Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: 2jGT23GCoSh6R0+q0yAX4TbE8WfOIaDoH/y3UwnlSfI=
Subject key identifier: 25:A8:A7:BF:E8:21:5A:3A:BE:D3:F9:08:C5:BD:C6:6E:74:D7:3F:A0
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 019D9A3E73ABCFBE5516ED99908FD0FC7905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 07C0
Signing time: Fri 17 Apr 2026 07:01:17 +0000
Manifest this update: Fri 17 Apr 2026 07:01:17 +0000
Manifest next update: Sat 18 Apr 2026 07:01:17 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: HJ5hEfA6a/CMrDTtQOSHVIW61q3e5hLSAzXAtNwRiuk=)
2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:73:ab:cf:be:55:16:ed:99:90:8f:d0:fc:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Apr 17 07:01:17 2026 GMT
Not After : Apr 18 07:01:17 2026 GMT
Subject: CN=25a8a7bfe8215a3abed3f908c5bdc66e74d73fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:c1:c1:cd:b4:81:2b:d5:ae:0a:d1:65:52:
51:81:4f:47:34:57:70:c5:72:8b:0f:ee:9b:ac:f3:
99:28:cf:98:d8:00:df:4f:0a:73:0c:11:52:89:97:
02:00:ea:22:99:2c:42:97:1a:1b:cc:05:71:5c:6f:
a4:d4:d9:9d:f4:da:79:d2:9c:85:99:02:ea:36:7b:
3d:01:7a:38:28:58:e9:61:88:0d:eb:64:e7:7d:4e:
14:d0:fb:02:f2:0b:e3:29:d4:d6:49:a4:69:e0:ae:
d5:5a:1f:ca:fd:5d:ab:d7:8c:a3:64:b7:3b:6e:cf:
f3:be:8c:e6:67:f4:93:cc:38:d7:1e:46:a1:ec:35:
79:86:ca:b1:20:1a:8f:22:b8:9d:e8:03:e4:42:3b:
78:35:34:ab:59:ed:59:9e:8b:25:fe:ae:cb:d3:86:
06:37:54:5d:d0:8b:14:00:7e:1a:e9:c8:24:33:86:
d3:87:1d:54:eb:85:1b:e0:54:0d:3c:e9:fe:02:e6:
64:12:3d:34:96:24:9d:a1:ab:67:15:22:8a:ed:6a:
98:58:6d:80:53:dd:b0:94:dd:80:28:d6:5f:00:41:
07:ca:7c:e5:d9:78:74:5e:32:89:a8:ad:b9:10:b2:
02:2e:c7:98:fc:83:c7:b5:d6:4e:ce:b6:63:c1:69:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:A7:BF:E8:21:5A:3A:BE:D3:F9:08:C5:BD:C6:6E:74:D7:3F:A0
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:56:9a:20:39:d1:43:e0:97:c6:2c:f4:ea:db:dc:82:be:
75:15:76:cd:c8:17:d1:c2:25:cb:3b:71:87:0a:9d:54:78:a1:
f0:30:b0:6d:ef:0e:05:a9:a1:e9:36:56:3d:e4:6a:30:ab:e4:
b3:d3:0c:22:15:23:c7:0b:4e:07:60:de:3d:63:18:55:4d:e4:
24:0b:cb:08:f3:2c:74:9f:c2:ae:58:2a:61:47:1a:04:a7:cd:
93:96:70:5d:0b:48:c4:88:eb:35:0a:4e:99:2c:18:58:fc:91:
81:54:05:55:73:ec:7d:d5:5d:e4:87:e2:0b:4c:10:76:85:27:
10:b5:24:c4:04:dd:6b:45:96:77:fc:2e:8b:96:2e:8c:b2:6b:
7c:f8:8e:a3:00:91:e7:2e:0e:32:68:2f:8a:db:fa:59:2d:a8:
c2:dd:a1:0d:a3:b4:df:7c:c4:dd:5b:10:c4:fb:48:32:d8:b2:
9c:e0:ac:e6:35:a6:8f:e7:a9:2f:b3:c7:ba:cb:54:81:cd:bb:
a1:e7:dd:d0:e1:27:53:22:ad:c0:ec:04:86:aa:f7:41:6c:28:
38:49:d4:f2:b1:4a:9f:19:3d:c4:08:19:02:51:f6:ed:71:50:
c0:c4:cd:9b:70:e6:b6:9c:00:d9:34:ab:1b:50:20:2b:f9:e1:
04:94:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:07 2026 by rpki-client