Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: x2iQnPxut8pu8XXbwmsrv5NUxyffUmp9SzD6Y/6lo8s=
Subject key identifier: 61:4B:AC:57:13:00:9B:B1:71:8F:9F:8A:2E:95:49:F3:DC:3F:69:8D
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019D9962516C39D192F4BE68C381A0DFE108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 03:00:50 +0000
Manifest this update: Fri 17 Apr 2026 03:00:50 +0000
Manifest next update: Sat 18 Apr 2026 03:00:50 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: /Z0fZBcNbZESuLoT5VP2jyez6sGMwQfmXLjEDXI2LgA=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:51:6c:39:d1:92:f4:be:68:c3:81:a0:df:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Apr 17 03:00:50 2026 GMT
Not After : Apr 18 03:00:50 2026 GMT
Subject: CN=614bac5713009bb1718f9f8a2e9549f3dc3f698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:f7:ea:ad:38:84:3a:d5:72:51:56:70:e6:
f9:c8:fa:1f:4b:4d:db:ab:4c:7b:16:91:97:ed:20:
70:07:02:de:08:7e:2d:c3:61:0f:2a:a6:c0:5a:eb:
09:4f:79:09:9e:7c:bb:42:f0:a3:95:90:93:2e:fc:
01:b5:e9:63:10:9a:4e:21:12:f6:4d:47:ad:8c:99:
c3:ad:81:de:13:6c:b5:a3:97:0d:81:aa:d5:cd:63:
cd:48:e2:0c:83:25:2f:af:2d:68:af:7e:db:06:e3:
50:84:96:67:8d:23:14:54:83:96:53:8a:b4:44:75:
ec:58:a0:32:95:bd:7e:5c:02:59:f9:f2:a9:0c:09:
b7:b9:52:1a:4f:ea:39:26:7e:3b:ae:ae:3f:9c:cb:
01:21:bb:67:9f:e8:0b:fd:59:ed:60:b4:ef:8c:31:
6d:d4:37:95:f2:6e:b4:4f:aa:55:7e:61:c7:55:84:
ee:18:61:63:a6:a7:0d:12:2e:f1:5e:59:32:94:8d:
d8:15:cf:6c:ca:44:c3:fe:93:c4:51:65:05:37:f7:
ea:6f:64:99:c0:26:06:7e:c1:de:93:6e:8c:45:36:
50:07:e2:00:b2:e7:7b:f4:8b:3f:e8:c3:82:63:4b:
7f:04:c2:59:66:60:35:77:98:d4:73:5f:2b:12:86:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:AC:57:13:00:9B:B1:71:8F:9F:8A:2E:95:49:F3:DC:3F:69:8D
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:9d:a0:41:ba:f3:41:c4:6f:37:60:d3:82:7c:7c:d6:65:
50:96:85:e6:74:79:f7:0c:ec:50:5c:7f:9e:e3:f4:3a:54:a9:
fb:36:a6:4e:6b:da:0e:a5:68:cf:6d:57:30:3e:61:44:c7:6f:
5f:35:70:0e:22:9e:7f:79:a0:1c:81:1f:76:8f:9d:36:ab:77:
5e:85:60:8d:7a:45:ee:58:e4:90:bb:58:9b:c2:c2:3a:5e:0c:
6c:87:9d:7f:35:00:71:e4:82:ef:17:88:3a:ba:22:33:6d:df:
ad:28:6e:7e:1b:24:15:32:bd:ed:eb:c6:4a:a1:48:67:11:b3:
2f:80:8f:78:e8:7f:7d:92:dd:3e:f2:66:f4:46:7a:70:a1:65:
a2:3f:7a:d8:0e:f0:94:2c:69:40:76:3b:3b:3f:93:94:5d:09:
1a:f8:06:05:ee:87:8a:7d:2d:4e:f4:4b:ad:91:ff:22:40:b9:
56:00:19:9a:02:1a:2b:c4:ab:76:10:76:49:d0:8c:38:57:f3:
34:79:df:95:61:72:7f:c4:6a:31:d4:66:f7:b0:c0:cf:70:e0:
5c:ec:34:88:6b:cd:32:ee:42:10:2a:1c:3e:70:dc:99:60:8d:
f2:c0:06:e2:7f:10:22:ab:b0:8c:64:40:6f:e5:13:c1:ad:1b:
ce:2d:b6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlFsOdGS9L5ow4Gg3+EIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk
YjAwNjUwHhcNMjYwNDE3MDMwMDUwWhcNMjYwNDE4MDMwMDUwWjAzMTEwLwYDVQQD
Eyg2MTRiYWM1NzEzMDA5YmIxNzE4ZjlmOGEyZTk1NDlmM2RjM2Y2OThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdj36q04hDrVclFWcOb5yPofS03b
q0x7FpGX7SBwBwLeCH4tw2EPKqbAWusJT3kJnny7QvCjlZCTLvwBteljEJpOIRL2
TUetjJnDrYHeE2y1o5cNgarVzWPNSOIMgyUvry1or37bBuNQhJZnjSMUVIOWU4q0
RHXsWKAylb1+XAJZ+fKpDAm3uVIaT+o5Jn47rq4/nMsBIbtnn+gL/VntYLTvjDFt
1DeV8m60T6pVfmHHVYTuGGFjpqcNEi7xXlkylI3YFc9sykTD/pPEUWUFN/fqb2SZ
wCYGfsHek26MRTZQB+IAsud79Is/6MOCY0t/BMJZZmA1d5jUc18rEoaheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFLrFcTAJuxcY+fii6VSfPcP2mNMB8GA1UdIwQY
MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt
MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi
LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAOdoEG6
80HEbzdg04J8fNZlUJaF5nR59wzsUFx/nuP0OlSp+zamTmvaDqVoz21XMD5hRMdv
XzVwDiKef3mgHIEfdo+dNqt3XoVgjXpF7ljkkLtYm8LCOl4MbIedfzUAceSC7xeI
OroiM23frShufhskFTK97evGSqFIZxGzL4CPeOh/fZLdPvJm9EZ6cKFloj962A7w
lCxpQHY7Oz+TlF0JGvgGBe6Hin0tTvRLrZH/IkC5VgAZmgIaK8SrdhB2SdCMOFfz
NHnflWFyf8RqMdRm97DAz3DgXOw0iGvNMu5CECocPnDcmWCN8sAG4n8QIquwjGRA
b+UTwa0bzi228A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:57 2026 by rpki-client