Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: bIKCuYrR/pkJCM00JhAZ0fpj7snFaK/7wlW3/TR6wQk=
Subject key identifier: B7:7B:76:C9:8F:4C:B5:08:6E:EA:78:A1:89:4B:BC:72:C3:98:A1:4C
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A151E3B17AE1509B629DD7B46DCC165DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1AAB
Signing time: Mon 19 Oct 2026 02:00:38 +0000
Manifest this update: Mon 19 Oct 2026 02:00:38 +0000
Manifest next update: Tue 20 Oct 2026 02:00:38 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: M9KkplozOOtjWqVALa+i/vpTt9kaRnN+NxiEubPn/io=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:b1:7a:e1:50:9b:62:9d:d7:b4:6d:cc:16:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Oct 19 02:00:38 2026 GMT
Not After : Oct 20 02:00:38 2026 GMT
Subject: CN=b77b76c98f4cb5086eea78a1894bbc72c398a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5b:64:ec:6f:30:91:91:f9:ad:82:22:7b:
1a:63:af:f5:40:9c:48:2e:df:56:ed:e5:e3:5b:02:
48:1a:25:66:c6:6b:e9:d6:06:2b:8a:5f:3a:48:3d:
3a:14:f5:36:0c:aa:6d:e2:cd:8d:78:25:8e:fd:d2:
b9:a3:54:ed:34:27:9e:92:23:8f:5c:ed:d1:40:d8:
b1:df:ed:a9:43:a1:96:e5:a2:cb:ba:06:76:04:73:
4a:f8:a7:78:1e:43:c2:ea:38:a3:fc:c2:1a:f5:19:
4f:f8:b0:f6:2a:a3:28:17:e3:c6:32:16:7f:e4:29:
29:77:39:57:52:bc:43:9f:b8:e0:07:0a:8a:54:03:
d8:34:36:72:e1:f4:04:fa:cc:d2:62:0e:03:c7:1d:
77:00:b5:69:9d:bb:f2:fb:36:10:ff:28:ee:7d:c2:
2c:51:f2:05:04:30:a4:3b:1d:73:5f:85:62:ff:aa:
7e:46:a6:24:b2:92:ca:e8:57:9e:71:d5:91:87:a7:
30:26:00:f5:57:43:b4:66:ca:cb:b2:f8:2c:e6:e8:
46:7f:49:25:4e:26:9c:23:0a:32:56:6c:89:8c:3e:
34:b0:0e:3f:2a:73:fe:e7:d0:3b:d8:bc:ce:a6:27:
26:ad:de:bf:ea:49:5f:08:20:5a:9f:97:db:c7:f3:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:76:C9:8F:4C:B5:08:6E:EA:78:A1:89:4B:BC:72:C3:98:A1:4C
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:12:5f:db:3a:37:ef:71:6c:f0:56:5b:0f:fe:c1:b5:44:
b2:9e:4d:76:5c:15:3c:6f:d1:ca:5a:d0:a7:b4:b3:9e:09:77:
ff:4d:83:4c:b6:09:ec:89:6f:b1:87:5e:b9:dc:91:67:71:fa:
ac:77:de:de:d6:c6:8e:d3:b0:1a:09:6d:80:78:5b:1a:03:62:
f7:9a:72:72:4d:4b:f1:ac:85:80:9a:c8:28:b2:d0:3f:10:90:
f7:12:3a:77:03:46:57:b4:72:3d:c5:6f:50:93:bc:ea:f1:15:
82:91:b3:56:29:6e:b7:e2:91:29:bf:a6:9b:ae:5d:a4:04:4f:
bd:0c:a1:2c:e7:51:61:84:e4:37:8a:4a:1a:9d:c6:a6:e7:b9:
f6:0f:3e:3c:60:b7:d2:34:81:74:5c:1d:07:b4:73:20:8a:f6:
07:0a:bc:69:4c:17:df:30:15:52:26:86:4d:e0:d9:3a:42:ff:
32:dd:67:6a:2c:19:92:32:05:f4:5b:3c:be:df:df:2b:c0:df:
2b:27:81:62:39:4a:d3:b8:61:5b:2f:fc:cd:d4:48:e6:d8:f4:
18:0e:3c:c3:9b:51:5e:b6:1a:07:2f:07:d7:49:8f:47:62:65:
2b:9e:71:24:10:1d:e2:a3:61:b0:8f:10:d1:06:2b:b0:8c:24:
7a:63:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:16 2026 by rpki-client