Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: HT6kvh6wfxzy2o1k0wqHbX0N28x7qqkmBLK5eBXKlAo=
Subject key identifier: 22:7D:99:1F:BF:1F:8B:04:EF:6E:47:0F:5B:E0:5F:B6:57:6C:AD:B9
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019D99D0F03C06BDB59ABAE67F0CB6F86DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1565
Signing time: Fri 17 Apr 2026 05:01:40 +0000
Manifest this update: Fri 17 Apr 2026 05:01:40 +0000
Manifest next update: Sat 18 Apr 2026 05:01:40 +0000
Files and hashes: 1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: /ot+O2qRKy1LPHIxhjOajbeUzBwkurTFPWUOMalPd9A=)
3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:f0:3c:06:bd:b5:9a:ba:e6:7f:0c:b6:f8:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Apr 17 05:01:40 2026 GMT
Not After : Apr 18 05:01:40 2026 GMT
Subject: CN=227d991fbf1f8b04ef6e470f5be05fb6576cadb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:98:24:ea:d4:c7:71:ac:0e:db:64:28:dd:
b7:83:40:c5:50:88:96:c4:33:db:e4:93:07:ac:bf:
f2:c0:2a:ea:2a:13:69:74:b3:e0:7f:c9:ba:70:a0:
0c:fb:02:be:18:56:81:c1:fb:d5:84:b7:c3:c6:fd:
cd:f8:36:f0:d4:8d:6f:0a:5c:98:cf:f8:e4:b2:04:
ff:07:6d:2f:a3:17:5f:8b:69:1a:11:5c:79:30:a6:
73:1a:63:5a:54:64:66:bf:fd:93:c8:88:03:88:c3:
40:29:42:c7:31:43:75:ae:17:ed:5c:39:a3:3b:bd:
85:c2:93:ae:3f:d1:64:a2:ea:44:0b:4f:0d:ad:17:
cb:0d:22:17:9e:fe:69:dc:76:dd:4d:fd:67:03:54:
f3:1e:59:5a:a6:75:a1:9d:60:fd:e0:b3:e3:50:ad:
9f:05:7a:fb:79:7f:46:19:71:62:8c:63:6a:ad:2a:
d3:e6:bf:12:62:8e:7e:6c:66:9a:e7:a9:29:2b:29:
c2:a4:f9:64:07:96:3c:5d:00:4b:5b:bd:ac:8a:d8:
70:8b:ed:12:b9:1b:d8:b5:82:0f:34:e9:79:9f:50:
0b:67:0a:53:4f:07:29:d2:c7:8d:a6:91:cb:ee:41:
b3:bc:ce:c9:2e:da:90:1e:ee:d3:46:5a:ba:15:80:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:99:1F:BF:1F:8B:04:EF:6E:47:0F:5B:E0:5F:B6:57:6C:AD:B9
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:86:a6:f4:84:79:fc:ad:d0:06:4d:f2:ca:57:03:3e:8f:5f:
bb:84:24:de:71:1c:38:3c:dd:ce:41:8b:a9:df:82:a3:6e:30:
d9:81:21:ae:d7:cf:3e:e1:f8:bf:01:24:54:ae:37:05:96:f9:
c7:0b:f3:db:d3:02:aa:44:88:53:df:7a:98:8f:5d:51:97:95:
c4:67:d1:ca:88:a5:1b:e5:66:b9:e9:47:d4:12:8c:6d:9e:99:
d7:b6:71:38:fd:73:0e:96:41:c5:4b:65:d9:71:86:e5:2c:c3:
07:d7:4f:e8:f0:03:e0:56:fd:6f:3a:fa:5d:ab:70:04:69:2f:
24:01:e5:ea:ee:c7:b6:b5:11:73:2f:5f:74:7c:89:73:d8:1a:
12:a3:5c:4a:00:a2:43:f5:f2:08:81:c8:cf:49:b8:41:7a:76:
7b:b3:7c:46:37:0e:80:92:d0:c2:a0:06:46:28:6c:b0:c3:91:
2e:8a:81:c3:b1:11:74:c5:2b:d4:96:99:fa:76:e8:9e:2b:2d:
e8:3c:ce:69:e0:b3:59:fc:de:58:db:5c:b6:93:72:b4:85:2f:
6e:83:91:1c:da:8f:2f:51:62:35:9d:18:f1:be:f0:9e:7f:dc:
dc:eb:fc:c9:dc:b9:c3:73:73:29:ed:e0:bf:71:05:7e:21:95:
21:0a:c3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0PA8Br21mrrmfwy2+G3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj
ZTBhNzkwHhcNMjYwNDE3MDUwMTQwWhcNMjYwNDE4MDUwMTQwWjAzMTEwLwYDVQQD
EygyMjdkOTkxZmJmMWY4YjA0ZWY2ZTQ3MGY1YmUwNWZiNjU3NmNhZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8uYJOrUx3GsDttkKN23g0DFUIiW
xDPb5JMHrL/ywCrqKhNpdLPgf8m6cKAM+wK+GFaBwfvVhLfDxv3N+Dbw1I1vClyY
z/jksgT/B20voxdfi2kaEVx5MKZzGmNaVGRmv/2TyIgDiMNAKULHMUN1rhftXDmj
O72FwpOuP9FkoupEC08NrRfLDSIXnv5p3HbdTf1nA1TzHllapnWhnWD94LPjUK2f
BXr7eX9GGXFijGNqrSrT5r8SYo5+bGaa56kpKynCpPlkB5Y8XQBLW72sithwi+0S
uRvYtYIPNOl5n1ALZwpTTwcp0seNppHL7kGzvM7JLtqQHu7TRlq6FYB4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ9mR+/H4sE725HD1vgX7ZXbK25MB8GA1UdIwQY
MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt
NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5
LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoam9IR5
/K3QBk3yylcDPo9fu4Qk3nEcODzdzkGLqd+Co24w2YEhrtfPPuH4vwEkVK43BZb5
xwvz29MCqkSIU996mI9dUZeVxGfRyoilG+VmuelH1BKMbZ6Z17ZxOP1zDpZBxUtl
2XGG5SzDB9dP6PAD4Fb9bzr6XatwBGkvJAHl6u7HtrURcy9fdHyJc9gaEqNcSgCi
Q/XyCIHIz0m4QXp2e7N8RjcOgJLQwqAGRihssMORLoqBw7ERdMUr1JaZ+nbonist
6DzOaeCzWfzeWNtctpNytIUvboORHNqPL1FiNZ0Y8b7wnn/c3Ov8ydy5w3NzKe3g
v3EFfiGVIQrDyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:32 2026 by rpki-client