Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: ApiMiC1vD8nykwUNUJSsLZC5MaGO7HSefVbhq1YYUuA=
Subject key identifier: B7:C6:31:C2:79:45:B2:CC:BD:00:B0:51:1E:70:03:BB:1C:98:63:83
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019D371B5D9825FDD1949F6E55C668495B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: /qrjdAXAbsUf3IU7pk8+PmYkpfztkqUp2anrvnC29Nc=)
2: OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa (hash: Gff4FAc0x1oRI71/96AW462cCchXrhxYJx69los4A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5d:98:25:fd:d1:94:9f:6e:55:c6:68:49:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=b7c631c27945b2ccbd00b0511e7003bb1c986383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:4a:f5:60:b9:81:d7:57:40:71:98:f5:27:
5b:0d:30:6a:ce:0f:90:0c:a0:2f:ba:0a:a2:90:61:
bf:b1:36:04:6c:fd:0b:2c:ae:1f:d4:ae:9e:8c:94:
65:d9:75:5c:dd:f7:3c:b7:54:9f:11:27:0d:91:72:
5e:28:1f:7e:3e:12:cf:78:22:2c:8c:c7:b2:e2:ac:
ba:9f:89:db:d7:e1:0b:9a:ab:80:18:91:ae:2d:04:
2b:0d:aa:98:0a:eb:43:be:67:ba:16:0d:b8:8e:79:
63:a2:1a:7e:80:2c:e8:99:42:6c:46:1c:f3:7f:42:
1d:36:4b:68:07:59:1d:b2:54:8a:f5:57:64:c6:d8:
3e:75:b7:d5:5e:ed:f1:be:f9:ca:e5:9e:3d:8d:cc:
2b:fe:de:7a:cb:33:95:e6:92:31:04:50:58:8f:27:
05:1a:81:3e:99:bf:8a:bf:ed:e4:73:09:8a:22:b2:
f6:b5:92:d5:a8:ba:fe:c6:8f:08:cc:51:c2:f4:94:
9a:e9:ed:a9:20:03:26:24:3a:e6:bf:fc:25:f6:2d:
e3:39:47:09:e2:08:f8:25:5f:52:ab:1a:cd:17:47:
15:84:53:a5:1c:41:3e:e4:aa:f4:fd:a4:47:8d:e0:
bd:af:b1:f7:8c:fd:0f:eb:8f:7d:67:cf:f0:bd:99:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:31:C2:79:45:B2:CC:BD:00:B0:51:1E:70:03:BB:1C:98:63:83
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:56:9c:34:cc:57:1c:13:97:87:fc:cf:fd:52:5c:d7:86:
1e:10:34:65:a9:a9:b4:44:ad:43:64:3a:a9:10:83:ea:8e:3d:
07:18:38:30:3f:1f:f3:c7:39:16:21:db:71:b0:12:92:35:94:
9c:25:0f:fb:e3:d6:1b:f8:b7:51:c4:4c:4a:22:dd:f9:fc:36:
72:69:db:cd:c4:b8:a9:e3:62:fe:61:b3:95:cb:e5:b6:da:18:
1e:4c:e3:78:4c:86:df:60:b2:61:49:06:be:d5:a4:b5:58:9a:
da:8f:bb:f3:26:51:99:23:f9:0d:ba:b9:73:3e:1e:83:c8:33:
19:f8:84:ca:ca:f7:9f:22:da:95:01:af:44:83:9f:2a:ab:00:
c7:4e:e4:6d:3e:ae:7e:8e:42:23:5d:7e:54:3c:60:b3:ec:62:
36:50:1e:6d:cb:95:b3:5d:7e:15:51:14:ab:31:d8:1e:4b:5e:
a8:70:2a:48:18:bd:c6:e6:15:ab:84:9f:af:b9:01:9f:da:84:
ac:34:61:6a:8c:47:18:df:c0:d8:1a:e8:b5:17:51:1a:63:8c:
5f:08:44:77:d9:06:06:39:d2:3c:38:6d:7f:85:24:7c:43:48:
48:3a:23:07:de:38:03:34:ca:e2:92:78:71:a2:64:46:5d:c7:
86:70:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client