Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: 2w9ufBGUwVM9PNHGl4iFg2QdhZqAaLiuFfbbdi52UiM=
Subject key identifier: 47:E1:D5:75:3F:C9:0B:D0:FD:83:DF:1E:4F:48:A1:FE:E1:F5:4B:EC
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 01A08D1FDBAC9666085EF64BBAD6BE3DA91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 032F
Signing time: Thu 10 Sep 2026 21:01:10 +0000
Manifest this update: Thu 10 Sep 2026 21:01:10 +0000
Manifest next update: Fri 11 Sep 2026 21:01:10 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: wqJeBFr1fR9JL8dpaAtOyGCd0ZEtMn1Si+OvzX410pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:db:ac:96:66:08:5e:f6:4b:ba:d6:be:3d:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Sep 10 21:01:10 2026 GMT
Not After : Sep 11 21:01:10 2026 GMT
Subject: CN=47e1d5753fc90bd0fd83df1e4f48a1fee1f54bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:89:9a:b0:b5:4e:43:6a:5f:40:75:ad:0d:
71:ed:b8:d1:98:e9:91:10:57:cc:29:d4:42:7e:ac:
b0:ce:50:6e:92:48:e0:d1:89:1b:49:82:43:1a:b8:
45:48:05:82:d5:42:b1:9c:95:77:6a:ce:a6:4c:2d:
74:82:8d:ab:e2:1f:10:41:27:49:64:8b:c6:3e:c1:
2a:96:ae:2a:ef:4a:83:1e:19:60:60:92:9d:d2:63:
2c:c3:af:4a:14:b7:98:7d:d5:55:41:35:e0:2e:65:
f6:16:f6:33:3e:9a:74:2e:fb:0d:46:80:8e:6f:5d:
c5:98:7b:cf:b0:f5:e1:5b:35:32:b7:6f:75:b8:ec:
17:22:45:f8:b1:6a:d9:9e:28:10:40:13:99:21:ac:
31:71:20:36:5b:2a:4b:7d:7b:ea:d1:51:21:5e:99:
da:4b:f4:da:5c:f0:1e:f7:e0:c5:67:7f:67:a5:80:
c4:06:8e:e2:44:10:67:a5:85:de:b4:e8:f3:00:14:
77:a5:d4:ac:39:b5:d4:d4:e0:01:a5:b2:2b:f3:c8:
9d:1e:f9:c8:81:ec:61:ef:36:07:91:31:e4:06:be:
b4:b9:20:cd:df:44:d0:a2:e8:9f:a9:8c:30:43:4f:
44:32:8e:d7:e9:94:f8:2a:46:5a:f7:a0:1b:55:d2:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:D5:75:3F:C9:0B:D0:FD:83:DF:1E:4F:48:A1:FE:E1:F5:4B:EC
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:42:f8:98:58:05:29:00:3b:ae:b3:25:04:56:52:cd:b1:8a:
eb:b7:29:7f:13:5b:54:13:1b:6f:dd:8b:2c:5c:d7:b2:23:70:
92:0c:44:db:17:f9:a4:13:3f:0c:11:11:2d:44:9f:a6:92:c9:
c8:34:fc:fd:fd:65:ba:92:fc:ab:23:2e:9d:6c:89:37:6f:a9:
b8:50:7c:9e:6e:28:2b:3e:e9:e4:fb:a8:d3:98:91:05:98:02:
57:a6:48:ad:00:0c:47:6a:0e:7b:5f:64:dd:f3:c2:16:29:9d:
7c:88:f0:12:f6:0c:34:81:09:6f:37:99:8d:96:89:8f:a4:93:
be:b9:c0:67:3c:ce:08:17:a4:fd:54:8b:66:73:c7:d2:6c:39:
54:c3:88:87:b6:99:b7:12:6d:37:e0:02:f7:3d:19:4b:38:55:
56:ee:f9:5f:ce:5e:43:ef:3a:71:e7:a9:4a:c5:40:8b:ed:cf:
f4:a7:3f:f4:78:d1:d6:fe:19:94:a9:f5:b1:17:37:42:b8:77:
1a:f7:9e:b4:47:07:03:dc:0a:45:fd:69:d3:c9:9c:08:fd:79:
80:86:bc:a5:f3:5e:f6:3d:d7:ba:70:e6:aa:1b:f3:88:ec:8a:
48:b0:5c:a2:94:6d:9a:5f:66:32:3e:be:b1:b5:2d:df:83:71:
72:57:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:51 2026 by rpki-client