Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File: IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier: 8l5IhmQeDxocJEWI4R6ZWWJJ5ziFVidh3XHzfAir5O4=
Subject key identifier: 2A:53:35:2E:74:E3:EA:BC:D4:09:4C:36:73:10:60:E9:E5:C6:D8:DF
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01A180E26C7FCAE6B0EF571665E8A599C03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number: 1AD8
Signing time: Wed 28 Oct 2026 05:01:24 +0000
Manifest this update: Wed 28 Oct 2026 05:01:24 +0000
Manifest next update: Thu 29 Oct 2026 05:01:24 +0000
Files and hashes: 1: 8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa (hash: 2gV9CBthLZoGipB+VCz2AMjev6gv/KCt//M1rl+RkXk=)
2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: nWQrc645p7xXSJkEpl6B5S4a55jTUmVPc86Pn02VcFg=)
3: viJ7WfbDNM5esSfJxOqSt5gKGAc.roa (hash: 9+hcCiy0XqJIFSr4FHRADwACNfKMSEAJCGmpy7MhHBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:6c:7f:ca:e6:b0:ef:57:16:65:e8:a5:99:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Oct 28 05:01:24 2026 GMT
Not After : Oct 29 05:01:24 2026 GMT
Subject: CN=2a53352e74e3eabcd4094c36731060e9e5c6d8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:9d:ef:00:7c:af:ae:a3:5f:65:84:b1:68:
90:f0:db:75:38:c5:c7:63:28:0a:03:37:41:bf:f3:
23:f8:a2:9a:16:ec:15:56:88:23:a7:af:90:90:92:
46:b4:8e:b2:fe:df:b1:dd:a0:1f:fa:1b:49:44:dc:
27:93:b9:49:19:63:31:6b:af:0b:55:24:a5:da:1f:
b0:f9:b4:68:b5:ed:c1:dc:8b:81:70:73:f0:08:7c:
57:87:b6:21:a4:ca:ae:27:eb:13:22:83:b6:51:5c:
86:54:30:1c:fc:9e:93:f1:23:64:e3:4c:19:c2:07:
c4:82:97:88:fa:54:11:1b:ce:7e:b0:cf:f2:95:19:
af:fa:f5:ed:37:5f:c0:c2:44:b3:11:9a:80:7e:11:
96:a4:f2:1c:0c:41:42:48:87:07:01:cb:73:25:16:
8b:6c:09:83:7b:9b:97:4c:63:73:06:cc:a2:c4:03:
63:39:db:0f:d3:0b:87:70:b7:43:df:31:fd:f2:f8:
83:d8:d7:57:ce:07:6c:14:8f:d0:e7:47:73:57:f1:
14:25:50:9a:cd:a6:a1:8c:09:8a:25:ce:f3:e6:6f:
a0:55:80:e7:cb:70:5b:e8:c3:95:b7:79:aa:23:d5:
76:fc:82:33:cf:94:6d:c6:cd:46:8a:8c:f5:6b:e8:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:35:2E:74:E3:EA:BC:D4:09:4C:36:73:10:60:E9:E5:C6:D8:DF
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7f:2f:2e:00:23:d9:49:5a:bc:31:bd:8f:2e:69:81:23:f1:
c1:6c:87:5e:8f:67:34:00:23:c0:1b:5a:2c:47:22:05:bc:e3:
a2:75:5e:f6:06:fa:67:33:19:9b:e7:ad:12:2c:49:d3:8c:0a:
7e:13:b4:9a:c5:4b:98:b8:35:72:de:55:cb:5f:54:93:d3:5d:
90:ac:35:80:7a:e6:67:a8:6f:09:2e:35:d6:17:d9:01:ba:c5:
6d:b3:4f:c3:40:cf:04:e8:8e:23:26:0d:24:35:74:8c:1f:1a:
19:1a:1a:66:56:93:0a:64:36:3a:db:77:5f:a3:f2:3b:7d:69:
6f:bc:6a:af:3a:24:57:8c:c5:c7:4c:a4:6f:4f:c9:3a:cc:0d:
23:a9:8f:45:ba:d2:37:ad:1c:fc:5d:ae:e8:a1:77:de:6f:7b:
f1:3f:47:50:ab:8a:6b:e9:e1:8b:1a:70:bd:01:e2:2c:1b:26:
64:7a:0e:e5:bf:75:ab:82:f0:80:65:4c:ca:fa:2a:b3:ba:a7:
9c:0a:8a:33:e3:e7:46:e8:1e:e3:24:a3:36:34:83:64:06:ae:
76:fb:34:11:c8:ae:50:48:cc:97:5b:f9:7e:3c:c5:d7:28:e1:
61:f0:bb:c9:8e:fa:f8:26:34:64:e1:c0:87:26:4b:a8:2b:f7:
b3:21:bd:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4mx/yuaw71cWZeilmcA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjYxMDI4MDUwMTI0WhcNMjYxMDI5MDUwMTI0WjAzMTEwLwYDVQQD
EygyYTUzMzUyZTc0ZTNlYWJjZDQwOTRjMzY3MzEwNjBlOWU1YzZkOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pmd7wB8r66jX2WEsWiQ8Nt1OMXH
YygKAzdBv/Mj+KKaFuwVVogjp6+QkJJGtI6y/t+x3aAf+htJRNwnk7lJGWMxa68L
VSSl2h+w+bRote3B3IuBcHPwCHxXh7YhpMquJ+sTIoO2UVyGVDAc/J6T8SNk40wZ
wgfEgpeI+lQRG85+sM/ylRmv+vXtN1/AwkSzEZqAfhGWpPIcDEFCSIcHActzJRaL
bAmDe5uXTGNzBsyixANjOdsP0wuHcLdD3zH98viD2NdXzgdsFI/Q50dzV/EUJVCa
zaahjAmKJc7z5m+gVYDny3Bb6MOVt3mqI9V2/IIzz5Rtxs1Gioz1a+jVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpTNS504+q81AlMNnMQYOnlxtjfMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3
LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqn8vLgAj
2UlavDG9jy5pgSPxwWyHXo9nNAAjwBtaLEciBbzjonVe9gb6ZzMZm+etEixJ04wK
fhO0msVLmLg1ct5Vy19Uk9NdkKw1gHrmZ6hvCS411hfZAbrFbbNPw0DPBOiOIyYN
JDV0jB8aGRoaZlaTCmQ2Ott3X6PyO31pb7xqrzokV4zFx0ykb0/JOswNI6mPRbrS
N60c/F2u6KF33m978T9HUKuKa+nhixpwvQHiLBsmZHoO5b91q4LwgGVMyvoqs7qn
nAqKM+PnRuge4ySjNjSDZAaudvs0EciuUEjMl1v5fjzF1yjhYfC7yY76+CY0ZOHA
hyZLqCv3syG9Pw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:39 2026 by rpki-client