Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: Rc5aVMBtSoE26mwZO7Zy9IdyDjU4B9HMXLyL+mZb1Lk=
Subject key identifier: 7C:70:7D:AC:7C:4A:1E:F6:F8:39:D3:78:B8:A5:53:7A:17:AA:F0:88
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019DA340D539B59548AA6D1E9D0E09FA4BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1412
Signing time: Sun 19 Apr 2026 01:00:28 +0000
Manifest this update: Sun 19 Apr 2026 01:00:28 +0000
Manifest next update: Mon 20 Apr 2026 01:00:28 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: XyIiTZD4x+M2/nYVeTuXuxVBEo47u3sr48ksfcrQ8lE=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:d5:39:b5:95:48:aa:6d:1e:9d:0e:09:fa:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Apr 19 01:00:28 2026 GMT
Not After : Apr 20 01:00:28 2026 GMT
Subject: CN=7c707dac7c4a1ef6f839d378b8a5537a17aaf088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:af:14:0c:24:a3:51:ec:ad:4c:ce:ce:f3:
ad:83:eb:70:f8:7d:f4:cc:68:e0:fa:c0:fd:7d:8a:
8b:21:60:48:17:c7:25:17:bf:00:e2:ac:0e:78:c0:
63:63:6a:dc:be:9f:ce:08:d1:17:0d:5e:e3:9c:dc:
5e:5e:5a:db:42:a6:69:0e:85:ae:f1:b3:ed:90:f9:
6f:99:ed:e0:a1:73:45:5a:8d:5c:01:d2:75:9e:8c:
c9:0d:eb:8d:52:37:bb:23:59:69:5a:c1:78:e7:1f:
e8:61:b4:4f:d7:91:2e:ea:ac:27:08:0f:b2:cf:e5:
fc:0b:ba:10:38:c5:f6:e1:f5:8a:15:cc:c1:60:9f:
cf:39:5f:47:5a:03:f6:17:30:7e:6a:7a:dd:4d:71:
62:58:c7:76:51:f9:37:cb:cb:1f:03:3a:79:47:a6:
50:dd:b1:a3:d0:63:b1:70:14:f2:fc:7b:b0:43:44:
f9:ec:0e:c5:1a:da:fd:3e:40:65:7e:54:54:c4:82:
f3:ec:4c:16:01:84:0d:b9:a7:e4:f0:2f:63:a4:31:
f2:03:8a:8e:7a:ce:fc:5e:4b:27:20:bc:d8:aa:70:
96:fc:bd:18:83:15:c8:22:ae:4a:0f:bf:b7:aa:9d:
d3:2f:bb:84:7c:b2:0a:e7:01:fc:66:93:8b:74:7f:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:7D:AC:7C:4A:1E:F6:F8:39:D3:78:B8:A5:53:7A:17:AA:F0:88
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6e:aa:f4:5e:7d:7b:6c:e3:36:1f:78:ea:1e:ad:37:79:0c:
fc:30:d8:2e:00:5f:8b:01:ce:86:3c:c3:cd:b2:a8:ea:61:3a:
07:2f:27:af:8d:26:a8:25:78:90:16:f2:a2:f5:79:15:11:eb:
73:fc:19:3d:6b:72:89:c2:69:0a:90:33:88:c8:91:48:fb:dc:
22:cc:6b:96:11:85:91:24:f8:5c:9e:86:c4:3b:ce:2c:2e:7f:
c4:22:88:40:0e:49:70:d1:64:06:d7:60:45:38:15:90:c9:ce:
e9:d9:8e:88:74:5e:c3:f4:5e:2b:b6:e0:85:84:3d:b9:f0:f2:
b1:f5:31:ac:65:08:bc:e2:76:58:35:44:11:59:ea:58:be:d6:
9d:5c:80:d5:b4:5a:07:00:6c:10:fe:57:86:9e:d4:5e:b4:34:
b7:ae:d8:ef:11:50:07:f9:7e:a9:07:91:26:fb:8f:3f:5a:c0:
c9:fc:b7:95:ad:af:54:ff:07:9f:b0:11:85:be:da:89:58:be:
32:0b:b6:8e:ae:9a:9e:1f:d9:18:e7:b2:82:6c:61:d8:af:0e:
f8:4e:c5:10:83:3c:a6:44:2b:d6:74:5b:9e:3a:35:16:70:11:
69:ce:ad:29:c7:b9:6c:a6:5c:cf:03:d9:68:ad:14:2f:33:d3:
62:45:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:30 2026 by rpki-client