Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: n+L4zcLMjZ6sWrjoifX2aLnZ2ixubPst0M2p6T9gNwo=
Subject key identifier: 10:D2:6E:3B:02:09:06:66:09:09:23:25:98:69:A1:B4:0E:3A:4B:88
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 019D3909D30EDA32C75EF598D1A2EC1A68EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: hLqad+SyG5sHF2wYVSzUIr2gy/+xU7ybiQHhsyyI8sM=)
2: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (hash: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag=)
3: auEpgiPIX3h008e7_hstjhVeKb8.roa (hash: AEMD5xTfuBQMPnNdbcNGPYKM0fV1Wstpq65O+O7gGKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:0e:da:32:c7:5e:f5:98:d1:a2:ec:1a:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=10d26e3b02090666090923259869a1b40e3a4b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:4c:74:9c:93:ee:c0:77:ea:42:8f:fe:21:
d8:fb:a5:95:c7:9d:6c:14:b6:a4:95:1c:c1:a6:c2:
20:18:d5:33:80:c7:3a:6f:5d:43:96:cd:5e:31:48:
69:19:18:7c:c0:12:47:00:36:cc:ce:0f:09:2f:0b:
cf:50:25:66:82:47:9a:85:af:35:3d:1a:c8:ca:76:
e6:19:8e:d9:84:7b:34:9d:57:09:25:b1:3a:55:f7:
19:d6:6e:8f:c8:18:93:14:27:ba:00:ce:e2:4e:73:
9f:13:bb:0d:3c:07:b9:25:d4:ef:77:4a:53:e4:51:
87:fb:a0:94:ed:48:6a:60:ba:58:1d:50:d3:00:f2:
f4:e2:c4:04:71:7f:3b:31:df:0b:4a:30:11:2d:23:
f9:7b:46:87:e1:d5:df:dd:27:af:f1:24:f3:43:ba:
25:d4:2c:a4:58:64:90:53:e6:db:7e:57:e2:32:42:
80:aa:8d:91:c0:4c:8a:63:6a:5b:fc:5d:9e:6f:6b:
21:e9:a3:67:ec:ad:ff:7e:99:8a:33:25:51:f7:a7:
d3:bc:e7:71:93:af:6d:5d:94:8b:f6:52:8a:21:09:
69:2c:55:3d:db:9b:0a:d7:f9:02:f1:04:98:b3:28:
15:a3:66:a8:5e:f2:2a:23:5a:6b:bb:91:e7:59:55:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:6E:3B:02:09:06:66:09:09:23:25:98:69:A1:B4:0E:3A:4B:88
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:31:58:58:d5:9a:a1:91:7c:3d:01:af:aa:a9:23:0e:1d:
9c:e5:74:f2:9c:4c:a2:6e:5e:19:45:f3:fd:52:d0:bb:6f:d8:
99:41:62:42:c8:83:64:30:00:18:f4:04:1c:ba:fc:08:29:4f:
94:85:3d:d2:c2:86:fc:e0:35:19:b8:ac:89:d5:ef:33:cd:61:
8a:36:e9:4d:f4:c4:a6:f1:3c:f9:ec:19:ec:09:f8:38:63:00:
c1:aa:db:c1:2d:ad:dd:6f:02:85:ae:73:1b:96:5c:0e:6a:88:
d9:82:45:91:dc:e4:a1:59:d3:60:ec:dd:f1:8e:24:bd:f9:b9:
54:16:21:5e:cb:09:88:4a:8f:4f:29:75:2c:60:56:79:4c:73:
4a:76:e3:61:e0:e3:b3:92:2d:b7:35:a3:a1:7f:d8:d1:5a:69:
01:09:34:cc:c0:33:0d:00:ec:9d:af:37:a5:9f:d1:f8:97:ef:
e0:49:be:ba:38:c9:2e:a3:c7:04:aa:7d:b7:9d:a1:b4:65:63:
5f:0a:73:b6:bf:5b:a0:f9:1a:7b:93:df:68:b8:a2:d6:76:28:
cd:14:72:28:05:d9:87:7d:27:d1:97:f8:92:a3:62:72:bf:7d:
ff:64:b6:df:ba:0b:fe:25:cc:14:db:db:5a:2b:e8:ec:96:d4:
46:03:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:57 2026 by rpki-client