Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: lT9vsogX2UWBHJT5k28nwRPsLpN5yXxDU1ciauWS+Fk=
Subject key identifier: E1:8E:39:64:DD:EE:42:1E:83:2B:6E:16:3C:1A:48:D6:48:B5:49:74
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019CABD93E1D6C0D516A782ACC569F18E4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 14E9
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: L99eBniNlUPKoqHJeixDZmjYJvOB9uZytAn88ixPl34=)
2: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (hash: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ=)
3: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (hash: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3e:1d:6c:0d:51:6a:78:2a:cc:56:9f:18:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=e18e3964ddee421e832b6e163c1a48d648b54974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:2c:e5:6c:e5:e9:ef:76:fe:95:59:dc:b3:
be:76:27:1b:da:1f:1f:ee:7a:d6:45:00:df:ab:04:
29:82:55:4e:5d:21:ca:92:d1:db:ce:68:ab:ab:96:
5e:25:7c:54:11:fa:45:c6:a1:0c:5e:d7:cd:a4:10:
42:56:8f:34:62:f2:3c:ab:f1:a2:ac:d4:5d:16:35:
b2:1a:3b:be:f2:d6:91:0b:c5:51:a2:f9:2c:fc:d6:
c2:4f:dc:64:2d:c3:03:c5:dd:23:dd:4c:93:6d:11:
73:6d:95:91:d5:24:99:60:eb:ca:97:c4:b5:2c:6f:
c6:7d:d7:6c:80:ea:ff:9c:c1:0a:cb:94:60:8b:30:
bd:86:61:17:de:04:d4:6c:8e:01:cb:2b:2e:06:ec:
77:df:1b:07:0b:b8:8e:ed:4b:93:fe:b1:67:c4:79:
be:9d:56:7a:76:56:2d:b2:92:5f:9c:13:3f:5b:a5:
89:2a:d6:94:0f:02:ed:42:3f:4d:1e:a5:fb:10:63:
ad:23:4e:15:bb:6f:a3:c5:56:e9:71:e9:12:24:73:
c7:bf:fb:18:e0:5d:8a:a0:1d:37:2c:f2:57:43:a3:
99:ea:45:28:eb:b3:00:f9:e0:c1:1e:f5:ba:0b:cc:
88:c8:f4:8d:50:e1:ce:bb:da:7c:88:37:a1:60:53:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:39:64:DD:EE:42:1E:83:2B:6E:16:3C:1A:48:D6:48:B5:49:74
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:a3:f1:79:c1:0f:92:00:d0:aa:28:4f:6c:3d:c4:c8:2f:
75:9b:96:3e:ed:ec:46:b9:fe:03:e2:09:61:d0:5e:7e:cf:f7:
2f:e6:15:3e:f5:62:f6:09:c9:99:99:37:9d:7a:7e:eb:6e:27:
2f:93:82:4a:e1:16:a8:4e:1d:75:6c:22:bf:07:42:fb:63:cc:
3a:dd:33:67:bc:41:17:47:8a:b4:2b:29:25:c1:74:0b:ff:b6:
07:48:70:69:d3:13:0a:62:72:b2:27:60:2f:13:58:0e:73:38:
77:bd:e9:c6:c3:ae:bd:4d:3d:81:3e:f7:cf:d7:7a:9c:ac:dc:
e7:2a:c3:50:66:66:bb:2d:73:fd:9d:f2:53:42:1c:2d:45:1d:
08:31:5b:7b:65:69:93:07:e3:9c:43:de:70:0b:b9:f0:86:39:
df:f6:8a:21:2b:5a:ce:22:3d:46:f8:7d:99:8d:ee:3f:0f:e8:
67:7d:0f:ad:20:2c:f8:44:f3:e9:2a:8e:1a:ba:d9:fa:ba:bb:
44:bb:ec:36:d0:0b:ee:c6:d3:64:43:28:e7:38:05:c4:23:fa:
71:8a:5e:a7:c6:04:5b:d4:bd:d6:e9:7e:14:3a:53:1b:c5:bf:
fa:72:83:0c:08:17:da:8f:9d:36:83:89:8d:1d:73:c9:b5:b4:
41:2b:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:42 2026 by rpki-client