Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier: NPqdgbJpCih13t9BoUmHLW3yCNjcciMl1BX4Ouc5QAU=
Subject key identifier: 8D:6C:27:9C:61:22:6D:36:00:10:85:48:FF:79:C4:8A:85:B2:90:A1
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 019D390A1C0F794C44BA182CD0D2759020BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number: 0F12
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: yD5nEHW0NIw7W64LTEivb6YVUCNmKGZHk+aSatWEW20=)
2: _NSr0h0Kt0SbJsZS8dEj8fAEATE.roa (hash: gHQWo6MfDdcWF8qTZNVOf3frooR2b9p4qIOyB4d8FFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1c:0f:79:4c:44:ba:18:2c:d0:d2:75:90:20:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=8d6c279c61226d3600108548ff79c48a85b290a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:a4:c2:80:96:0e:f6:21:82:2d:d9:e1:a0:
af:bf:76:51:8f:db:ab:78:35:34:a1:6c:29:f5:0d:
ee:7a:f1:41:fa:82:f9:f2:dd:fc:95:44:ea:96:85:
3f:55:09:13:a9:40:29:17:7e:42:fa:63:98:59:82:
5f:61:bb:fa:09:df:11:41:ec:bb:2b:13:dd:68:a1:
fe:31:96:76:dd:2d:bb:00:ab:6d:bb:6a:1b:fa:13:
35:15:cd:b3:bb:9e:4b:f4:51:e3:b0:8b:4d:a0:7d:
58:df:a8:1a:6f:10:58:d1:f0:a7:b1:5e:9c:84:4b:
a1:e4:87:65:88:35:5f:12:1c:25:4d:d9:30:9d:db:
89:8f:19:1b:73:d7:cc:50:54:4c:2c:66:ca:37:21:
67:61:f1:5b:c2:3f:c5:87:56:97:1b:b0:9d:57:20:
fb:d7:ee:16:5f:b3:51:46:7c:9b:5c:af:34:fe:96:
72:68:0e:7a:87:ba:65:2f:f8:56:a1:37:88:66:72:
81:dc:9c:08:6a:84:d1:96:3f:57:59:39:f9:ae:8d:
bb:7c:29:0f:3c:98:a7:4b:d5:ad:27:57:df:5f:33:
da:12:14:a4:a3:1f:f8:46:ff:45:a0:f9:f1:b8:20:
f1:7b:2e:31:fd:ff:3f:c0:cd:19:b0:b5:d0:1d:e4:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:27:9C:61:22:6D:36:00:10:85:48:FF:79:C4:8A:85:B2:90:A1
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:6e:f4:7f:96:7b:8b:ed:92:c1:49:d8:d1:a6:ac:1e:49:
66:51:11:a9:45:a9:e1:71:c4:2d:53:07:85:27:34:19:6a:2f:
84:5c:1f:0f:36:a2:ea:05:d6:2b:0e:b9:87:59:ad:56:cc:67:
1d:dd:e8:09:bb:c7:bb:d7:c8:c3:dc:f2:68:16:6e:09:fc:2a:
e5:18:0e:0e:dc:b2:a1:29:c5:fd:78:59:24:e4:1f:a9:ad:7b:
2b:3a:86:39:2f:2b:98:81:c0:76:78:03:7d:58:97:98:a5:a8:
94:d8:f2:e7:24:74:52:67:02:7f:10:f7:6e:1d:0c:40:3a:1b:
40:95:9c:c3:17:b1:71:c9:fc:3f:4c:b5:d9:a4:6d:c2:2d:19:
64:6c:14:5c:fa:24:44:71:18:e6:b0:fc:5a:eb:32:de:9e:12:
e1:90:30:b7:0a:7c:f4:b5:ca:c1:86:ba:7d:92:84:01:64:90:
a4:65:a0:06:dd:2f:b0:05:f3:53:dc:f7:f3:c3:56:78:4f:dc:
7f:93:24:24:43:3d:d2:fd:ed:a7:03:c9:97:a8:e6:2f:3f:dd:
1c:cf:2b:42:89:bd:6d:0e:cb:be:fb:01:4a:3a:98:06:22:9e:
13:e2:df:39:88:a1:d2:c0:2f:39:ce:a0:ce:3e:dd:20:86:d9:
c6:30:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:48 2026 by rpki-client