Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: aGUTpqySe20eDkqo5JVVqWWtAzoRabmM1VYDasY9tlU=
Subject key identifier: 47:AC:52:66:E5:5D:4E:7D:D6:1C:BF:7C:53:F5:D5:15:3B:58:87:37
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019D389BBE8A6E2DAD66846298BEC66601F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 093A
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: +TT22GjbFeXb1Ra6gN4JVIHiTLEBesl3Fybjg0IRwXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:be:8a:6e:2d:ad:66:84:62:98:be:c6:66:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=47ac5266e55d4e7dd61cbf7c53f5d5153b588737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:bc:34:b4:fa:56:79:15:f5:eb:c6:2f:b6:
85:32:ae:06:f2:64:ee:dd:71:e0:49:56:7d:97:b9:
12:9f:83:09:d7:52:72:24:69:84:38:99:15:7c:67:
5b:79:ee:32:09:c6:f2:e6:14:33:da:b5:56:63:13:
79:c6:08:bd:9b:78:4b:e2:56:1d:67:dd:02:bf:3b:
84:52:4b:fa:b0:df:9d:40:28:fe:80:c8:af:7a:7b:
5d:69:b6:31:49:4b:a4:d2:7d:bd:3e:c0:75:de:b9:
5c:90:61:3c:2b:87:c3:89:11:25:3c:ac:91:30:aa:
d5:68:3c:82:c7:03:da:ce:81:0b:57:fe:ea:f2:93:
d8:ce:75:bf:a1:c9:bc:35:97:c7:a2:fa:17:ec:d3:
a3:53:7c:13:3d:31:28:81:ce:c0:16:14:8d:5b:fa:
a5:52:d2:a8:09:35:19:09:bd:22:eb:c5:f4:0d:04:
ce:86:6a:45:2d:d0:04:08:48:f4:02:b0:31:9a:12:
63:42:4a:ee:5b:de:29:04:3d:f2:b6:62:40:3d:f7:
da:69:f3:9b:c0:65:65:93:aa:06:91:7d:e3:ae:5b:
2b:10:a9:c1:03:a3:58:5c:3b:d8:cd:98:49:ea:92:
34:25:7a:f0:b3:b6:7f:7b:e7:01:d9:bb:1d:b3:74:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:52:66:E5:5D:4E:7D:D6:1C:BF:7C:53:F5:D5:15:3B:58:87:37
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:cc:31:a4:26:56:ee:1e:be:78:a6:c2:7d:06:7e:6c:49:
46:ea:53:c1:3f:bb:5c:a8:21:48:2c:2d:a1:f9:76:02:84:f4:
5d:16:41:26:19:67:9c:b1:a6:84:aa:71:a3:26:78:dd:13:7e:
7f:9a:4c:3b:22:bc:45:48:b1:c5:28:22:7f:16:58:63:98:10:
7c:88:cf:b2:3c:10:26:c2:22:a5:ea:35:be:4a:b3:0f:ac:1d:
d5:bf:29:c6:9a:16:f1:f7:6a:9b:9e:56:2a:ce:b6:6f:0d:8f:
1e:4e:6e:a6:62:05:5e:86:e1:07:f6:86:dc:a5:1b:d9:9b:f7:
d4:f6:30:cc:38:53:5f:c2:ac:65:d4:5f:f6:a5:54:2d:c3:39:
64:1c:82:b9:78:79:dc:43:a4:95:aa:c5:57:b9:6c:42:a6:af:
15:10:f9:28:85:c3:d7:30:7f:54:fa:77:58:93:03:00:7c:10:
96:d8:5b:9f:72:a3:04:a8:2e:8a:62:38:ce:08:5f:29:de:a2:
49:a8:84:7d:d1:af:da:74:5e:86:11:36:d6:f5:29:5a:68:d6:
93:82:fb:96:16:e2:04:e9:c1:9a:23:9b:35:74:e9:39:8b:16:
3f:51:40:3f:a3:7e:ed:06:aa:80:cc:3f:94:01:90:b5:fa:77:
6d:8d:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:33 2026 by rpki-client