Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: y0jLwOBsQ15TP6WFHXmDgn4OYl1Bgx2+Br/GxuRIwVM=
Subject key identifier: BC:D2:06:85:05:1D:D9:25:1E:3C:45:09:FD:F7:A8:53:60:78:F7:CA
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019DD1D25E3D28D2CF4E75E95AF4DCA4B4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1582
Signing time: Tue 28 Apr 2026 02:01:57 +0000
Manifest this update: Tue 28 Apr 2026 02:01:57 +0000
Manifest next update: Wed 29 Apr 2026 02:01:57 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: stqkNu7QtGi0AO7ShpOdf/H/57i42qTpejZsWc0VNyo=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:5e:3d:28:d2:cf:4e:75:e9:5a:f4:dc:a4:b4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Apr 28 02:01:57 2026 GMT
Not After : Apr 29 02:01:57 2026 GMT
Subject: CN=bcd20685051dd9251e3c4509fdf7a8536078f7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:9e:23:bd:97:65:b8:e3:5b:16:69:5a:67:
8d:cf:25:ec:f3:7a:27:7e:e0:8e:2f:d3:bb:c3:55:
e0:db:c8:e7:c9:50:b3:b2:9a:d9:5c:db:de:9d:ac:
c2:0f:d1:44:d5:1a:2b:69:8e:c6:4d:97:7b:1b:45:
ca:6a:24:9a:d1:f8:32:d6:e1:a1:7f:5f:54:24:78:
76:82:2e:e5:b7:05:9c:3f:5c:06:5f:e3:0c:8d:3e:
25:29:67:45:3d:ef:83:a0:a0:0b:a1:59:c5:89:d4:
86:a2:c1:1d:d2:4e:35:44:0a:a6:2f:43:6e:d6:94:
3a:23:81:d3:7b:ad:ac:80:b9:cd:db:7e:ad:98:c5:
c2:c4:82:f3:92:39:52:3b:72:d7:58:09:1f:b6:24:
08:ae:78:92:fc:58:08:a6:3a:e5:ba:a5:79:c9:6d:
1a:ce:39:f6:8d:b4:dc:62:01:44:4a:5f:28:fe:29:
8a:45:f4:8a:bb:ec:79:f4:6d:99:92:64:1c:7f:d9:
c3:03:8e:2a:72:30:29:88:cf:95:0f:94:12:94:d4:
f0:93:2f:a7:4c:69:70:bf:3e:f9:5a:08:77:94:a0:
23:e7:75:8a:50:26:cd:1e:33:a1:ef:c0:70:6c:80:
3f:5e:4d:66:f1:ca:1d:7d:d0:d1:64:59:cd:21:da:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:06:85:05:1D:D9:25:1E:3C:45:09:FD:F7:A8:53:60:78:F7:CA
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5b:ee:3d:3d:4b:cd:20:5c:eb:e1:32:5b:2b:cd:69:e6:8c:
68:41:c4:bf:d8:3f:89:9d:f9:e8:86:8b:27:bc:2d:ad:10:d1:
a0:87:64:34:26:3b:81:aa:6c:cc:68:46:b2:00:4a:3f:71:59:
58:7b:67:86:a5:42:50:9e:67:e2:57:fc:ee:ee:c8:ea:76:6a:
11:eb:47:16:f2:16:c8:d0:f7:38:c7:1d:22:9a:50:b0:6f:01:
cc:e2:6d:ba:44:97:25:70:33:71:00:46:1c:24:c9:8b:84:9c:
f7:9a:5b:d1:c2:3e:1c:fb:3f:6c:c1:59:b7:5c:61:38:b4:f0:
78:fb:bb:f2:1d:39:34:75:79:04:34:58:98:20:70:0a:2c:fd:
9c:eb:9c:5b:d0:47:2c:35:91:19:87:6b:04:af:84:c9:1c:48:
fb:e8:31:76:d5:22:97:8a:5e:fc:d1:50:c3:1d:46:81:d6:8c:
d5:ff:28:1e:eb:65:c3:03:ca:52:0a:0a:22:77:19:be:cc:c8:
d3:47:51:37:87:13:d6:56:58:f3:5b:06:bd:3e:de:d9:39:02:
c1:84:cf:e8:23:2e:5e:72:22:22:66:ed:ab:22:43:9e:f6:7a:
b1:6a:ec:02:c2:90:9f:cf:0b:31:62:1b:42:1e:83:63:1e:da:
83:e0:3f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3R0l49KNLPTnXpWvTcpLTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj
ZTBhNzkwHhcNMjYwNDI4MDIwMTU3WhcNMjYwNDI5MDIwMTU3WjAzMTEwLwYDVQQD
EyhiY2QyMDY4NTA1MWRkOTI1MWUzYzQ1MDlmZGY3YTg1MzYwNzhmN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o2eI72XZbjjWxZpWmeNzyXs83on
fuCOL9O7w1Xg28jnyVCzsprZXNvenazCD9FE1RoraY7GTZd7G0XKaiSa0fgy1uGh
f19UJHh2gi7ltwWcP1wGX+MMjT4lKWdFPe+DoKALoVnFidSGosEd0k41RAqmL0Nu
1pQ6I4HTe62sgLnN236tmMXCxILzkjlSO3LXWAkftiQIrniS/FgIpjrluqV5yW0a
zjn2jbTcYgFESl8o/imKRfSKu+x59G2ZkmQcf9nDA44qcjApiM+VD5QSlNTwky+n
TGlwvz75Wgh3lKAj53WKUCbNHjOh78BwbIA/Xk1m8codfdDRZFnNIdoZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzSBoUFHdklHjxFCf33qFNgePfKMB8GA1UdIwQY
MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt
NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5
LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1vuPT1L
zSBc6+EyWyvNaeaMaEHEv9g/iZ356IaLJ7wtrRDRoIdkNCY7gapszGhGsgBKP3FZ
WHtnhqVCUJ5n4lf87u7I6nZqEetHFvIWyND3OMcdIppQsG8BzOJtukSXJXAzcQBG
HCTJi4Sc95pb0cI+HPs/bMFZt1xhOLTwePu78h05NHV5BDRYmCBwCiz9nOucW9BH
LDWRGYdrBK+EyRxI++gxdtUil4pe/NFQwx1GgdaM1f8oHutlwwPKUgoKIncZvszI
00dRN4cT1lZY81sGvT7e2TkCwYTP6CMuXnIiImbtqyJDnvZ6sWrsAsKQn88LMWIb
Qh6DYx7ag+A/WA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 05:47:41 2026 by rpki-client