Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: Ca4LVsiAxOkT+eYFeIES+KYaK/V8yN+d5fBcZxcUbI4=
Subject key identifier: 2B:03:C7:62:A2:69:96:9F:17:A2:EF:9C:CC:9C:60:EA:4C:4B:AC:93
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019EB9C6A42D0A8329C7F1C8616D26FF0D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 023D
Signing time: Fri 12 Jun 2026 03:01:03 +0000
Manifest this update: Fri 12 Jun 2026 03:01:03 +0000
Manifest next update: Sat 13 Jun 2026 03:01:03 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: +F+wKHqV6OeM7Zv2wqsidC0JrwPBxGoCY10f6DW49Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:a4:2d:0a:83:29:c7:f1:c8:61:6d:26:ff:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Jun 12 03:01:03 2026 GMT
Not After : Jun 13 03:01:03 2026 GMT
Subject: CN=2b03c762a269969f17a2ef9ccc9c60ea4c4bac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:7e:16:f9:a6:b3:12:93:1c:b8:2d:18:9f:
2d:1c:e5:4f:42:6c:1c:f2:19:1b:d2:58:6c:fa:4a:
b5:3d:88:b3:2a:2d:cd:1f:ac:dd:e9:3e:f6:74:d5:
24:9d:a8:9c:56:59:44:2d:73:6d:11:67:32:56:6c:
f2:52:4a:f9:a1:f7:f6:52:44:a5:a7:0a:62:87:37:
b2:b2:db:6b:b2:fc:d5:26:d9:64:c5:fd:d4:22:ac:
b6:b5:85:8d:72:ee:6c:c9:9c:66:b2:9c:7c:36:44:
07:ff:88:40:ea:ae:bb:24:c7:43:6f:58:8d:7f:46:
85:54:cf:53:d4:d2:9e:e7:8f:77:2f:eb:c1:b3:bf:
24:a5:cc:97:5a:b8:7d:50:e5:52:f9:c0:9f:e7:c6:
32:69:6c:61:97:8f:f5:08:f3:6c:8f:44:d6:12:8e:
88:e1:38:86:19:98:9e:bc:e9:fd:52:a0:c7:c5:2b:
e0:ad:c4:70:99:19:13:b4:62:bb:34:ac:74:e3:87:
41:1e:6d:c2:9f:d6:70:1e:36:66:a0:ae:44:e3:88:
f6:5d:d5:0e:26:be:a1:01:03:33:8e:b5:70:0a:b6:
75:6f:6b:b1:30:61:7d:f0:e4:c0:70:05:dd:aa:b3:
5e:24:88:e5:25:d5:d7:23:58:b0:9f:e9:7f:f3:67:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:C7:62:A2:69:96:9F:17:A2:EF:9C:CC:9C:60:EA:4C:4B:AC:93
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:6b:71:57:6d:52:23:83:c4:8d:34:81:3e:9d:aa:8f:55:
03:82:97:1e:0b:0b:a8:43:2a:29:cd:26:fa:73:fb:9f:d7:77:
4e:60:d8:55:34:da:52:c4:4a:61:3a:ae:18:7c:d0:6d:72:8f:
36:1a:2f:15:dd:1c:e2:45:b5:04:e6:15:2c:8b:c8:77:36:bf:
3a:85:57:47:0a:fa:25:93:1d:91:36:9d:ae:f1:15:e9:90:7e:
af:c5:1a:fb:77:d7:64:2d:73:cb:d1:61:09:a0:80:1a:c1:fb:
08:18:df:0a:2a:76:fc:6f:36:f3:0e:a6:e8:4e:82:55:d1:2e:
19:e7:1f:b4:51:82:64:74:ce:e9:9e:c2:07:60:6b:d3:45:7a:
5b:7b:c7:b4:2e:45:56:0b:e2:2f:ca:cf:d6:ef:3a:33:3b:0d:
16:96:14:8b:bd:f9:e8:c5:25:a8:b9:c8:1d:d4:50:96:b8:08:
28:71:95:b4:30:f0:d6:76:ba:bd:25:76:f0:5d:29:cf:af:01:
f5:61:06:52:c8:e5:8f:9e:94:9b:39:e9:37:d1:90:fc:54:a2:
ed:b6:34:8b:e8:bd:66:98:dc:45:f9:8c:e1:38:52:59:7e:51:
95:be:29:dc:72:7f:c7:8e:08:b4:e5:40:de:28:cd:4d:92:5f:
cb:30:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:06:27 2026 by rpki-client