Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: t3zxtF7A5OW++N8nMtvS4a7ijLsId6RJgeVeImgWvZM=
Subject key identifier: E7:E3:A0:08:3E:81:55:BB:F2:3E:6E:9F:87:A6:58:F6:9C:DC:77:41
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A153D272959433A66971C0FA464184BF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1AAC
Signing time: Mon 19 Oct 2026 11:01:03 +0000
Manifest this update: Mon 19 Oct 2026 11:01:03 +0000
Manifest next update: Tue 20 Oct 2026 11:01:03 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: GZF5COlj2xXzTBraPDBtVv40RTDzaG1yi4eI8tbnay8=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d2:72:95:94:33:a6:69:71:c0:fa:46:41:84:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Oct 19 11:01:03 2026 GMT
Not After : Oct 20 11:01:03 2026 GMT
Subject: CN=e7e3a0083e8155bbf23e6e9f87a658f69cdc7741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:5b:4e:89:64:44:1c:12:b9:b5:bc:87:c7:
eb:ea:49:2f:6c:c4:e6:a6:f3:d5:55:61:c5:99:c1:
83:93:9f:7f:26:c2:05:1b:2c:86:cf:73:db:8e:90:
a5:b7:02:cd:50:d4:5d:8e:81:d0:e9:88:53:ce:d9:
01:88:87:41:c4:68:91:0e:f3:29:67:7b:c6:a4:03:
b4:d6:c4:b8:22:eb:e2:24:47:95:8f:47:d3:0f:55:
6d:27:67:6a:e7:6f:db:f0:f6:62:ef:d3:5e:88:e0:
cc:b5:5e:31:d6:cf:5d:2c:cc:3d:80:86:38:f8:0b:
e5:e6:93:4c:ab:a8:d7:89:ef:b0:60:d4:3e:06:ed:
89:c0:6a:e0:e3:6d:56:11:b6:ae:f3:1d:ed:45:dd:
9f:04:94:65:45:17:82:3f:aa:fa:36:56:04:0d:7b:
71:59:13:55:6a:c9:3d:0f:5a:76:c7:2b:1d:e9:58:
9a:6b:34:b2:b1:93:ce:7c:30:c6:cb:b8:61:f0:93:
c8:f2:f3:69:cc:e0:35:39:ce:32:c6:31:c2:08:43:
3e:da:81:62:40:36:ca:ec:56:c3:31:79:95:ad:c7:
f1:f4:ef:f4:31:ff:61:75:c4:f9:f8:86:19:13:04:
3a:e0:89:3c:73:b8:b3:48:d1:c7:0e:f0:79:f6:59:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:A0:08:3E:81:55:BB:F2:3E:6E:9F:87:A6:58:F6:9C:DC:77:41
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:0b:a6:26:09:3e:d8:17:c2:0c:1e:f9:89:d5:af:6e:1a:
36:14:dd:1d:9c:83:2b:d1:6f:80:2d:bd:86:dc:6b:43:86:1e:
11:e1:60:b5:79:9a:6b:96:cb:51:fe:78:e6:30:d8:d3:d5:7f:
d9:51:92:fe:dc:cb:47:7e:ad:8c:7a:08:50:2f:04:41:e4:1e:
0c:63:70:68:20:9f:b3:2c:92:be:f6:d2:a7:62:9c:c9:30:e7:
e1:a0:e7:ec:ed:d3:37:e4:2e:6c:5a:c0:74:35:04:eb:0f:e9:
86:c2:76:13:06:8f:43:2b:ce:f1:d9:47:41:6c:80:1e:7b:76:
2d:5c:4d:99:bf:4f:06:e0:24:60:de:73:aa:bd:c8:c5:de:bd:
87:f3:da:bc:7a:f5:d6:0b:37:b0:fd:69:ff:09:b2:c1:2d:03:
90:4f:4a:eb:80:ee:3c:d3:8e:5c:02:a3:7f:14:65:77:28:7c:
a9:2d:a0:1d:60:31:55:0c:e7:10:16:71:de:e4:55:32:ce:52:
b5:e6:b9:3e:87:c2:63:92:61:c8:48:6a:f4:74:4e:97:ce:ea:
b9:f8:c1:25:3e:3b:35:4a:56:c6:66:b6:22:80:a6:ef:18:91:
c7:23:11:66:be:bc:db:b7:e4:18:6d:40:e7:23:6e:89:5a:2a:
86:ce:95:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFT0nKVlDOmaXHA+kZBhL9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi
MDc5YTYwHhcNMjYxMDE5MTEwMTAzWhcNMjYxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EyhlN2UzYTAwODNlODE1NWJiZjIzZTZlOWY4N2E2NThmNjljZGM3NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs41bTolkRBwSubW8h8fr6kkvbMTm
pvPVVWHFmcGDk59/JsIFGyyGz3PbjpCltwLNUNRdjoHQ6YhTztkBiIdBxGiRDvMp
Z3vGpAO01sS4IuviJEeVj0fTD1VtJ2dq52/b8PZi79NeiODMtV4x1s9dLMw9gIY4
+Avl5pNMq6jXie+wYNQ+Bu2JwGrg421WEbau8x3tRd2fBJRlRReCP6r6NlYEDXtx
WRNVask9D1p2xysd6ViaazSysZPOfDDGy7hh8JPI8vNpzOA1Oc4yxjHCCEM+2oFi
QDbK7FbDMXmVrcfx9O/0Mf9hdcT5+IYZEwQ64Ik8c7izSNHHDvB59lk6cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfjoAg+gVW78j5un4emWPac3HdBMB8GA1UdIwQY
MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt
OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz
LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqkLpiYJ
PtgXwgwe+YnVr24aNhTdHZyDK9FvgC29htxrQ4YeEeFgtXmaa5bLUf545jDY09V/
2VGS/tzLR36tjHoIUC8EQeQeDGNwaCCfsyySvvbSp2KcyTDn4aDn7O3TN+QubFrA
dDUE6w/phsJ2EwaPQyvO8dlHQWyAHnt2LVxNmb9PBuAkYN5zqr3Ixd69h/PavHr1
1gs3sP1p/wmywS0DkE9K64DuPNOOXAKjfxRldyh8qS2gHWAxVQznEBZx3uRVMs5S
tea5PofCY5JhyEhq9HROl87qufjBJT47NUpWxma2IoCm7xiRxyMRZr6827fkGG1A
5yNuiVoqhs6VDA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 17:15:01 2026 by rpki-client