Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: iQNR/U1gq4VKStKWs/BMRjCBRSbu69j8xUaKgMA4/LE=
Subject key identifier: 8C:17:FD:96:FE:A5:87:AE:2A:D9:6D:26:67:9A:9A:B5:99:D8:D3:8C
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019FA33C9EFCB2B589EE1930A7F5491EDFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1673
Signing time: Mon 27 Jul 2026 11:01:26 +0000
Manifest this update: Mon 27 Jul 2026 11:01:26 +0000
Manifest next update: Tue 28 Jul 2026 11:01:26 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: Nn01F75DmqZF0hepbApoEHD1QiMqjOmjned2vUX9xUM=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:9e:fc:b2:b5:89:ee:19:30:a7:f5:49:1e:df:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Jul 27 11:01:26 2026 GMT
Not After : Jul 28 11:01:26 2026 GMT
Subject: CN=8c17fd96fea587ae2ad96d26679a9ab599d8d38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:f5:69:ca:eb:9c:fd:6e:ab:26:49:1b:87:
e0:8e:c7:2f:f2:cd:eb:10:44:aa:5a:2d:8f:f7:59:
0f:7c:4c:9b:b4:eb:2d:53:ea:2e:0f:61:52:13:ca:
58:3b:1a:87:c8:a4:2b:72:2d:5f:7c:ea:a7:80:39:
61:b8:d4:25:ed:e6:79:11:8b:1b:49:f2:b4:17:c6:
44:8c:02:a5:31:0b:1e:14:3b:15:32:b9:16:8a:e4:
a5:8b:89:95:76:6e:7c:55:a9:03:80:61:bc:5a:53:
64:43:01:a1:ff:da:13:d0:a0:73:f7:30:1f:fe:d0:
50:5f:7e:57:cf:70:56:b5:d8:f2:2b:ae:17:0f:a1:
05:85:da:73:ba:a0:63:c9:fe:3c:db:6a:7e:de:a6:
cb:64:fa:e6:cc:b7:22:ac:e3:41:72:21:41:e2:66:
b7:bf:e3:16:4f:60:81:59:ed:69:3a:7b:8f:3a:c6:
44:e9:88:e0:52:0a:2e:45:85:ea:aa:c5:41:e8:6d:
21:89:11:3d:6b:1b:ba:80:ec:a4:7b:2c:22:dc:7d:
53:43:d7:43:67:37:2f:86:bf:1d:c2:be:bc:9f:74:
6c:cc:e9:58:11:66:93:68:4c:30:e3:12:f9:3b:c2:
fc:89:7a:19:04:99:e2:c3:90:72:83:db:06:41:a2:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:FD:96:FE:A5:87:AE:2A:D9:6D:26:67:9A:9A:B5:99:D8:D3:8C
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:4b:5f:8b:de:44:87:42:4f:fc:1a:f0:9d:fa:d5:61:30:
6f:87:89:b2:d4:03:e2:14:ae:fa:95:99:07:5d:85:1c:28:58:
54:ba:a3:2d:c5:a1:08:2d:db:fa:f3:15:fe:d5:32:54:a1:cb:
08:35:98:94:a8:fd:49:89:a1:df:4d:3f:e2:56:fe:54:95:58:
7e:fd:ff:2b:e6:92:6a:fb:b0:43:67:22:f2:e8:92:d6:9e:93:
db:e8:d4:a1:ce:90:cb:19:83:80:90:57:6f:a9:c3:e6:21:4e:
ac:5f:e8:6b:bc:9b:21:cf:a0:8f:59:95:b4:ac:d3:5e:bd:0d:
32:08:c6:f6:b0:16:78:fa:04:6a:96:40:3f:03:36:ac:78:b5:
33:13:c4:fa:21:20:5f:98:26:c7:7d:6b:ae:57:93:3b:13:77:
2c:c7:32:d0:c5:92:1b:fe:73:41:35:3b:71:93:fa:51:44:ac:
68:d5:2c:38:8e:d1:2d:ef:59:4a:48:c8:be:50:ed:5b:44:6e:
a3:a0:b1:7d:1a:73:d2:09:f7:d6:04:bf:a9:69:e9:6d:4b:f6:
9d:2c:da:49:bb:6a:c2:cc:0a:bb:3b:da:d4:98:75:c6:7e:d6:
d1:77:90:dd:5b:f7:a9:00:6d:32:8b:fe:74:0b:82:09:9c:5d:
64:8a:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:16:45 2026 by rpki-client