Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: UudSTBYUjQme9Tdo/l7gjnQdmhnpQ/AkbYhUeivpC6c=
Subject key identifier: 81:07:4F:1B:AE:E6:42:21:4B:D3:CB:56:93:36:CF:34:0C:AB:01:F0
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019D9B19BB2168C7F08C90B78254BF4FD69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1634
Signing time: Fri 17 Apr 2026 11:00:47 +0000
Manifest this update: Fri 17 Apr 2026 11:00:47 +0000
Manifest next update: Sat 18 Apr 2026 11:00:47 +0000
Files and hashes: 1: I9HH-b3uhEYMGd5k7Iye-im2vcM.roa (hash: 4R5IweuaeIYK4isAQkRjmQfBB4/D3ub3P+G0IZYR6QU=)
2: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: M9rPlZlet7l9Nud+lrU5ewJ4YNx7xXFGyOVcrS0JvnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:bb:21:68:c7:f0:8c:90:b7:82:54:bf:4f:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Apr 17 11:00:47 2026 GMT
Not After : Apr 18 11:00:47 2026 GMT
Subject: CN=81074f1baee642214bd3cb569336cf340cab01f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:4a:ca:db:d7:26:dc:90:f4:6d:98:6e:c5:
c0:03:f2:f6:3e:18:63:a9:c3:22:ac:40:16:f0:87:
2f:b4:de:9b:84:c5:5e:26:78:3c:6b:46:8b:de:5c:
d4:2e:ed:2f:2c:2b:91:fe:0d:e0:b0:0d:53:93:d6:
b3:92:e6:b2:d6:6b:dc:0c:0c:72:55:45:7d:54:a8:
12:96:27:69:de:cc:f4:69:db:a4:0d:0b:e4:ac:c1:
53:0a:1f:f9:f5:1d:7f:95:e0:34:6a:e4:11:8c:6b:
4c:a7:92:fa:27:bc:34:ea:a2:b9:53:22:74:c5:c0:
03:6b:7e:ce:63:68:e6:b0:f3:6b:cd:f7:b7:41:6a:
44:3d:4b:28:a1:e3:86:1d:30:57:71:09:bb:35:ba:
48:91:8e:db:4e:9d:d6:6c:1d:bd:4e:b3:b2:01:d9:
24:16:19:91:39:87:57:12:9e:d0:d7:35:c4:f0:f9:
0e:f9:e6:3c:e1:2a:e3:fa:80:d4:59:f6:56:11:3a:
23:45:1b:51:92:82:ab:1d:9d:5f:fe:ea:61:b4:a3:
f2:b5:81:e4:83:32:49:b4:42:29:21:36:87:f0:5a:
08:bf:76:44:c2:06:a2:6b:61:0a:26:80:9f:8f:07:
ed:84:1f:00:6b:12:a9:3f:cc:6e:ee:c3:d6:08:f5:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:4F:1B:AE:E6:42:21:4B:D3:CB:56:93:36:CF:34:0C:AB:01:F0
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:46:61:89:0e:e0:24:88:ed:b5:fd:85:7f:6e:ce:99:17:d8:
52:1e:7b:e7:73:5b:7c:44:01:3e:8a:79:63:92:c2:54:f2:18:
3c:e6:e5:db:77:ec:2b:73:c4:72:a5:f2:cc:b9:78:89:4e:a9:
f9:8d:00:6a:24:62:7f:f8:ce:13:da:39:38:39:75:c1:ed:9a:
35:73:59:05:47:5e:e2:4c:1a:10:79:b2:8e:33:fe:35:19:42:
9b:21:fe:f0:c1:b5:56:31:d8:ff:7e:1f:75:22:3c:f2:95:f9:
f0:3c:16:da:6b:91:d9:7b:1c:46:2a:1c:3a:bd:90:6d:f7:f3:
9b:77:c7:53:0d:19:b1:67:e8:47:d8:ca:d5:e8:b1:6b:a0:7d:
18:21:ec:7d:1e:35:81:25:71:7f:31:67:71:ca:18:c7:e1:5d:
4b:45:ff:12:44:a4:5f:a6:ca:f3:bc:c2:82:c0:16:4c:9b:27:
c1:82:54:bd:26:1a:c5:b5:f6:a2:9a:7a:89:82:3f:72:34:79:
19:6f:1e:cb:37:3b:9e:3f:66:84:3c:63:cb:5b:7b:ef:ca:3f:
1a:0e:49:08:e6:1f:ad:2a:5b:f8:b1:a0:cf:fe:bd:94:22:2b:
57:42:4b:23:91:29:59:72:13:8f:4b:d5:32:c1:89:94:78:82:
c6:e3:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:55 2026 by rpki-client