Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: iG80A1aDkMMFKe6QmrCWKQ9nf871+J9TO4hNXjUtYnE=
Subject key identifier: 5A:A8:93:92:2C:9A:AD:16:2D:C9:C8:0A:7C:13:93:85:E6:6E:1C:29
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 01A1807489A4C03CBCC0A4A7ED8A11D52931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 03AD
Signing time: Wed 28 Oct 2026 03:01:23 +0000
Manifest this update: Wed 28 Oct 2026 03:01:23 +0000
Manifest next update: Thu 29 Oct 2026 03:01:23 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: blsNfg5Hhk2MDnUHlXkhZJnbZgDRpUhbw0t2tp8zu9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:89:a4:c0:3c:bc:c0:a4:a7:ed:8a:11:d5:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Oct 28 03:01:23 2026 GMT
Not After : Oct 29 03:01:23 2026 GMT
Subject: CN=5aa893922c9aad162dc9c80a7c139385e66e1c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:da:6b:27:0e:ef:83:f7:a1:24:68:6b:7e:
bc:c9:95:b5:ee:f6:da:3f:b4:82:26:10:82:5c:1f:
42:8f:22:ae:38:98:0e:af:0c:e0:00:c6:0a:05:94:
2e:25:7b:43:4e:1a:78:49:05:1d:dc:76:89:15:25:
4c:9d:ad:62:5f:5b:72:9c:28:46:dc:bb:bf:ed:cc:
96:10:f8:09:b9:ad:3d:08:e4:31:9e:a1:de:c7:5f:
6b:94:f6:42:1e:59:07:81:59:fe:6f:93:7f:cc:15:
57:50:0c:8c:85:0d:ab:98:43:d1:62:e2:3b:a1:8f:
73:46:ee:49:3f:78:f8:3e:8b:30:45:d4:ed:98:a4:
c0:96:ed:1e:0a:27:8b:55:c6:0c:e1:f8:5d:4a:35:
57:a2:01:18:fa:b1:b0:f6:72:fa:dc:fb:85:9c:29:
89:2d:d9:7a:b6:66:83:0c:17:13:9f:3a:ec:a8:dc:
08:5b:de:2b:49:dc:c8:3a:a9:a3:83:a0:e7:6c:d2:
61:56:de:6c:0d:26:1a:3b:4c:cc:9d:b0:6b:de:0b:
c4:02:71:c1:c2:e4:05:0e:88:2b:1e:98:c1:b2:f5:
87:fe:71:58:a8:97:c7:dd:84:0b:55:5f:a0:4f:3f:
db:fa:bd:61:be:6c:1c:9a:9c:ae:de:12:b6:0a:74:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:93:92:2C:9A:AD:16:2D:C9:C8:0A:7C:13:93:85:E6:6E:1C:29
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:99:7a:cf:4a:a1:65:73:12:e9:f2:c7:79:59:f9:2e:9e:
66:6a:9c:79:67:de:f2:c0:c4:c8:98:7d:a7:78:5c:60:de:bd:
3b:8b:05:86:64:11:ab:3b:55:87:2c:3e:b6:f0:8e:da:6d:ce:
31:fa:ae:3d:61:ab:da:66:a2:41:f0:70:92:b6:3c:fc:ff:0f:
d1:5e:1b:25:7a:c6:8b:e5:b7:1f:b6:3e:56:06:e7:eb:74:46:
e9:9c:f4:a7:7d:85:f5:36:a0:cc:02:ed:6b:86:73:ca:46:71:
e4:11:41:75:65:c8:a8:42:b8:e0:9e:f0:d6:ca:8a:d8:eb:fe:
6e:b6:23:b4:ec:7a:fd:b3:f8:02:0b:d2:42:6c:20:f9:20:16:
92:54:bd:53:95:61:00:92:e9:26:72:c7:ba:d5:f6:03:0c:17:
99:4c:81:64:1d:5d:b5:89:d8:6f:c7:4e:f6:97:59:67:f1:e6:
66:4b:37:57:c5:2c:2c:66:ae:1d:3e:52:c5:b0:b8:d1:04:a8:
94:cd:3b:80:e2:73:78:e8:0d:49:a9:e4:77:d0:df:b0:58:e1:
b4:71:2c:90:b7:33:ba:e8:ef:7b:c7:0e:66:fb:5b:04:dd:04:
d1:ff:b7:01:7c:b0:af:dd:61:63:18:4a:de:82:df:df:37:d3:
70:56:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:19:42 2026 by rpki-client