Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: w/FezTlhVeDLobLZayMwFxIglCx3RCK3wKPJ4o5tF2Q=
Subject key identifier: 5E:62:97:6D:CC:2D:49:14:F0:A7:26:E8:82:67:3D:44:DB:0E:1E:60
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019F8267D447697EB8E11E8C7CD37CBE0C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 19BB
Signing time: Tue 21 Jul 2026 02:01:10 +0000
Manifest this update: Tue 21 Jul 2026 02:01:10 +0000
Manifest next update: Wed 22 Jul 2026 02:01:10 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: hJ/Pm2qUlTHnhisEzNMbmchBayJgDiq41/2tTTklzaA=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:d4:47:69:7e:b8:e1:1e:8c:7c:d3:7c:be:0c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Jul 21 02:01:10 2026 GMT
Not After : Jul 22 02:01:10 2026 GMT
Subject: CN=5e62976dcc2d4914f0a726e882673d44db0e1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:2e:4c:ff:70:f6:0b:5d:f5:eb:d2:16:2d:
26:8a:b4:2a:07:48:63:3b:30:e1:fe:57:c1:0a:0e:
5c:1b:f8:2b:db:cc:22:8b:aa:46:32:93:a8:13:df:
66:52:34:9a:b3:07:cd:8f:ef:be:c2:49:34:79:9d:
62:b2:40:2f:be:cd:2f:58:3c:85:75:fb:26:09:0f:
c3:d7:40:2c:a8:b2:9f:2b:1f:96:82:51:6d:3e:91:
25:0c:e3:0c:8f:6f:5a:6d:0e:7a:9b:49:4a:22:7a:
fb:8d:ea:65:b2:59:1d:b7:7b:e2:96:63:cc:a4:6b:
da:b5:25:8b:13:c4:29:98:58:3d:38:e0:23:cd:b0:
92:56:ef:8f:05:76:05:b6:5e:a5:63:78:29:d1:14:
53:e8:45:b4:20:a1:5f:33:26:8f:68:54:af:8e:32:
3d:19:3e:ee:5b:f6:c3:90:9c:99:c8:6a:1c:0a:ed:
9d:ae:cb:c2:be:1c:e5:32:1e:08:5a:fd:5d:ed:ae:
49:d2:9f:35:aa:f8:b3:ef:b3:9c:fd:64:fa:be:cb:
8c:7e:c0:59:1b:50:6c:d9:00:cd:e7:72:75:c8:db:
55:4a:af:bc:ed:51:bc:71:16:f2:e9:bc:34:32:ac:
08:25:1f:4f:0b:ff:ff:a4:41:f9:28:22:a9:65:8b:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:97:6D:CC:2D:49:14:F0:A7:26:E8:82:67:3D:44:DB:0E:1E:60
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7e:2a:06:9e:4d:09:c2:01:f2:3f:8b:c8:66:22:63:8d:49:
3c:88:5f:8e:a7:ba:33:82:ce:29:dc:ce:23:ca:44:fc:ef:8c:
38:0b:8d:b3:2c:f7:24:0f:88:8c:9f:96:c5:42:ce:bf:b4:5c:
92:f2:1a:25:c7:3e:8e:a4:99:8b:c0:15:69:d0:ed:50:98:be:
f4:f4:18:14:22:c1:60:d3:e3:2a:80:71:ed:ac:6e:44:ab:30:
5e:b6:4c:0c:d9:88:6d:3f:7c:64:b8:98:08:70:a1:a2:01:34:
6e:15:9b:60:ff:17:a1:a8:0d:d2:da:71:48:c9:7a:26:61:53:
21:1f:71:df:97:72:07:ee:54:c6:84:71:dd:3e:df:4a:47:0d:
a7:53:9f:70:ca:64:ed:ef:52:44:a1:a4:f3:6b:47:f5:c6:ba:
f5:8b:d9:4a:c0:4d:6f:4b:7b:0e:2e:e4:f9:38:85:5d:0a:fa:
a4:13:fb:9e:e7:21:05:df:42:7b:5b:67:43:66:97:5a:76:42:
53:83:6f:50:64:43:bb:82:ee:4b:59:fc:5b:3a:0c:33:4d:1d:
c7:8b:0b:c4:f0:b3:21:6b:99:e6:38:92:92:50:b1:20:30:83:
da:fd:45:13:33:a4:ad:05:49:6c:b2:62:ba:0f:98:a3:74:9e:
8c:fc:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:01:07 2026 by rpki-client