Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: C49ejEypwaH7rbMhY6CsgnNUzTXwKv9mt7ID2Azpnp4=
Subject key identifier: 8A:1F:8A:02:59:50:6A:40:6E:75:46:B3:73:1E:7A:61:50:B3:C0:C6
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019CA9B39DE776AB8FF6825512920FA796E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 15B7
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: I9HH-b3uhEYMGd5k7Iye-im2vcM.roa (hash: 4R5IweuaeIYK4isAQkRjmQfBB4/D3ub3P+G0IZYR6QU=)
2: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: DHNwrQT2zotebT5U7rQ9f2YBpGqbajIFMgLXO1hnEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9d:e7:76:ab:8f:f6:82:55:12:92:0f:a7:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=8a1f8a0259506a406e7546b3731e7a6150b3c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:50:66:5c:44:be:9c:82:c6:4c:de:42:aa:
cc:d6:89:65:ad:3b:b2:10:44:aa:85:f9:af:f8:5d:
da:29:ad:9b:96:31:38:38:e7:0a:37:e5:10:b2:f6:
e0:4c:a5:9a:61:a7:02:65:6a:e9:ce:29:23:a3:70:
c6:79:5c:e4:5b:ea:52:ff:c6:32:c9:90:27:00:0d:
29:fc:63:6a:a1:44:65:b6:12:90:be:0e:b4:03:43:
81:e7:89:a0:7e:bb:8f:f6:99:ac:25:e3:9f:ba:76:
b7:8d:ff:41:9f:08:0e:7f:9d:f0:ed:7f:5b:15:1a:
71:2c:2f:07:3d:da:ae:9f:3e:ef:f0:1d:5a:e0:14:
99:52:ca:29:fc:9a:20:c7:b9:f3:fe:92:b6:76:85:
9c:ab:21:94:1d:1a:c8:0a:fe:96:7c:27:d1:29:73:
64:60:4f:0f:13:a3:51:35:e5:93:c4:c4:29:e4:ce:
39:9b:50:88:ea:f1:6f:b4:89:46:0a:68:d4:59:31:
59:0b:b5:42:85:f4:8f:b1:1f:7c:fa:ea:2e:40:c8:
9e:99:4b:2d:6c:b0:8a:10:5a:71:1e:1d:0b:db:61:
9f:c6:fc:42:84:c2:48:2f:5a:d3:cb:fb:fd:29:77:
c9:75:79:8b:f9:54:2f:9e:0b:cb:3f:dd:1e:1d:15:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:8A:02:59:50:6A:40:6E:75:46:B3:73:1E:7A:61:50:B3:C0:C6
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:e6:07:0e:2c:ff:5d:00:d9:d1:7f:f8:c7:81:08:63:b5:
02:3d:08:f0:b8:14:e4:e9:98:2b:62:9d:c2:40:0f:c8:5c:42:
e4:37:b5:b3:04:1f:52:92:81:c8:75:03:6e:c4:b0:30:6d:2a:
b9:34:52:e9:54:88:d3:7f:38:d8:a8:6a:18:aa:ef:f9:54:9e:
fb:41:0f:fc:cf:6a:74:38:df:76:03:6c:81:a3:28:5e:5d:a8:
1f:1e:ef:02:62:d2:0d:1e:5a:37:56:bd:a5:bd:fb:d9:e2:64:
cb:3e:29:bd:d2:82:f4:64:49:30:cb:8e:27:10:8a:82:11:43:
76:56:a1:46:25:bf:c0:72:87:22:0b:ae:ff:49:08:69:de:92:
84:4b:0a:c7:6b:e0:95:64:63:61:97:b7:69:2b:64:b6:50:f0:
37:68:95:37:53:33:aa:43:86:60:47:cd:23:ac:77:55:a7:44:
bb:2c:da:52:62:03:d3:bd:19:ab:be:ea:39:b1:07:90:de:10:
4c:29:b5:93:85:d1:b7:72:17:0e:71:3c:6e:f2:cb:09:f6:13:
e0:07:2c:2e:46:01:ae:86:58:f3:9a:b6:f4:dc:17:59:97:c7:
e1:d1:de:10:81:5e:a2:5b:b2:63:17:47:a5:47:23:93:30:22:
42:48:cb:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps53ndquP9oJVEpIPp5bgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDAyOGYxYmEzY2VmYjBkZWJkNTFiZTlkYWM2OGM5Y2U1
NmMzZDUwHhcNMjYwMzAxMTQwMDQ2WhcNMjYwMzAyMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg4YTFmOGEwMjU5NTA2YTQwNmU3NTQ2YjM3MzFlN2E2MTUwYjNjMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TlQZlxEvpyCxkzeQqrM1ollrTuy
EESqhfmv+F3aKa2bljE4OOcKN+UQsvbgTKWaYacCZWrpzikjo3DGeVzkW+pS/8Yy
yZAnAA0p/GNqoURlthKQvg60A0OB54mgfruP9pmsJeOfuna3jf9BnwgOf53w7X9b
FRpxLC8HPdqunz7v8B1a4BSZUsop/Jogx7nz/pK2doWcqyGUHRrICv6WfCfRKXNk
YE8PE6NRNeWTxMQp5M45m1CI6vFvtIlGCmjUWTFZC7VChfSPsR98+uouQMiemUst
bLCKEFpxHh0L22GfxvxChMJIL1rTy/v9KXfJdXmL+VQvngvLP90eHRWRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIofigJZUGpAbnVGs3MeemFQs8DGMB8GA1UdIwQY
MBaAFCLQKPG6PO+w3r1Rvp2saMnOVsPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUt
OTQ2ODE3YjU5MTQ4LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUtOTQ2ODE3YjU5MTQ4
LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnefmBw4s
/10A2dF/+MeBCGO1Aj0I8LgU5OmYK2KdwkAPyFxC5De1swQfUpKByHUDbsSwMG0q
uTRS6VSI03842KhqGKrv+VSe+0EP/M9qdDjfdgNsgaMoXl2oHx7vAmLSDR5aN1a9
pb372eJkyz4pvdKC9GRJMMuOJxCKghFDdlahRiW/wHKHIguu/0kIad6ShEsKx2vg
lWRjYZe3aStktlDwN2iVN1MzqkOGYEfNI6x3VadEuyzaUmID070Zq77qObEHkN4Q
TCm1k4XRt3IXDnE8bvLLCfYT4AcsLkYBroZY85q29NwXWZfH4dHeEIFeoluyYxdH
pUcjkzAiQkjLRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:52 2026 by rpki-client