Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: sJWrSPyVKYIm/noGnwOIYO7bXVHlOw1cWlWMkMSmLZA=
Subject key identifier: 60:9E:89:39:6E:20:CA:B7:2E:C1:F3:E2:DF:6C:65:E3:78:74:26:36
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 019D390A28149C9DB5A292259E7106421C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: rUaeG+VTLHCXuNu79KhanYuYk2rY3tBOIlnOS8r/I7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:28:14:9c:9d:b5:a2:92:25:9e:71:06:42:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=609e89396e20cab72ec1f3e2df6c65e378742636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:60:cf:df:74:3d:b7:45:8b:1b:04:c4:6e:
17:98:91:8b:0c:15:95:a2:7c:78:91:6d:17:35:ca:
da:64:63:e2:7f:65:59:48:bb:8e:f8:9e:b1:99:80:
fe:77:10:62:21:56:7c:2e:90:05:7d:a3:4a:fc:ac:
5c:3f:16:f3:fb:3f:21:b2:2b:04:b6:47:59:b0:0b:
e1:86:75:8e:88:d0:06:b0:4e:20:18:a0:5c:3b:83:
31:56:70:8f:20:6d:5f:a6:8c:ad:4b:08:3a:be:02:
f1:d2:c7:98:1d:16:d3:43:db:a5:c3:a2:e3:b7:44:
fe:6e:39:6a:2f:60:f3:79:d0:0f:a0:34:a1:27:01:
de:ab:18:84:2a:dc:a5:91:0a:98:00:a4:fe:35:bc:
4b:81:b7:59:f1:95:fe:89:8e:6b:43:74:2e:36:29:
8c:a9:98:84:0b:1e:6c:ab:b4:ea:22:8a:5c:68:8e:
f9:3b:dd:9f:78:f3:0f:d1:ed:df:33:a1:e6:0f:8b:
04:dc:46:4e:c1:b0:1f:15:c1:b7:03:49:e0:f7:9a:
6c:6f:95:80:1e:c1:84:00:09:4e:6d:7a:b1:60:67:
83:e3:1d:13:3a:bb:cb:02:c0:fb:bc:70:c9:eb:fa:
48:e4:d5:d1:84:98:d4:7b:6e:50:6c:93:f9:35:40:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:89:39:6E:20:CA:B7:2E:C1:F3:E2:DF:6C:65:E3:78:74:26:36
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:54:bf:dc:44:9a:34:eb:7b:0c:f4:57:45:99:50:61:33:04:
8c:a4:98:9d:84:46:82:86:93:44:41:e5:b7:94:9e:d8:75:8c:
15:2b:96:90:08:b7:9c:5c:71:1d:68:f5:55:69:34:c7:af:05:
8d:ad:33:df:c7:a4:44:6f:c5:4b:a9:85:ec:a6:94:6a:8a:31:
3f:71:79:17:25:9d:b5:21:e0:99:7a:13:71:a3:3f:a6:cb:d0:
6a:50:9d:0e:ae:05:b4:17:ec:1e:b8:9f:ea:51:a4:0a:dd:08:
15:19:38:ea:2f:d0:fb:a9:79:a7:8b:99:32:5b:51:b5:38:75:
15:e9:40:79:3c:47:8c:ba:76:74:51:14:8b:27:c1:ed:d2:c7:
44:14:78:e9:2f:2f:ac:2f:f9:3f:1b:d1:b5:69:c5:97:ec:6b:
a6:8b:56:8b:6c:fe:63:98:7e:53:1d:d1:ef:c8:e5:a9:90:23:
14:c6:e6:37:d1:aa:da:b2:e9:b7:6c:c6:50:fe:cf:fb:e3:49:
3e:4b:c9:50:8e:e6:04:39:81:0f:20:8f:fa:e0:26:45:ed:60:
87:f4:3a:be:ed:a3:a4:05:9b:d5:73:eb:9e:d4:80:b0:d2:c1:
1c:22:40:50:21:47:f8:0b:09:ba:da:30:ab:f5:73:53:82:4c:
12:a7:77:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CigUnJ21opIlnnEGQhxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw
NjBlMmMwHhcNMjYwMzI5MTAwMTAwWhcNMjYwMzMwMTAwMTAwWjAzMTEwLwYDVQQD
Eyg2MDllODkzOTZlMjBjYWI3MmVjMWYzZTJkZjZjNjVlMzc4NzQyNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlstgz990PbdFixsExG4XmJGLDBWV
onx4kW0XNcraZGPif2VZSLuO+J6xmYD+dxBiIVZ8LpAFfaNK/KxcPxbz+z8hsisE
tkdZsAvhhnWOiNAGsE4gGKBcO4MxVnCPIG1fpoytSwg6vgLx0seYHRbTQ9ulw6Lj
t0T+bjlqL2DzedAPoDShJwHeqxiEKtylkQqYAKT+NbxLgbdZ8ZX+iY5rQ3QuNimM
qZiECx5sq7TqIopcaI75O92fePMP0e3fM6HmD4sE3EZOwbAfFcG3A0ng95psb5WA
HsGEAAlObXqxYGeD4x0TOrvLAsD7vHDJ6/pI5NXRhJjUe25QbJP5NUAw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCeiTluIMq3LsHz4t9sZeN4dCY2MB8GA1UdIwQY
MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt
N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj
LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVS/3ESa
NOt7DPRXRZlQYTMEjKSYnYRGgoaTREHlt5Se2HWMFSuWkAi3nFxxHWj1VWk0x68F
ja0z38ekRG/FS6mF7KaUaooxP3F5FyWdtSHgmXoTcaM/psvQalCdDq4FtBfsHrif
6lGkCt0IFRk46i/Q+6l5p4uZMltRtTh1FelAeTxHjLp2dFEUiyfB7dLHRBR46S8v
rC/5PxvRtWnFl+xrpotWi2z+Y5h+Ux3R78jlqZAjFMbmN9Gq2rLpt2zGUP7P++NJ
PkvJUI7mBDmBDyCP+uAmRe1gh/Q6vu2jpAWb1XPrntSAsNLBHCJAUCFH+AsJutow
q/VzU4JMEqd3dg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:56 2026 by rpki-client