Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File: IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier: 9oxPizaz2WDywdDQAyIGUsQeEtEMNn1cn7JUxALcpsc=
Subject key identifier: C7:38:CB:06:E3:51:CC:80:46:BF:49:29:F4:D2:88:15:84:5A:AE:D7
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 019D38D31532586F6C86567D0372F232E799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: uEYS38VPflimhZpa8f4LKdKaWbYR346GMLna/+rzAjo=)
2: Uh329QdqNtbq-rnjzUX67spw_pI.roa (hash: KrAiLdJbcCv+UC8InYxWGXAZ6xLFGNzoVLgOGCkNxp0=)
3: viJ7WfbDNM5esSfJxOqSt5gKGAc.roa (hash: 9+hcCiy0XqJIFSr4FHRADwACNfKMSEAJCGmpy7MhHBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:32:58:6f:6c:86:56:7d:03:72:f2:32:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=c738cb06e351cc8046bf4929f4d28815845aaed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:0d:9f:55:0e:85:1d:6c:33:d7:77:26:68:
c4:a1:f8:bd:1c:be:84:44:c7:63:cb:6e:56:7c:7c:
ac:6f:a4:60:5e:1a:58:5b:35:ca:1b:55:be:3e:94:
69:a1:d8:d1:a3:8f:53:61:a8:b1:9e:07:c2:a7:f8:
1f:b3:cc:de:f4:4b:b0:d2:e6:fb:ce:57:d3:37:65:
5c:61:74:ce:15:b2:a8:05:aa:7f:62:e1:b4:68:81:
bb:be:6d:91:31:0a:f0:76:85:3a:4b:ee:40:a1:27:
42:7e:86:78:4c:b0:d2:87:92:cc:4d:17:c8:c8:75:
30:6a:60:c8:e6:9c:d7:7f:5b:02:eb:be:f1:99:da:
79:e6:a4:a8:a5:90:b5:2a:50:da:22:3b:c8:96:f6:
8a:9e:bd:1a:0f:02:59:ee:f9:61:bc:1f:28:dc:6d:
69:8b:a9:11:7d:a2:a2:b8:44:ad:35:14:20:a6:81:
08:e1:69:af:57:87:9c:01:5b:19:2a:1e:98:60:77:
78:b9:c7:ac:d5:9f:20:4c:d3:f6:ac:c7:18:4a:b5:
d7:b9:53:e9:23:d1:67:f7:54:ed:13:ca:02:d7:50:
4b:77:c2:0b:02:f4:f3:21:c7:53:ad:c9:3f:66:de:
fd:09:1f:2a:eb:19:82:41:8f:93:ce:dd:6f:5a:d6:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:CB:06:E3:51:CC:80:46:BF:49:29:F4:D2:88:15:84:5A:AE:D7
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:87:f7:f7:03:43:c7:ec:c2:8d:57:36:e8:83:e3:5e:4c:5b:
d8:1c:80:10:08:8e:48:90:48:f4:10:3e:88:bb:f8:67:f5:72:
17:4e:cf:9c:ee:80:21:a2:f6:78:30:84:19:7c:7d:d9:15:ad:
df:b3:81:28:d1:b9:78:d7:e4:e3:f5:5d:64:28:50:0d:9c:50:
aa:21:4a:fb:c1:08:02:f6:59:0e:d6:4f:a1:c1:56:df:36:8f:
e4:16:f4:7b:b1:e0:aa:43:96:38:9b:a7:de:ba:c2:46:ed:15:
46:26:09:1c:f7:70:fb:fe:52:6f:2e:67:5c:78:cd:02:7a:fa:
0c:e7:3a:7c:a7:d7:0c:57:7d:eb:ee:68:39:e2:7c:a0:eb:95:
9a:80:f3:da:d8:e0:1a:8f:b1:87:74:96:ca:e0:e5:15:ad:3c:
54:b5:b9:51:3e:f1:35:67:d7:4b:d7:84:3f:13:e1:c8:3b:af:
21:64:19:6d:56:2c:8d:68:62:c5:f7:54:2b:e1:b8:e6:2a:c7:
69:80:80:78:48:2c:10:17:85:43:ef:0e:d4:c8:9a:e1:24:0c:
45:8d:f2:79:01:b5:4c:75:95:bd:16:af:9d:e5:a4:04:48:0c:
10:3d:12:6b:ed:16:09:2c:fc:44:95:41:02:dc:a6:a9:f9:b8:
a1:c3:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client