Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: JETmd8oz6/9ZMs4c/d0bffK6+OYH//G/Lks4I3BK2QM=
Subject key identifier: 92:42:B5:69:A0:7F:19:F5:45:7E:EB:B9:5E:7B:C2:4F:CF:D8:B1:C8
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019CE3D9B0E9DFE2437E32D1AB36C1616728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1506
Signing time: Thu 12 Mar 2026 21:00:20 +0000
Manifest this update: Thu 12 Mar 2026 21:00:20 +0000
Manifest next update: Fri 13 Mar 2026 21:00:20 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: iSiHtUBCQGYZXoaQ0Cg0SvuZPH2NFdGvDXg038XO9mk=)
2: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (hash: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ=)
3: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (hash: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:b0:e9:df:e2:43:7e:32:d1:ab:36:c1:61:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Mar 12 21:00:20 2026 GMT
Not After : Mar 13 21:00:20 2026 GMT
Subject: CN=9242b569a07f19f5457eebb95e7bc24fcfd8b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:40:7a:c8:f3:dc:50:e7:1a:47:80:c6:61:
e9:36:11:81:5b:24:33:26:79:90:da:64:10:2c:cf:
8e:e4:da:64:13:c5:d7:27:48:f4:41:ed:0f:f3:a7:
f0:68:1f:50:2f:a5:39:b2:40:0b:5e:f5:32:34:6e:
e3:21:08:f5:af:40:99:af:fd:72:03:74:64:77:34:
40:ed:8f:df:f9:88:2e:ae:67:72:16:d9:cc:45:12:
2d:a8:a5:11:3f:27:f7:53:e4:77:18:19:bf:27:a9:
a4:c5:34:f4:e5:e8:2f:ec:18:18:94:85:ca:53:9c:
ff:dd:53:02:b6:67:75:47:58:84:a4:78:d0:f5:da:
eb:cc:ee:ed:f1:e6:8d:b1:1d:6c:b3:db:5e:9d:81:
6f:5c:e3:22:bd:99:15:32:d8:a3:1a:fe:6e:1d:4f:
f3:87:1d:30:93:ea:4f:0b:df:92:bc:d4:ee:ea:c9:
ce:a2:34:d3:f3:df:44:93:1b:8f:b8:c3:98:0e:eb:
52:2e:e4:31:ea:60:44:9e:9d:ef:0b:e5:43:e0:a5:
a0:f5:a4:7e:0f:d5:e5:05:26:02:f3:e0:c6:7f:ae:
63:2b:c4:9a:9a:c1:80:95:65:da:97:0d:61:e1:fa:
63:0a:1d:8d:d6:92:fa:f2:24:07:6f:a0:c4:8a:a8:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:B5:69:A0:7F:19:F5:45:7E:EB:B9:5E:7B:C2:4F:CF:D8:B1:C8
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:5e:c2:55:fb:ad:0f:31:6c:20:08:a4:e4:36:ce:48:1f:
a4:4e:1d:26:11:04:c7:d9:c5:9a:55:96:f3:fc:ba:eb:5b:9d:
0e:c8:75:4a:ed:aa:62:93:97:31:fb:8c:e9:b2:0b:17:23:f9:
e7:73:50:78:d3:69:c1:b3:37:54:e1:bb:9f:09:c3:f5:22:26:
2b:7f:b3:b8:53:40:46:76:f4:60:06:69:c4:c2:24:ec:85:e0:
3f:13:6a:27:51:29:07:f9:8e:9a:40:d3:25:fc:5b:45:58:f1:
42:9e:8a:d7:37:57:27:0c:f9:5b:33:5a:2a:4d:74:db:2e:22:
c9:35:39:13:d8:22:43:d8:61:ee:bc:b0:32:6d:83:8f:94:4f:
05:5a:14:3b:74:02:d5:48:4e:be:c3:7c:bb:b7:b9:41:fc:2e:
0e:a6:97:90:16:12:bf:f9:98:d2:12:85:12:cb:9a:a5:58:80:
b2:02:c7:84:29:37:97:02:ae:38:22:9f:28:57:6f:80:94:7d:
2f:c9:18:ab:f3:12:13:aa:a8:b2:48:4b:fc:5e:a5:f0:cf:28:
8d:58:eb:56:5a:0f:d8:0c:27:88:28:92:a5:e4:02:82:e4:ad:
67:5b:04:1d:8d:f0:95:fd:c9:5f:b7:3a:c3:ff:5f:d3:90:bc:
7d:f2:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:18:15 2026 by rpki-client