Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
File: 17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json)
Hash identifier: LL47peay4WiMAqbCXyGvZisN044O8flyybXVCqGZmVE=
Subject key identifier: 8E:B3:5E:F2:26:E2:9D:EE:56:C3:ED:03:51:B1:90:8B:78:EE:CF:B3
Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
Certificate issuer: /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Certificate serial: 019D3940FABC309015D445367E71CB9425F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
Manifest number: DA
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: lfcIw3PohB02WFVlCCq7ixwUJM9zShe7AVn5YFavlOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fa:bc:30:90:15:d4:45:36:7e:71:cb:94:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=8eb35ef226e29dee56c3ed0351b1908b78eecfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:05:87:4a:6f:e5:b4:5f:73:33:ea:b1:5a:
49:2e:fb:b5:0c:9b:a1:a0:f1:98:52:4b:ab:3a:b8:
db:74:1f:de:2e:1c:6a:b8:ce:a5:92:63:5e:e2:39:
56:a3:85:fb:8f:cf:08:61:66:e2:0c:fa:2e:ef:c1:
cd:84:f6:36:3f:e6:ec:cf:6d:45:8d:a3:ae:57:cb:
58:da:3f:0e:76:bb:00:75:f8:c1:e2:14:bf:1a:6e:
d5:6c:44:41:5c:fd:05:ef:91:01:23:af:70:17:df:
76:dc:cf:23:d6:d1:f8:80:a0:62:8b:39:ce:91:91:
22:56:8d:92:1c:bb:8f:cb:76:a8:8a:f8:e7:c9:38:
f3:68:85:c4:e1:a0:43:c1:54:7a:93:ec:f9:46:e0:
05:f6:af:8a:39:d7:21:a1:32:13:db:94:f0:dc:82:
b5:de:68:bd:f5:d0:7d:32:94:e3:44:35:d0:c9:91:
92:28:b2:b2:de:27:c9:5d:9d:e1:b1:c1:f5:51:13:
d7:17:72:af:1f:02:7c:0c:38:09:65:04:00:ef:3d:
9b:1d:f7:c5:fa:9f:25:b9:c2:97:c3:1e:c3:69:24:
ea:48:1d:a2:63:6a:25:9b:84:bc:07:ad:b9:ad:eb:
57:af:b8:3f:f8:ca:1f:c8:92:64:0c:30:43:b4:ff:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:5E:F2:26:E2:9D:EE:56:C3:ED:03:51:B1:90:8B:78:EE:CF:B3
X509v3 Authority Key Identifier:
keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:51:ea:bd:11:6b:2d:3e:2a:de:1e:36:8c:41:e4:ca:bf:
ba:a1:54:08:57:66:4d:63:8e:81:b2:11:6d:7f:30:fe:69:bd:
a5:b9:d1:be:eb:3c:28:58:ef:19:a7:38:ca:06:6d:56:e6:4c:
10:8b:fb:28:c7:b3:85:93:7d:8b:58:66:27:e3:8a:29:03:ad:
55:b9:60:a7:b6:58:e2:da:73:9d:9b:a6:ca:a2:66:b6:5e:4a:
6f:70:fe:d9:80:9d:fb:d5:8d:42:7d:f7:68:cf:f1:c6:a8:1c:
c8:2e:41:b7:b8:9a:b2:cd:a5:e6:79:b3:eb:69:41:dd:08:b9:
68:13:f1:67:d1:7a:ef:5d:25:53:24:37:fa:ca:17:04:c1:2a:
1a:96:81:e8:a6:5a:e6:8b:bb:d3:df:06:4e:a4:02:4d:b2:2c:
cf:97:b9:81:66:f6:d9:21:e2:c4:66:a4:4b:d4:f8:30:7a:cf:
be:49:07:e8:58:9a:da:97:e2:b7:a3:f9:45:7e:21:2f:c7:a1:
c6:ad:fc:90:13:84:c4:14:ee:84:b5:22:0f:47:32:7e:79:1b:
c2:47:42:ac:23:85:ad:08:f2:69:a4:ff:06:92:94:6c:b1:e7:
bf:00:74:96:47:a2:69:d5:cf:a5:02:ae:2a:c5:48:ca:16:26:
8b:11:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:36 2026 by rpki-client