Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: LV1EuJw3TryCQ+fY2S6iaiY9898OzWEk3+p6XilTSv0=
Subject key identifier: 8F:D4:0B:2A:6E:26:1F:00:C1:98:35:0A:3C:36:78:04:26:3D:66:FC
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019D38663DF8751B6D752D85466E9C358DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0AE1
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: ndbUBLC2YBCn4PUovffN0KmbUm1SvawsNqhk1w9iTqc=)
2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3d:f8:75:1b:6d:75:2d:85:46:6e:9c:35:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=8fd40b2a6e261f00c198350a3c367804263d66fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:80:f1:5c:7b:8d:dd:1e:5c:79:ed:a4:73:
13:e5:46:3c:4c:55:10:2e:56:63:49:91:f9:a4:18:
f4:c1:5c:08:88:fb:58:a3:80:9f:d6:8b:fd:38:1a:
48:3c:7b:bd:14:aa:b1:81:39:05:3f:a5:c2:78:3f:
38:87:cd:4a:c6:31:89:90:df:2e:e6:09:83:ee:f8:
c9:fb:a4:ea:c8:08:0c:87:19:ad:ee:3e:b2:bb:a0:
b2:9a:0f:01:79:c8:71:56:51:e7:1f:87:75:99:23:
ac:31:ad:13:9b:cb:01:98:53:6d:84:30:1d:83:fb:
31:13:38:32:33:80:6a:01:28:a7:58:fb:31:f0:a2:
53:97:b7:52:08:c2:78:44:d7:2d:fd:49:6a:a4:4d:
81:ca:2b:55:43:0e:36:ce:6d:e4:d7:fe:b1:cc:f8:
f3:c2:f3:a6:bd:bd:95:d7:61:13:d2:0a:0c:98:b9:
2d:a1:fc:c7:09:87:ca:c7:82:9e:8c:45:50:d9:8e:
63:bf:df:4c:b3:69:9e:04:a1:92:2b:be:ad:eb:63:
d1:6d:a7:a8:21:d5:07:98:78:a4:a1:40:c3:2a:56:
ae:60:59:f3:5d:74:0d:f5:20:69:d9:87:42:33:03:
33:3c:d8:de:fd:1a:5a:22:7c:21:fb:52:87:0a:ac:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:0B:2A:6E:26:1F:00:C1:98:35:0A:3C:36:78:04:26:3D:66:FC
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:8e:3f:ce:bf:3b:49:52:7c:13:d4:e9:13:0c:5a:ee:db:
0e:1a:11:1d:27:4a:75:2a:01:6c:78:6a:b3:97:91:45:aa:cf:
e6:3d:b7:d7:5a:cb:eb:46:6f:f6:ed:4e:10:f1:9a:27:df:9b:
bb:54:74:53:35:81:32:87:69:df:87:91:a7:5b:a8:63:79:5d:
e3:f7:2a:0d:ad:6a:ef:ff:3e:0d:2b:2a:0c:2d:9c:01:aa:d7:
1f:9f:eb:42:37:49:c4:cc:50:22:d7:53:60:ec:b4:b8:fa:cf:
0f:50:f0:86:3f:01:ea:2a:c7:4e:31:0e:4b:34:14:34:ed:7d:
a8:e6:07:79:8b:fd:89:29:f2:dd:de:33:33:a8:4d:12:2d:de:
2d:4a:70:ab:cf:1f:5e:b8:34:95:c1:58:bf:56:8d:13:70:f2:
1d:92:ac:28:bc:82:c1:5a:55:7f:65:78:65:2c:58:5e:25:4e:
25:b2:f3:2a:77:a4:05:3c:4a:72:f2:5f:ff:b7:e5:42:eb:db:
23:57:99:48:c9:a9:ea:2d:1c:18:60:8c:a3:2c:4e:17:2f:22:
c5:6b:7d:18:39:d7:90:69:8d:51:f2:70:1b:14:73:9c:31:18:
c2:29:7c:7a:b4:a0:6d:cd:f6:10:fb:b4:0d:76:c0:81:fb:d0:
b8:28:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:07 2026 by rpki-client