Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: /e6OXMUi1iWw4WgfPj+sU88CT1GfsllNkbXpVM7Opx8=
Subject key identifier: DE:6F:82:FB:90:CB:0C:B1:F6:C5:CA:43:5C:65:28:A2:18:F6:E9:30
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 019D38661D66448F0DF09F7E77E0D5A668B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 1025
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: qIcq0GwKhFeZh3YZDOfXbMQbRaOQ7n48RCYmJ1j5Das=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1d:66:44:8f:0d:f0:9f:7e:77:e0:d5:a6:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=de6f82fb90cb0cb1f6c5ca435c6528a218f6e930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:95:ce:01:b7:de:74:07:7e:e1:49:ee:79:
1e:70:c2:4a:fb:b5:c5:6e:a2:07:a9:73:0e:05:47:
76:eb:af:59:28:59:4d:ea:4f:4d:b1:73:28:de:2a:
df:2c:da:b4:1c:b9:28:62:e9:a6:0a:8d:37:9b:dc:
d7:84:d7:58:b7:09:91:9c:26:a4:d4:7b:9f:07:91:
84:f9:04:6a:a9:f4:70:42:f6:fb:c1:b2:e3:a8:29:
05:d1:78:43:dd:99:4b:b2:61:0f:13:1b:62:c6:16:
da:a6:ec:82:87:fd:fb:b3:35:c5:a9:7c:0b:17:76:
b0:48:d3:59:b9:3d:64:5f:90:0e:bf:13:5a:6e:0a:
62:b4:7d:21:39:2d:be:bd:42:92:ea:95:91:5a:2d:
62:d4:21:a8:a7:5f:b7:c6:57:92:c0:94:9e:55:26:
72:a5:98:de:ea:ee:44:1d:ef:d2:8f:55:22:38:b5:
e1:6d:27:32:ba:e3:b5:cd:65:7c:b2:f4:44:f0:8f:
74:d7:7d:1e:a1:46:c3:8d:ce:60:b8:3b:6a:b7:9b:
55:1a:20:c9:28:92:dd:b4:7a:ce:73:35:76:b2:a4:
36:80:29:cc:07:55:f4:86:b8:a0:ac:0e:02:ac:5a:
fb:43:db:27:bb:17:45:78:94:fb:fd:98:d1:e6:67:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:82:FB:90:CB:0C:B1:F6:C5:CA:43:5C:65:28:A2:18:F6:E9:30
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:02:f3:2d:d2:96:e7:df:05:94:b5:84:35:a8:d1:d8:70:
ca:20:de:38:39:ee:15:01:7d:7f:d6:b2:84:22:82:e1:6d:8d:
1a:26:3a:2f:bb:0e:d1:fa:e2:34:02:10:e8:2e:50:4a:2a:7f:
6d:c3:8e:f0:85:06:1c:09:79:ee:05:b2:ef:cb:08:37:7a:a3:
44:2c:d4:fb:4d:1c:fe:e1:66:9c:08:40:31:08:88:3e:b7:07:
92:88:72:73:4b:9f:11:ee:cf:38:90:23:0b:7f:ee:f5:73:19:
73:78:52:78:5b:00:25:6a:03:69:cd:e5:d2:6b:4a:6b:bb:50:
ac:0b:5e:39:fa:f1:17:f5:d7:4f:31:7e:72:95:fd:6c:09:0a:
cd:4d:aa:23:f5:1c:81:84:d7:60:3c:76:34:38:c6:eb:47:97:
09:ce:2d:91:18:7b:c9:0e:70:fa:3a:4c:04:e8:f4:40:ca:3d:
df:52:e0:c2:04:2a:38:ca:ed:46:56:23:b3:a1:7e:9f:52:58:
9c:b4:f9:c8:db:57:71:9e:b8:36:d7:c9:b1:49:62:95:38:8f:
c4:81:21:91:fd:11:fe:c6:90:33:27:9f:76:ee:ac:29:79:0b:
02:6a:2e:25:a2:ed:c2:9a:36:c4:14:ea:53:11:62:d9:85:7c:
95:88:6d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:41 2026 by rpki-client