Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: fSKl8CmyLZsbnRorjgnzOq1j379tPOB4QUWNd6Isa38=
Subject key identifier: 68:7D:53:5D:2D:48:65:C8:DA:18:AB:49:8D:35:FB:B5:DB:E7:7D:CB
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019FAC76417885F48CF03812A44F10E8C540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1520
Signing time: Wed 29 Jul 2026 06:00:58 +0000
Manifest this update: Wed 29 Jul 2026 06:00:58 +0000
Manifest next update: Thu 30 Jul 2026 06:00:58 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: zyAXjIg0EDw0IOEPnArKkS8wxIUNtbv5k4EHa0G3AQE=)
3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:41:78:85:f4:8c:f0:38:12:a4:4f:10:e8:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jul 29 06:00:58 2026 GMT
Not After : Jul 30 06:00:58 2026 GMT
Subject: CN=687d535d2d4865c8da18ab498d35fbb5dbe77dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:27:23:53:92:56:65:11:a3:c3:4b:74:94:
fa:fc:e4:b4:53:9f:15:86:89:10:2e:5d:a0:b3:05:
1f:4b:04:d3:d8:30:e8:9a:b4:51:07:7f:44:6c:d7:
2f:bc:5b:7c:f6:2a:c6:d3:17:6a:6a:67:fc:14:e1:
18:b8:8d:9a:d0:c6:ec:a9:ab:a0:01:e8:45:90:e4:
db:ad:49:64:c7:56:ef:6e:bb:d2:32:f1:22:cd:dc:
78:38:ac:b3:2d:22:f0:86:37:96:60:f8:d3:a7:2b:
e7:91:95:0e:88:8b:fe:3a:2d:8c:25:e5:0e:cf:c7:
5a:92:68:93:c4:5e:d8:ef:c8:3a:e0:39:94:15:7a:
99:62:4b:e1:a6:c2:d9:5e:8c:d9:3f:6b:d6:dd:de:
71:a5:bd:1c:79:0b:16:f8:6f:fd:b8:4d:ef:0a:9e:
4e:4d:74:8b:ea:42:c6:81:4c:46:67:8c:e7:01:d1:
1a:d0:0e:ac:86:4f:92:12:fd:6d:e2:79:03:9e:14:
b8:ff:5e:cc:bf:47:5a:65:09:86:34:95:82:e6:13:
00:8c:c3:71:aa:6b:fa:bd:34:8f:5a:1c:4f:f8:97:
15:ad:e0:94:4c:51:16:49:94:71:fa:bc:fb:cf:16:
c1:a6:ad:43:38:28:01:df:7c:ff:39:74:d0:8a:72:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:53:5D:2D:48:65:C8:DA:18:AB:49:8D:35:FB:B5:DB:E7:7D:CB
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:62:34:6c:e2:e9:f8:15:41:57:80:7a:34:98:49:13:14:
ac:9b:7b:68:7d:8b:55:2b:f8:b6:9b:04:b7:f0:4e:3b:df:57:
e7:c3:5b:c6:7a:0d:d6:89:b1:91:9e:06:69:8f:a5:1d:f6:a5:
0b:4d:8b:07:ea:96:ae:4d:78:2a:7e:39:70:c7:69:a0:a1:a1:
26:56:48:41:37:f3:23:07:08:a3:e4:82:a8:03:62:c7:3e:09:
86:3b:78:fb:d3:a3:c2:2a:65:bd:2a:12:8c:7c:c4:de:20:7e:
9f:26:fb:f3:6d:84:96:a3:5e:71:23:35:53:58:8b:7d:16:7f:
9b:de:e0:bc:38:87:40:cb:c6:ef:2e:40:05:56:dc:a1:e6:28:
26:30:46:14:d6:58:7d:af:bb:5a:fb:82:af:b5:88:c2:7c:32:
24:b6:9b:3d:62:37:76:a8:d5:a2:51:d8:39:ef:55:04:2b:5d:
71:f1:5c:c7:7f:36:9c:f9:ce:15:99:be:0b:1e:f1:5b:b5:67:
f2:c7:f0:b8:53:00:17:f6:30:fa:38:8d:df:5e:a2:11:07:b1:
04:ba:73:a6:7e:3a:96:54:d2:ed:63:51:5c:d1:0a:97:da:23:
15:0d:a3:ed:73:a6:da:07:ce:50:2f:79:cd:fb:53:f2:25:2a:
d3:b5:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:15 2026 by rpki-client