Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: s3pzKNn+NBfCiOa+sftOh4krVDXqI/TDmO2ItejVO8w=
Subject key identifier: FC:8D:A3:87:CA:B3:F1:1D:31:A5:73:D9:15:DC:59:E1:4F:90:C0:F6
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 019EC1491EF7206BD8A47AC2A2CC553D8AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 12CC
Signing time: Sat 13 Jun 2026 14:00:55 +0000
Manifest this update: Sat 13 Jun 2026 14:00:55 +0000
Manifest next update: Sun 14 Jun 2026 14:00:55 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: oV+0QHvCkx+4o7Q5YUvQ1KPJl47h6iuWaNfW+PsegT0=)
2: NLcXQyarZMLPShqbum_K4HREfn4.roa (hash: mjratVtRdhgBM6Hy0uvO9ymB77guClAbYNO1DYJFQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:1e:f7:20:6b:d8:a4:7a:c2:a2:cc:55:3d:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jun 13 14:00:55 2026 GMT
Not After : Jun 14 14:00:55 2026 GMT
Subject: CN=fc8da387cab3f11d31a573d915dc59e14f90c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:b9:a9:f6:88:a3:34:46:5f:ad:92:e5:ef:
1b:7e:26:91:25:75:e5:dd:fc:03:53:54:0f:8f:8a:
b7:05:c7:ef:18:62:09:0b:2c:83:c2:e5:e8:03:f3:
e0:ed:9d:7d:6c:52:90:3e:64:a8:da:56:85:c9:37:
cb:84:db:b4:2d:4f:97:52:ac:b4:8a:a0:cd:55:27:
50:cf:65:a7:c3:42:5a:21:ad:31:2b:6e:08:63:8f:
5b:12:ea:3a:e2:2a:fd:ec:fd:6a:54:d3:5a:b6:0a:
b4:16:40:2d:8c:a5:fb:7c:aa:9e:b8:56:4d:00:fb:
6e:40:b7:39:5f:ea:d8:52:d3:6d:bf:d4:02:ed:1c:
6c:52:12:fe:2b:b0:eb:ab:54:ab:0a:ff:62:b0:87:
93:15:1b:07:38:84:c2:4d:89:05:9b:3c:68:09:82:
0d:1a:a0:7d:f7:29:7f:61:c8:a6:51:02:9c:58:25:
fd:1d:b1:4c:1f:ba:46:ac:79:ca:a8:9c:0a:67:d3:
f6:2d:f2:fe:be:2b:1c:da:f9:a8:1f:1d:f3:1d:ec:
0b:6a:94:10:f0:e0:e4:72:60:9b:29:2c:5f:82:de:
13:46:8e:72:a1:e9:48:77:61:15:97:15:f8:4f:e0:
83:63:6c:81:e4:84:4d:87:c9:e0:b0:b7:5c:6a:ff:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:A3:87:CA:B3:F1:1D:31:A5:73:D9:15:DC:59:E1:4F:90:C0:F6
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:32:dd:d1:b7:7b:68:9c:8a:13:46:56:3c:3f:9d:53:39:fa:
e9:77:e3:5e:c1:01:15:05:0b:9c:2e:3e:fe:c9:6d:7f:df:91:
77:e2:6e:6a:94:ac:4d:ae:67:89:ec:1b:07:6f:55:85:d2:ff:
a1:52:80:ca:a5:0b:ea:c3:96:6c:2f:54:17:d7:8d:51:f8:68:
08:80:6d:d5:0d:4d:8b:fc:c1:45:70:44:59:5e:54:a2:0e:76:
ef:73:c8:36:ae:a1:2d:5c:3a:7c:7f:7f:4b:77:e4:17:8c:b2:
1c:3f:76:82:68:d5:d9:ff:ab:e2:3c:e2:a1:4c:de:d9:73:f8:
95:53:e1:38:ea:19:08:c6:4e:8c:78:d4:73:64:3c:c2:d7:ae:
ab:6b:e0:c8:92:02:0e:37:fb:e4:1e:17:48:c7:b6:ad:8c:db:
5f:88:8a:c7:82:ac:80:d6:0d:b7:92:4e:44:d0:2d:90:13:49:
49:f0:34:b2:04:ab:e0:42:64:5e:dd:84:01:fc:54:f9:d3:63:
a4:60:7d:cd:c8:28:5c:a0:fd:06:80:fb:68:f2:d3:aa:17:33:
84:3b:8b:93:b8:e1:68:75:bd:3b:11:04:7f:ce:03:8f:85:2b:
bf:5e:a3:d3:7c:08:45:52:b6:82:c3:09:48:e0:20:bb:2c:87:
b0:44:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:58 2026 by rpki-client