Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: ARpIyTN+STb/SUFIgHdwpDvvyVwUSH8XsekMh72oWxA=
Subject key identifier: 2F:59:FF:35:E1:46:C2:65:58:56:7F:88:83:6D:C5:01:0C:6D:0A:3F
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01A0C28DFF8B04F0315BB5B98D4BF4FE875C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 06:01:20 +0000
Manifest this update: Mon 21 Sep 2026 06:01:20 +0000
Manifest next update: Tue 22 Sep 2026 06:01:20 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: r2h1KNYh53A8fohG4ZMW1vDuZ0YsbZ0l4frek/C7Hxs=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:ff:8b:04:f0:31:5b:b5:b9:8d:4b:f4:fe:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Sep 21 06:01:20 2026 GMT
Not After : Sep 22 06:01:20 2026 GMT
Subject: CN=2f59ff35e146c26558567f88836dc5010c6d0a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:5a:a6:3b:4d:c3:6e:ea:5b:76:e3:b3:8a:
f6:af:1d:e7:04:7b:90:fe:8c:a3:8a:2e:5c:e1:a2:
ec:f6:15:b0:48:00:43:d7:7a:9b:4a:36:56:b8:e9:
02:68:17:11:af:fa:26:ff:8d:36:9d:1b:4b:c8:09:
75:cd:85:69:79:2b:17:56:b1:08:c1:cf:0b:99:2b:
00:ec:b6:f5:3e:32:bf:a3:f3:12:bc:7d:0f:5c:aa:
ff:c2:94:08:04:47:a2:4b:a5:74:cd:6f:69:89:5f:
70:8d:5a:4d:33:3c:e9:20:58:fd:13:3c:21:4e:96:
b1:26:eb:74:96:96:71:08:da:39:e0:0e:7d:2b:6a:
80:89:ab:a5:8b:30:a1:e5:0b:cf:07:c7:7f:1c:d0:
ff:a9:77:d1:0a:f1:09:b5:f9:5b:24:3b:d4:3c:3d:
78:16:82:d0:c0:d4:52:7c:79:93:87:27:4b:b1:e7:
85:65:a5:80:1d:90:41:a1:36:7a:cb:d6:ec:83:d5:
69:77:5d:40:75:4c:c7:96:98:70:a8:e5:31:31:73:
79:af:e7:49:73:c9:54:8e:5e:73:9b:3b:a1:36:87:
36:62:bc:5e:18:96:a7:c6:6e:a5:31:38:10:ce:65:
fb:75:14:7c:6c:b5:f1:68:64:b6:c3:42:70:b7:60:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:FF:35:E1:46:C2:65:58:56:7F:88:83:6D:C5:01:0C:6D:0A:3F
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:f2:75:db:69:40:eb:88:af:61:c1:22:c7:ef:c0:4d:57:
64:31:cf:21:c9:f8:62:6b:1e:6e:11:e2:53:06:62:c3:86:12:
9f:08:ef:24:69:61:f6:8a:93:c2:0d:28:80:5c:f9:46:00:aa:
69:9b:ed:39:e0:6e:3a:76:52:c7:f4:3e:25:10:dc:9f:9a:c5:
55:8c:0f:df:15:25:f2:35:bf:6f:db:7b:d0:c6:45:4c:1b:24:
ad:5c:bb:27:46:0e:a9:5f:f9:8e:5f:73:e8:16:c2:40:eb:f3:
67:39:d5:cf:df:86:98:7a:47:0f:20:bc:33:97:85:f6:86:c3:
1e:e3:87:4a:5f:aa:24:15:81:a0:c5:54:b5:47:9d:95:fd:7d:
0c:8e:31:e2:c4:1e:8e:85:4b:31:47:90:ed:bb:73:95:ae:a0:
db:7d:77:17:3a:a7:3d:e8:bb:25:50:f9:ce:56:a5:10:59:1e:
a3:c5:29:98:87:34:2a:e8:72:e7:0b:9d:b2:10:9c:60:66:89:
63:c5:96:27:61:7f:4e:28:02:d9:fc:ce:35:20:b8:37:9e:0f:
f1:be:ab:c8:c6:7d:ef:60:b6:05:d5:cd:03:1a:ee:1e:2e:65:
8b:5e:bc:3e:cd:12:08:a4:f8:ea:7f:d4:fa:e2:bf:ff:38:3e:
c3:e0:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:49:57 2026 by rpki-client