Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: iY4xRSQGsIs0ABFZRlz2Bn49CG89uUXYmSNEz1jwmE4=
Subject key identifier: DA:07:03:5F:AD:BD:04:E5:F2:1C:C4:FA:F4:33:37:4B:CD:6D:94:C1
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019FF7FEBB46D8C019EE3C9C8733AB264F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 1215
Signing time: Wed 12 Aug 2026 22:01:34 +0000
Manifest this update: Wed 12 Aug 2026 22:01:34 +0000
Manifest next update: Thu 13 Aug 2026 22:01:34 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: zS4SrRA4qzJ/k43e8AaKFGVLuPOPpaYPAhPekvscJ1U=)
2: VI1Pdat37Jv7tPxYGIsry5LOD7w.roa (hash: ZvnfeGRZ4e6seCSPIniU9Klu2LcfEkoX8a9oOIfdFRk=)
3: ca2_ka3kebG4xHwE6CZSEy0WpnA.asa (hash: nEWMHuIMfgnCR89CtrdeQhiYg+87GPGGAfi7uNBVLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:bb:46:d8:c0:19:ee:3c:9c:87:33:ab:26:4f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Aug 12 22:01:34 2026 GMT
Not After : Aug 13 22:01:34 2026 GMT
Subject: CN=da07035fadbd04e5f21cc4faf433374bcd6d94c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:c4:3b:79:34:0e:8f:49:52:a8:0f:0b:99:
e2:01:6d:0e:34:1a:32:39:08:86:72:07:97:02:b6:
22:3e:20:ed:35:29:7f:b2:27:8b:89:66:c6:d2:a9:
b6:bf:c1:bf:ee:4b:8f:cf:7d:60:6a:3a:21:fa:00:
3e:04:a8:d0:6d:19:ca:b9:68:57:13:60:58:42:c2:
33:d6:44:4f:d2:62:5d:ec:61:22:06:f5:58:e1:74:
62:74:3f:01:2e:1c:44:8f:31:f5:fb:a6:27:a6:df:
84:bc:3c:8e:da:51:16:8a:1e:ca:f2:e4:ad:ac:45:
73:68:cc:e2:24:4f:ed:7d:79:2e:ea:89:f0:85:c2:
4d:a1:e7:8e:e7:dc:bd:eb:92:c9:14:6e:94:24:dd:
b3:4f:fe:d9:b2:3f:9c:af:94:48:8c:d1:9a:f9:d4:
b5:f6:c2:88:19:2e:70:ca:e0:15:26:0f:95:ef:04:
9a:1d:db:38:ed:c9:65:88:ed:54:eb:6d:38:a9:13:
6c:1e:0a:44:f2:f5:34:e1:05:2f:d4:90:16:c3:59:
c0:2d:94:8d:f5:b8:83:f5:89:25:ed:b1:18:df:0b:
da:c6:50:07:4d:4b:9f:a8:db:63:98:12:cb:c4:7f:
4b:64:4c:f8:13:3d:3d:f3:8b:98:36:8b:ed:04:62:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:03:5F:AD:BD:04:E5:F2:1C:C4:FA:F4:33:37:4B:CD:6D:94:C1
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:87:c1:b5:e8:45:5c:75:24:9b:8a:f8:ea:a7:6d:e9:ed:8e:
40:6e:63:f8:cd:3d:88:15:fb:df:92:2f:22:87:6f:56:00:06:
25:47:e4:6b:ea:29:69:57:aa:f0:cb:c1:78:0f:bc:6e:76:c3:
c9:6f:ae:58:10:9f:3f:12:c4:36:56:60:93:4e:ec:e2:2d:da:
12:89:22:e1:db:d0:37:df:99:9c:f6:34:b4:cc:85:da:18:80:
f4:13:29:f5:5b:47:c6:3f:aa:ba:99:96:4d:95:29:90:f4:7e:
ab:a6:46:65:92:2c:37:94:bf:40:c7:74:01:1b:2d:54:22:4f:
45:c7:3e:d2:39:7a:49:84:2d:b7:af:2d:36:0e:fe:bd:41:ef:
13:6d:5a:f1:fe:dd:bd:c7:c0:ee:94:1f:76:14:b0:67:88:7a:
19:9b:44:ad:93:99:8e:00:57:f4:83:3b:98:69:29:57:9c:67:
60:cb:43:a1:53:67:82:2a:34:27:d3:cd:4f:fc:14:7d:f6:f2:
1f:3e:50:4a:50:ca:c7:b2:f8:3a:b1:2b:ac:f4:bc:ba:82:c7:
2d:42:5c:89:61:cb:c4:55:32:ea:99:c2:d8:b3:8a:24:9d:0d:
95:6e:2d:46:b3:b6:fe:99:92:4a:4e:67:14:4b:64:bd:54:35:
4d:c5:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:28 2026 by rpki-client