Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: at7vuu+CNLmNCFHFwqcCSJBBe6lNGvgX7iqwEmh0/8s=
Subject key identifier: 25:7B:A8:4E:CB:89:AA:CB:90:5C:AD:FD:63:5E:EE:32:CE:11:E2:CC
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019FA372C728DD4CF1E636DD0CCA316343F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 02B6
Signing time: Mon 27 Jul 2026 12:00:35 +0000
Manifest this update: Mon 27 Jul 2026 12:00:35 +0000
Manifest next update: Tue 28 Jul 2026 12:00:35 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: KX95ne0GWusbbhKqvGVQBy1vTyPOspaQHKl0VxasM6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:c7:28:dd:4c:f1:e6:36:dd:0c:ca:31:63:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Jul 27 12:00:35 2026 GMT
Not After : Jul 28 12:00:35 2026 GMT
Subject: CN=257ba84ecb89aacb905cadfd635eee32ce11e2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:21:f8:af:64:3a:87:24:ac:25:16:3e:2c:
95:7d:cc:3c:7b:1e:39:49:f5:8e:4c:1c:89:df:cd:
de:4d:d3:6f:fc:70:73:82:73:6d:f3:4a:25:d0:4a:
27:40:41:8d:08:c2:56:52:0b:85:85:75:c7:f4:86:
e9:09:b2:15:b9:a6:a7:93:20:3c:8a:2b:1c:d6:f1:
89:c7:70:6c:ec:9c:cd:f4:65:d5:e8:1e:60:a0:eb:
eb:e1:ed:c6:78:e8:62:4c:d8:d5:26:74:ac:5f:44:
11:1d:fd:91:6e:3a:ca:44:f9:12:37:2b:d8:82:89:
92:a6:23:52:b7:73:86:51:95:5a:6f:54:03:98:19:
4c:ad:0d:90:ee:b2:7b:a5:07:3a:af:9b:7b:02:a4:
bb:e3:b5:1c:8a:6e:45:6c:18:5d:be:20:d6:28:e9:
b0:c1:6f:b3:67:bc:16:9a:7a:ab:61:a6:f3:8c:13:
d3:ef:0b:de:b0:62:3c:13:30:13:b9:3f:ef:fa:93:
17:b4:94:e1:a3:16:c3:9a:82:86:f6:aa:6c:32:25:
17:22:8c:b3:4f:25:c0:42:47:6c:b1:8a:0a:06:9e:
6d:b4:e7:8d:3f:dd:82:3c:c2:48:f1:1b:35:76:48:
d2:ac:1a:83:88:d8:9b:a5:fd:96:66:a0:a4:d1:bc:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:A8:4E:CB:89:AA:CB:90:5C:AD:FD:63:5E:EE:32:CE:11:E2:CC
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:a9:05:54:2d:92:93:62:51:dd:8d:50:1a:27:d2:e5:2c:
4d:1f:a8:b4:90:78:96:a0:8a:03:3a:cf:cd:a3:ec:1a:1d:b3:
44:65:8c:52:c3:87:90:6c:e9:67:24:7b:74:23:c0:9a:7e:50:
7c:25:36:51:7b:50:ed:43:01:49:0b:25:fa:9d:b8:fb:8b:6a:
0c:ee:51:66:52:85:92:22:9b:8f:40:f5:3b:86:e6:51:ce:06:
e5:59:14:71:02:82:3c:9c:c4:d7:ea:8c:26:54:45:42:2e:38:
37:fc:64:b4:53:60:d8:af:c7:b7:0c:c4:33:5a:f0:04:34:e7:
67:11:dd:c3:65:98:6a:8d:1b:3a:32:f4:68:1e:28:f8:a5:f0:
ea:ec:b2:74:4b:30:dc:5f:04:b1:16:be:85:3f:61:b5:04:37:
ee:da:98:56:a1:ee:d2:15:ee:a6:eb:1e:eb:d3:d9:90:4a:a2:
a5:9a:12:ed:a5:fc:92:1a:8d:c9:0b:be:7e:b2:be:fc:77:74:
8c:43:3f:ff:d2:67:ca:f9:26:93:2f:b1:20:08:cf:dd:a9:51:
be:f7:cc:ab:06:e2:53:bf:c3:91:0c:6b:60:ff:a0:bd:9f:2f:
d5:3d:31:63:fa:a8:5d:1f:94:59:f0:68:e5:6c:a9:af:8e:ef:
7f:44:31:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcsco3Uzx5jbdDMoxY0P2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJhOGNjZjM0NWVlZjBkY2Y3ZDAxNTQ5MjA4MThmMzE5
YzI1ZjgwHhcNMjYwNzI3MTIwMDM1WhcNMjYwNzI4MTIwMDM1WjAzMTEwLwYDVQQD
EygyNTdiYTg0ZWNiODlhYWNiOTA1Y2FkZmQ2MzVlZWUzMmNlMTFlMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WIh+K9kOockrCUWPiyVfcw8ex45
SfWOTByJ383eTdNv/HBzgnNt80ol0EonQEGNCMJWUguFhXXH9IbpCbIVuaankyA8
iisc1vGJx3Bs7JzN9GXV6B5goOvr4e3GeOhiTNjVJnSsX0QRHf2RbjrKRPkSNyvY
gomSpiNSt3OGUZVab1QDmBlMrQ2Q7rJ7pQc6r5t7AqS747Ucim5FbBhdviDWKOmw
wW+zZ7wWmnqrYabzjBPT7wvesGI8EzATuT/v+pMXtJThoxbDmoKG9qpsMiUXIoyz
TyXAQkdssYoKBp5ttOeNP92CPMJI8Rs1dkjSrBqDiNibpf2WZqCk0by0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV7qE7LiarLkFyt/WNe7jLOEeLMMB8GA1UdIwQY
MBaAFCErqMzzRe7w3PfQFUkggY8xnCX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMt
ZTA2NmUwMDQxYTA1LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMtZTA2NmUwMDQxYTA1
LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqz+pBVQt
kpNiUd2NUBon0uUsTR+otJB4lqCKAzrPzaPsGh2zRGWMUsOHkGzpZyR7dCPAmn5Q
fCU2UXtQ7UMBSQsl+p24+4tqDO5RZlKFkiKbj0D1O4bmUc4G5VkUcQKCPJzE1+qM
JlRFQi44N/xktFNg2K/HtwzEM1rwBDTnZxHdw2WYao0bOjL0aB4o+KXw6uyydEsw
3F8EsRa+hT9htQQ37tqYVqHu0hXupuse69PZkEqipZoS7aX8khqNyQu+frK+/Hd0
jEM//9Jnyvkmky+xIAjP3alRvvfMqwbiU7/DkQxrYP+gvZ8v1T0xY/qoXR+UWfBo
5Wypr47vf0QxZA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:32:26 2026 by rpki-client