Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: KFgF459SZ+CTzRnMr3gbYhar1tR2N4VY3NpBMnpltQU=
Subject key identifier: FF:C9:9D:4F:AD:73:26:26:47:57:F7:8F:7C:06:FA:8B:8F:76:00:D8
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019C973FDBE3EE8B402332C46977375EFA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 0122
Signing time: Thu 26 Feb 2026 00:01:10 +0000
Manifest this update: Thu 26 Feb 2026 00:01:10 +0000
Manifest next update: Fri 27 Feb 2026 00:01:10 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: fDX7f9L71ddkqr2T35uzJ+K6UE99vBPoAbb/iJGXC9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:3f:db:e3:ee:8b:40:23:32:c4:69:77:37:5e:fa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Feb 26 00:01:10 2026 GMT
Not After : Feb 27 00:01:10 2026 GMT
Subject: CN=ffc99d4fad7326264757f78f7c06fa8b8f7600d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:06:0f:13:a7:92:89:fc:6c:a3:3f:76:c3:
dd:71:5d:95:d2:d9:73:c1:1b:ed:32:bf:da:2e:c0:
b5:27:d4:06:72:95:6e:ed:61:5c:4b:a4:5a:f4:1c:
8d:53:9b:85:de:e1:61:07:01:38:45:02:ae:48:8d:
67:4a:68:55:b5:cd:e0:c0:a1:c5:ff:c7:87:78:84:
c2:90:c8:5f:29:88:d8:32:7b:a3:cb:b6:71:4d:00:
ec:54:66:bd:b8:ad:ad:d6:fd:9b:7c:33:ba:c6:51:
58:3d:fe:a1:d8:1d:e9:8b:68:64:e4:d6:9f:0d:0b:
c3:00:21:cd:2c:cf:dd:81:b5:d5:44:e6:35:e6:23:
6e:7f:13:c2:d5:bc:83:e5:88:29:7d:db:18:f5:67:
2d:02:c9:d3:c8:a1:b9:d1:8f:d0:96:f3:38:0c:18:
b2:d3:11:25:09:42:e4:a9:f0:56:68:d7:b6:b6:29:
b9:3c:6f:3c:d7:23:3d:b5:5a:2e:0f:46:27:4c:57:
6b:37:e4:0c:c9:df:33:c9:02:41:a9:d7:f3:c5:1b:
a2:72:83:a5:4c:31:a1:08:68:f2:08:ed:fd:a1:fc:
ca:72:3f:21:81:8a:d4:3a:ec:60:fe:b7:4c:20:b8:
2d:83:a5:c6:5b:02:c3:8f:d0:27:cc:fa:68:0a:72:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C9:9D:4F:AD:73:26:26:47:57:F7:8F:7C:06:FA:8B:8F:76:00:D8
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:06:f8:8c:5f:ff:e9:0a:67:0c:fe:e5:5f:e9:8f:1b:c7:
13:6f:07:eb:bc:d8:a6:92:af:70:30:92:00:8f:76:3b:93:93:
3d:a3:e8:a3:ba:18:54:b2:d3:1c:1c:4a:72:20:b1:05:25:98:
ad:13:64:8f:12:e7:2d:1a:de:26:3c:01:a9:49:8b:10:96:24:
c2:89:5f:3e:a5:73:93:ce:e1:d9:a2:28:47:18:9b:26:e4:53:
a3:f8:12:a6:a4:e6:18:8d:a4:68:94:63:94:d0:d6:8d:f8:63:
e7:db:3b:2e:72:36:19:da:d7:ac:31:b9:c6:f3:47:fa:5b:b3:
e3:88:17:3e:7f:2c:ab:98:58:0f:fb:d0:6d:dd:8a:cf:69:fd:
34:ed:af:da:52:30:0b:9c:05:a3:33:51:b0:8d:74:35:39:ed:
d4:c3:a0:eb:c6:b0:1e:6b:dc:7a:5e:85:77:77:a2:4b:c1:39:
f6:24:6f:75:3e:d0:a6:b4:a0:64:4c:f3:5c:81:04:2e:50:95:
70:1e:29:dc:b7:c9:44:5f:a7:0f:e3:d3:62:12:5c:86:e7:64:
70:c9:f9:a1:74:dc:82:6e:a6:18:33:96:4d:c4:24:0d:49:b4:
3b:46:c2:0c:4d:8a:46:98:df:63:b1:c0:10:21:88:c0:cd:32:
2b:cc:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:01:46 2026 by rpki-client