Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: 2BuQmB1NLbS87GoPI6gNxmGZ1KoduidGxwpYRlbweko=
Subject key identifier: 0A:9A:A1:E6:BB:44:3C:E0:0A:A3:F1:C6:6D:9F:F0:5B:20:D4:ED:E5
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 01A0D83BA94999BBFAA530FECB4C3514D438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 13E1
Signing time: Fri 25 Sep 2026 11:03:03 +0000
Manifest this update: Fri 25 Sep 2026 11:03:03 +0000
Manifest next update: Sat 26 Sep 2026 11:03:03 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: wh35EgrNoyv+jsDiJ4llzFHUlLINu0BvkITpnKNCbA4=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:a9:49:99:bb:fa:a5:30:fe:cb:4c:35:14:d4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Sep 25 11:03:03 2026 GMT
Not After : Sep 26 11:03:03 2026 GMT
Subject: CN=0a9aa1e6bb443ce00aa3f1c66d9ff05b20d4ede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:cd:b8:8a:71:59:1e:8c:f3:98:0d:29:7f:
27:79:69:75:13:06:e1:69:03:53:29:5c:5e:02:7f:
f7:55:1c:39:39:37:32:e2:04:4d:68:6b:c6:3a:ab:
81:da:33:19:1a:a6:89:e4:f1:4c:75:59:ac:49:b6:
41:39:95:0e:8d:41:9a:7f:b4:51:90:55:03:4a:1c:
62:17:2e:f2:6c:8a:85:9e:ca:27:db:c8:bc:03:04:
db:21:85:9b:50:4d:17:2d:f5:11:65:26:08:6c:6c:
2c:bb:79:e2:e6:b1:3a:37:52:71:92:ae:9c:08:a4:
0d:23:11:54:af:cc:14:85:77:d6:d1:0e:54:e2:36:
23:24:6c:56:f7:fd:dd:01:30:50:61:e8:eb:5d:7c:
48:cd:58:6b:e5:22:36:b7:49:be:4a:01:51:b0:2e:
04:10:02:81:2c:0b:92:54:ca:c1:fc:ac:af:4b:b3:
98:53:ec:84:4b:e4:64:69:a7:e5:15:fd:d6:4e:c8:
66:35:2a:2e:44:b3:ac:e8:3b:b6:53:a4:2e:3b:06:
a8:d8:4c:dc:af:86:26:de:9e:89:4e:30:52:e7:c3:
a5:7c:96:9c:49:a2:6f:2d:26:1f:87:e0:da:81:c3:
55:a7:71:78:c8:a9:49:75:4b:3e:72:e5:d8:c9:9f:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:A1:E6:BB:44:3C:E0:0A:A3:F1:C6:6D:9F:F0:5B:20:D4:ED:E5
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:9c:16:cc:d4:03:c4:09:47:1b:66:d0:bb:70:06:9c:61:
2a:f7:22:7e:1d:ac:c1:0f:df:6a:ac:07:6d:c8:99:e9:b0:cd:
8e:3f:6c:ef:f2:1a:cc:4d:c9:fa:1e:8a:2f:2a:89:91:58:e1:
49:70:75:25:24:71:2e:16:23:88:5e:ca:3c:3a:89:17:48:1a:
3e:af:db:db:b9:17:fa:d8:18:ad:ef:6e:36:0b:71:15:45:1f:
e6:7d:04:48:81:89:1c:d9:23:be:be:57:d9:2c:f2:f3:02:80:
18:07:27:10:1d:56:f4:f7:fc:b5:d1:5e:dd:f8:d6:63:fb:e0:
ca:22:be:d4:99:28:9d:e3:c7:2e:5f:5d:b8:76:a6:c5:50:20:
8d:83:05:18:5c:70:17:6e:c0:ca:15:33:62:53:a2:e6:0e:cd:
12:f0:8b:79:5d:9c:55:8e:4b:8c:02:44:7a:c5:57:ea:61:b2:
cf:05:e3:b8:03:8f:8a:fb:04:31:15:25:7b:8b:1b:87:d0:18:
d7:b1:3c:79:5e:ec:35:06:29:52:90:25:84:72:82:b1:d2:10:
77:6d:1f:b0:b5:8e:33:8b:8e:1e:4f:35:99:fa:db:00:0c:39:
ad:b8:21:c0:29:3e:ce:df:47:2e:f8:60:9b:d8:28:83:15:35:
49:0f:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:12:10 2026 by rpki-client