Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: 1jHqKPO7lgcIDoZsEFUqIOaeuvc1jm6MMphIl1wOec0=
Subject key identifier: 33:BE:5D:04:C0:18:95:63:F4:57:B6:71:F3:D5:50:91:B4:03:F8:2F
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019D389BB561A6788D6864AC6B36294B0F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1601
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: I9HH-b3uhEYMGd5k7Iye-im2vcM.roa (hash: 4R5IweuaeIYK4isAQkRjmQfBB4/D3ub3P+G0IZYR6QU=)
2: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: pD84RMVU2QCmisvoyIpyvzgjwP6MFsx4WuElvW6I7aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b5:61:a6:78:8d:68:64:ac:6b:36:29:4b:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=33be5d04c0189563f457b671f3d55091b403f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:2d:38:a4:10:e1:df:a8:52:0e:b3:68:a3:
ff:c9:c1:7b:7d:f9:f6:26:de:fc:85:d6:ae:5c:02:
bf:d0:01:6b:2e:d2:be:3f:22:79:aa:8b:2c:07:e2:
34:8c:c1:da:cb:bd:31:15:12:cd:96:e8:aa:f0:9d:
9d:a6:5a:f5:50:0c:cc:2d:8e:03:ac:e0:02:12:49:
5c:83:f6:8d:61:6b:94:61:40:f3:12:e3:f7:a4:d2:
1a:e5:2b:56:26:88:bf:15:bb:cc:68:3b:90:b7:05:
53:dd:28:27:96:01:2b:08:e2:2f:43:41:12:71:ad:
43:a1:65:c6:f2:00:48:61:7b:5f:01:4c:ae:06:59:
74:f9:67:e6:ee:a5:55:11:81:7a:a3:7b:dc:85:f6:
47:af:9b:26:5b:cc:f2:bc:09:84:58:f8:ad:47:5d:
af:2d:e8:5e:1c:d0:76:d7:fa:88:39:34:9f:51:28:
d4:ce:37:98:cc:ea:4b:85:ab:bd:77:9f:7e:15:a6:
da:48:f6:7f:a9:0c:fd:75:bc:07:ad:20:7a:b5:c5:
2a:b5:c1:46:63:27:0f:51:88:92:1c:ed:b8:c3:54:
27:c9:f1:a5:a2:03:f1:59:d7:12:5e:82:a2:87:e3:
0b:43:9a:83:e9:12:40:c2:85:45:bc:4c:85:72:09:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:5D:04:C0:18:95:63:F4:57:B6:71:F3:D5:50:91:B4:03:F8:2F
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:ac:0c:22:5c:68:c4:ac:b4:7c:cc:20:fc:34:94:04:96:
58:33:09:5a:5d:90:f3:e1:a3:64:47:72:78:43:62:50:6e:86:
6f:37:be:4c:cc:5a:d1:5d:d7:18:c4:03:51:bc:74:55:6c:f8:
b8:46:8b:4c:c8:f6:f6:50:e3:43:3b:aa:27:44:21:b4:66:d7:
d6:d4:63:92:9c:43:ef:05:7e:f5:5c:7f:47:5c:80:0d:7b:3d:
c4:1d:e0:e8:8f:14:67:6b:26:9f:39:ce:14:5d:39:c2:e4:8a:
d0:05:41:4c:08:d8:53:b8:1e:c8:30:27:d6:81:68:1a:15:45:
62:53:4e:c7:2c:86:ab:06:47:63:5a:4f:01:84:f3:5e:a5:e1:
7b:68:6d:81:df:81:43:40:e7:eb:9b:9f:e4:60:26:dc:bd:e5:
db:d8:1e:75:f3:16:3a:06:de:9c:41:25:6e:2a:83:06:18:02:
b6:34:c0:8f:07:5b:65:d8:b5:42:56:55:3a:ca:74:dc:57:25:
05:bf:8f:b7:dc:80:d0:e4:dd:17:55:24:58:96:2d:c9:d8:6e:
96:01:6a:4f:20:9c:8b:37:b9:d5:8a:fe:ef:f5:46:7a:76:ce:
8c:f9:08:30:f7:96:90:99:0e:08:fb:b2:07:9d:1f:ac:2a:09:
c5:d9:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:21 2026 by rpki-client