Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: KCnXhBVzKqXEYJfGwnA8gz/feOJmAsmH6ELdLrYBAc0=
Subject key identifier: 88:0E:50:EF:97:D2:6C:8C:46:29:B9:17:EC:9B:54:18:AA:29:B0:AB
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019CAA5899C15444F0531A8F541DFB3EEF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 11B7
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: QsXXEOeuztoR2rhSUERhq7AXMoSt+zcciBzRZkIyXXs=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:99:c1:54:44:f0:53:1a:8f:54:1d:fb:3e:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=880e50ef97d26c8c4629b917ec9b5418aa29b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:f5:c6:23:c1:cf:9e:a2:c5:41:9c:92:f0:
01:77:7a:f5:39:22:6d:a8:9d:1f:30:a2:7b:c5:b2:
47:91:36:01:fc:33:3b:3a:be:5a:05:5a:72:de:2d:
7f:03:32:25:ca:66:e1:a6:a5:52:6b:4f:36:b9:a2:
d6:1e:ba:cb:71:50:6c:f8:f2:29:38:71:7f:c1:2e:
36:16:8d:18:78:90:7e:1b:52:ae:4c:a4:24:67:f5:
0e:02:10:c4:2d:0e:27:c8:87:d1:d5:75:9b:08:04:
de:85:b8:0b:73:55:a5:0b:14:ed:c5:3e:cd:70:31:
bd:96:50:21:4c:db:8d:4d:4e:4d:f9:02:26:cf:9f:
77:72:53:70:b5:84:2b:94:36:b4:93:8c:10:a1:f1:
e2:92:02:87:4b:5d:2d:71:34:3e:29:06:bd:eb:76:
e0:5d:e0:63:61:22:66:f5:fd:65:ff:9b:13:f1:f9:
64:e3:d7:a2:d4:09:48:be:82:c8:85:99:2a:c7:9c:
8d:3d:a9:d7:c9:15:3f:19:b0:9a:06:fd:17:e0:39:
8a:4b:73:53:f8:20:b3:80:b8:53:6b:9a:d3:51:ba:
ad:b9:20:7d:6b:f4:03:5f:38:46:a6:84:48:1c:26:
4d:b5:4f:03:fe:f0:11:0a:16:d7:60:5b:8c:eb:2c:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:50:EF:97:D2:6C:8C:46:29:B9:17:EC:9B:54:18:AA:29:B0:AB
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:bf:25:a2:21:4e:0e:70:d4:b3:bf:9d:68:bc:d2:73:fe:
38:e1:a3:33:a8:06:f5:a1:6c:c5:da:d6:f9:ca:51:9b:a0:ac:
71:a4:74:99:87:77:dd:e2:ab:4f:36:2e:df:97:38:a9:e7:90:
a3:b4:2d:85:ad:a3:90:0a:bc:3e:56:25:64:67:f3:fb:1f:36:
9b:3c:65:fa:94:48:d1:4a:8b:04:3f:4d:c8:62:b0:c0:29:70:
0a:f2:cf:96:c0:fc:84:cf:47:fa:6c:ca:7b:e2:4f:7f:f4:09:
dc:83:94:90:89:e9:00:33:bd:1c:02:50:97:46:24:e7:2a:68:
d0:d8:f4:3f:70:16:e7:09:8e:9e:f4:ee:60:1a:a1:bc:4f:eb:
08:0b:3c:1a:d5:30:11:59:00:50:92:33:19:a2:a7:69:4a:3b:
c6:de:a3:11:80:67:3c:f3:7f:14:5f:98:1d:67:58:e9:1b:47:
e1:4a:7a:48:9b:fb:02:62:bd:37:ba:14:53:66:8e:1c:b8:74:
4f:ef:23:63:a2:0a:7f:7e:a4:0a:f0:31:48:f2:60:13:7b:b9:
c8:2a:1f:9a:1a:92:2a:b5:2e:73:82:ab:bd:b0:82:5f:f1:be:
65:ea:b9:dc:21:1e:81:78:36:4f:9c:cc:f4:a7:25:a9:2b:90:
20:7c:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:28 2026 by rpki-client