Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: Ssjvt0mal+vfDaNgV56x7rJvTR21P9uOEW3aNWKQQ40=
Subject key identifier: E1:6A:0F:A9:09:93:EC:3E:2C:75:9A:CC:50:F5:67:28:0F:E1:9F:6D
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019FACE456E90519BA168F6CFCAD35A0428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 1346
Signing time: Wed 29 Jul 2026 08:01:13 +0000
Manifest this update: Wed 29 Jul 2026 08:01:13 +0000
Manifest next update: Thu 30 Jul 2026 08:01:13 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: 832jmU0z7m4jOYN6Ie9Eo3vnueXf+2vjlFWfddBO8Bg=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:56:e9:05:19:ba:16:8f:6c:fc:ad:35:a0:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jul 29 08:01:13 2026 GMT
Not After : Jul 30 08:01:13 2026 GMT
Subject: CN=e16a0fa90993ec3e2c759acc50f567280fe19f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:ca:44:57:05:87:78:e7:54:c6:a6:22:d6:
f4:73:c0:5c:77:9f:f9:d8:47:5b:d2:38:82:e3:ea:
e4:8c:84:40:bf:47:24:59:ad:11:25:7c:16:de:ec:
d5:51:ca:9e:1d:de:a1:d9:03:34:68:d0:df:4d:14:
72:7c:a5:20:51:c3:cb:49:53:5a:9e:f8:6f:ed:70:
6c:23:d0:be:a5:d2:ae:0b:72:e9:22:90:b2:69:23:
ed:68:81:f6:b5:1e:fd:28:f4:84:8e:5a:9d:33:cd:
d4:14:63:03:f7:55:d5:2b:93:9f:6f:26:82:39:4d:
cf:1c:2b:eb:97:68:47:d6:59:69:0a:1b:71:8d:df:
1d:e3:de:1d:3d:93:ae:cf:f4:07:9c:43:76:dd:2f:
3f:04:5d:14:4f:e8:81:ca:e2:5e:2b:5a:3f:df:01:
63:75:a0:c2:aa:01:2e:e6:99:64:c9:4b:54:01:fa:
e7:8a:b8:4a:f3:02:4d:e6:c4:70:fa:cf:41:2f:d4:
77:cf:cf:13:35:40:a2:1d:e0:9e:b7:cf:e3:4b:b9:
9c:58:d2:95:15:da:35:4c:d0:dc:e7:83:a5:2f:67:
4c:5f:cf:3a:6f:18:ef:b4:aa:4f:cd:9c:46:a2:d5:
e8:01:7f:fd:92:9b:bc:b6:6a:46:5d:4d:06:c7:3d:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:0F:A9:09:93:EC:3E:2C:75:9A:CC:50:F5:67:28:0F:E1:9F:6D
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:97:2e:ee:2a:19:29:b8:4c:43:1d:75:f4:5c:30:3c:df:6a:
be:4c:a2:25:eb:57:d5:95:f2:88:0d:d4:d3:bd:4e:32:46:26:
1b:b0:85:b5:a0:0c:a7:c6:a5:62:70:3b:a7:cb:c3:37:30:d7:
78:31:fc:19:b9:fe:d6:bd:89:6e:dd:70:c5:8b:93:14:ff:84:
2c:7d:53:5c:b2:bf:37:a9:ea:44:2c:c9:b6:40:f4:5f:16:3a:
cc:11:75:43:97:d3:af:de:1b:10:48:ab:5e:bd:35:d9:14:99:
eb:ea:95:25:8e:69:73:c0:03:ff:c0:68:e4:df:66:fb:80:c9:
70:ac:f9:2d:d0:57:6f:a2:c0:83:e3:48:a2:bf:68:03:57:41:
ff:8e:42:f9:30:49:61:46:2b:df:16:3c:3a:d5:f0:04:89:82:
cb:91:01:8b:fe:0c:3a:93:56:f5:b6:e7:ac:b0:94:7f:25:d2:
32:42:1c:65:50:66:f2:bd:3e:a8:cf:04:b5:88:21:72:e5:c1:
64:7b:0d:84:3e:f0:56:63:75:fe:5b:15:33:17:14:35:3b:c3:
60:29:1f:09:2b:1a:ef:41:24:f9:f8:4d:41:1b:58:69:70:b4:
47:bb:c7:55:42:20:d5:15:56:73:91:02:08:6d:8e:d4:54:98:
28:63:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:29 2026 by rpki-client