Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: n7RR2N7M6Pj/n6/n6l3G6/jaLdSXb8XH0chpVldCkHs=
Subject key identifier: FF:D1:01:50:C3:7E:FF:CA:E3:FF:1C:05:6A:9A:41:83:8D:97:A2:3E
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019D97E2496A4594C9B18C467F2FEB16264A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 1232
Signing time: Thu 16 Apr 2026 20:01:22 +0000
Manifest this update: Thu 16 Apr 2026 20:01:22 +0000
Manifest next update: Fri 17 Apr 2026 20:01:22 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: +fxWmbx25sNx8y0/pE5SJUclsFfg75QinJSl7TKFMQU=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:49:6a:45:94:c9:b1:8c:46:7f:2f:eb:16:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Apr 16 20:01:22 2026 GMT
Not After : Apr 17 20:01:22 2026 GMT
Subject: CN=ffd10150c37effcae3ff1c056a9a41838d97a23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:d0:5a:dd:c8:a5:29:3c:df:a6:5c:55:e4:
86:8f:86:74:ef:f7:fd:2c:f3:39:eb:29:7c:87:cb:
c7:4f:6e:a4:14:1c:87:23:4a:b1:01:a1:d0:59:8e:
e1:6b:83:10:33:f1:4d:7c:f0:2e:be:21:52:b5:8a:
71:48:c0:3e:73:9a:77:fd:39:e1:82:aa:5d:95:73:
e8:1e:67:fb:65:db:79:05:d3:8e:c0:a5:52:e9:b2:
00:57:b4:a3:b1:16:44:3d:3c:56:ac:2a:02:cf:44:
08:52:12:ae:f6:da:f8:8b:5e:a9:fe:b5:b3:16:08:
ac:39:0b:79:8d:01:ca:45:3a:46:bd:2c:66:b3:2b:
af:67:dd:4d:d6:91:58:b2:20:a9:53:f3:f7:7d:35:
a5:a5:54:8e:26:c7:06:fc:7c:c9:3a:d2:4c:e9:89:
d9:6d:02:be:7f:51:1b:8d:7b:64:b8:c5:eb:83:fb:
29:95:07:39:1d:b4:13:b9:de:d6:d5:c8:1c:33:ad:
04:b3:9e:2c:e9:cf:29:55:21:80:6f:84:9c:4e:3b:
02:97:01:5a:db:d6:42:e9:d5:6e:4e:6c:63:88:3f:
26:15:13:27:0f:7e:6d:03:f4:15:76:ef:ec:65:d8:
e6:6f:b3:ea:85:75:df:c3:02:ae:9c:a4:c9:93:38:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:01:50:C3:7E:FF:CA:E3:FF:1C:05:6A:9A:41:83:8D:97:A2:3E
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:35:da:e9:19:24:d7:92:24:f0:f8:09:25:fb:46:69:bc:
62:85:74:9a:8b:f6:cf:99:15:93:ab:be:5b:73:5a:cf:22:c4:
bd:e5:fe:44:5b:66:67:07:59:61:4f:0d:31:70:94:37:ab:4e:
3b:8b:76:87:f3:3c:83:2a:6c:8e:17:6a:30:08:09:b0:17:29:
c4:55:45:d3:f9:68:f2:9c:24:39:51:d5:a1:49:6b:e5:dc:72:
1f:e9:ef:fa:58:1c:07:81:7a:c0:e5:cb:13:57:38:10:b8:52:
f0:b0:26:8b:8a:10:67:d4:42:a8:2c:d6:7d:71:45:d2:f2:d6:
d6:34:f7:75:e8:0c:e1:3c:88:5b:a4:c4:a4:86:a9:af:27:6d:
44:a1:d3:e0:59:6b:a4:05:4f:f1:9e:c2:19:28:a9:54:55:27:
8d:a5:db:f0:60:58:ca:18:7a:1b:4b:06:fb:23:30:76:f9:36:
be:4c:97:88:cd:fe:46:d9:cd:30:9d:3c:e1:ea:aa:93:c7:b5:
f3:c7:fa:29:b0:05:ea:15:38:84:66:d6:32:35:26:d9:b9:73:
d0:2a:9a:a1:ee:88:90:88:ea:74:76:50:fa:ee:0c:60:0f:a3:
62:d9:87:ee:bb:f2:bc:cc:b0:b1:cf:99:b6:95:7d:53:f7:e0:
f6:2a:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:52 2026 by rpki-client