:a2:48:
24:7c:07:e7:b1:57:ea:21:d2:2e:08:a1:dd:10:70:e7:b5:8e:
15:be:2b:3d:ad:49:23:86:c8:6f:d9:5c:05:45:ad:7b:dd:7c:
8d:81:7a:db:e1:d7:01:12:99:16:58:dd:48:8d:11:1f:f5:02:
a9:a3:ad:0b:fd:73:4b:7a:41:6d:1f:11:47:1c:3a:4d:00:1b:
45:2f:a1:d4:cd:b1:cf:8b:5a:14:47:09:70:f3:8a:6d:2b:3d:
35:3f:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:11 2026 by rpki-client