Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: sothXrhjq8IUTr0CBXyZUmpYPXEVRHtWJsf0Nt7pQ24=
Subject key identifier: 56:F8:72:8C:B9:0C:59:95:4A:9C:EF:FA:70:12:74:09:C5:23:09:0C
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019DA30A43078C926C942CC9F13C07986773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 18CF
Signing time: Sun 19 Apr 2026 00:00:51 +0000
Manifest this update: Sun 19 Apr 2026 00:00:51 +0000
Manifest next update: Mon 20 Apr 2026 00:00:51 +0000
Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: QePVeQXiMXrvVET4YFFX4C2f5NdV1zbr2K+4V7MuEzY=)
4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:43:07:8c:92:6c:94:2c:c9:f1:3c:07:98:67:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Apr 19 00:00:51 2026 GMT
Not After : Apr 20 00:00:51 2026 GMT
Subject: CN=56f8728cb90c59954a9ceffa70127409c523090c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:32:7c:85:1f:cf:38:64:97:a1:45:27:4d:
b0:b4:6b:5f:15:f1:17:06:b4:88:23:4b:71:f2:38:
3a:14:6a:c2:5b:4c:52:7c:1e:4d:92:e8:8e:82:da:
82:ea:94:bc:33:8e:c1:1e:49:88:60:4d:d1:2c:d9:
ba:23:68:21:3f:f6:7f:74:69:6b:6e:ae:a6:d7:6c:
4b:48:9e:81:92:7f:87:a9:b1:4d:57:50:e5:81:1f:
04:5b:cd:d6:17:cb:fe:15:0b:2e:13:54:0d:29:2e:
49:58:c7:eb:a9:fd:7a:12:80:d3:a4:6d:f7:29:9f:
cf:1b:d1:3e:6a:a4:62:01:1d:36:e1:3d:7c:f2:c4:
03:b1:7f:5f:3c:33:18:70:7f:7d:5a:f7:dc:35:09:
a8:af:7e:8c:9c:94:c6:5e:4a:4b:cd:2f:88:66:2d:
26:9c:61:ac:55:3a:1d:f7:bf:8b:8c:de:ae:b6:41:
38:59:09:16:70:a7:cb:19:34:44:f5:64:0e:c4:df:
7b:3b:32:6e:c9:82:7b:82:61:07:e5:47:be:b9:62:
0d:da:64:83:76:90:c0:ba:40:d0:e0:83:5a:a2:3d:
6c:3d:d1:c4:3f:4d:3a:87:67:7d:dc:de:74:96:dd:
b7:4e:52:ff:7a:0f:f0:f8:bd:bd:8b:73:06:c4:96:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:72:8C:B9:0C:59:95:4A:9C:EF:FA:70:12:74:09:C5:23:09:0C
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0e:85:e7:08:d1:8f:64:14:6f:dc:66:45:21:1d:85:8f:03:
32:a0:58:83:68:e2:e9:1b:b5:01:39:a4:83:67:8b:b0:52:10:
a4:d9:68:2e:3c:48:a1:92:56:5d:8b:c2:e6:ff:c8:d1:9f:db:
5e:4e:cc:6f:f3:6c:45:a2:bd:33:13:1b:f7:76:8b:39:98:26:
d3:27:6e:6d:0f:e4:f3:f0:dd:a5:7e:ea:f8:82:18:41:1c:f0:
48:86:94:0d:7b:d5:29:86:09:b0:b2:a8:7f:13:4b:3a:2b:3c:
fa:21:28:fa:60:a5:9a:f0:43:d6:d7:d8:22:b8:92:e4:f1:8c:
ab:09:17:cb:61:14:59:7d:f8:2e:5e:6b:e1:35:4e:2f:3e:b7:
cd:e2:f1:e4:1a:6d:7a:0e:98:57:8c:9e:7f:41:85:6a:48:76:
86:08:c1:28:e4:4a:a9:a7:46:5a:db:c1:9c:c9:d2:d5:ce:1d:
8e:1e:26:af:32:b8:e0:e6:b5:9b:33:a0:5c:0e:8c:3e:83:30:
cc:79:62:c7:a2:35:33:0b:d8:cb:5d:39:2c:f2:b9:a5:82:47:
7a:4d:ae:37:00:2b:5b:b6:33:5a:a9:45:24:17:1b:90:47:f9:
71:50:14:23:df:b9:fc:db:e5:ed:28:fe:2f:13:fc:a8:7b:00:
40:5b:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:01 2026 by rpki-client