Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json)
Hash identifier: 2yGJd04e8aIbdP9MLFS4cAtihUN7O6Dp4jSTBgCjIR4=
Subject key identifier: D7:6C:3F:89:2B:FE:1E:27:6C:25:4E:79:4E:F1:C8:EB:01:6C:C3:A0
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial: 019D3909DE40EA44A953FCB941F6A334134A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
Manifest number: 0187
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: DUhtAD3_xxy9gOvcTDplBUTPnms.roa (hash: v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=)
2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: iMr+SCe5nPBczYklnnnK8d+kE7O73MPHTxe/gDQPkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:de:40:ea:44:a9:53:fc:b9:41:f6:a3:34:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=d76c3f892bfe1e276c254e794ef1c8eb016cc3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:11:19:df:f3:d1:fb:f8:23:5a:c4:51:1d:
32:ef:ac:40:69:01:92:98:17:e0:11:2c:2d:88:1e:
f7:34:fd:09:62:20:fa:93:80:f3:fc:32:48:49:bf:
1a:6f:aa:4d:fc:1b:0e:66:aa:1f:fb:de:b6:0c:c1:
e1:27:26:85:d6:ee:14:a5:9a:9b:f2:81:d0:3a:83:
24:17:7c:15:0e:dd:eb:c4:ae:36:10:11:6d:46:da:
e8:5d:32:81:4e:99:3f:01:34:98:3e:c5:7c:34:eb:
f1:d4:b8:d9:69:e0:62:b7:d5:38:31:4e:d4:35:79:
63:0c:d8:d9:77:75:97:10:ec:b9:ee:98:87:39:4c:
2b:a9:d6:7d:bc:b6:ef:78:fd:d6:22:a2:c4:9d:5b:
05:cf:2f:10:02:11:a0:b5:9f:1c:52:19:31:5a:27:
5b:07:9b:b7:d2:63:9f:45:b2:12:a4:e6:5b:16:90:
6b:6a:9b:0e:f4:ca:18:7d:54:26:4a:13:16:a4:0f:
5a:ef:ba:f5:d2:4a:9e:b6:35:75:35:32:11:17:70:
bd:e7:c2:6a:58:07:db:fe:f8:83:82:ae:83:7b:27:
40:67:3a:8b:51:f5:78:08:b1:a2:d8:ea:82:68:0d:
07:cf:67:7c:aa:af:37:40:3c:6d:15:59:b4:8e:2d:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:3F:89:2B:FE:1E:27:6C:25:4E:79:4E:F1:C8:EB:01:6C:C3:A0
X509v3 Authority Key Identifier:
keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:8d:22:3c:98:1b:8c:af:a1:98:16:e5:ae:e1:49:f0:3c:
75:af:6a:40:d3:08:a4:c8:21:34:9e:a6:11:05:36:01:8a:8c:
97:83:28:f5:57:df:87:a4:d7:91:5a:92:44:71:35:83:ac:0b:
cb:02:31:91:09:36:96:58:3d:2d:79:e5:b9:9b:2e:6c:56:6f:
c3:69:c8:10:2e:ad:7a:8e:94:71:90:0d:d2:0d:91:49:1d:76:
77:a2:36:00:c5:0d:e7:d2:d1:70:70:e4:36:d6:da:e0:81:f6:
77:85:c1:e2:05:9a:42:dd:a7:63:2c:2f:f0:59:ea:f5:ba:81:
50:46:8a:c8:7e:3e:c8:0b:93:20:7e:66:33:26:39:e6:6a:6c:
68:1a:c9:1d:49:ce:b3:45:16:0f:94:e9:2d:11:65:4d:04:8d:
69:68:2a:a9:5f:78:59:f6:41:4c:af:bf:a3:cd:e6:b8:1a:5d:
df:02:d5:0b:de:e8:4d:7b:87:17:dc:af:5a:08:c6:ea:f5:ef:
bf:96:d3:cd:32:94:91:ca:51:fa:02:ca:69:00:68:9e:eb:c4:
76:f2:5c:78:8f:65:f3:c7:76:a5:cb:61:88:50:4b:40:ea:1b:
30:0d:40:b0:15:19:73:82:53:7b:27:d0:c2:18:0a:34:25:1b:
29:54:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:43 2026 by rpki-client