Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: H0RkzhuPMLpc+EatP4L44pOylSV5f5RAHl13cQJ2kwU=
Subject key identifier: 66:8F:91:87:26:B6:B4:9D:10:CC:D5:E3:BC:4E:4E:AC:F2:48:0E:DE
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019CABA20B7FFC19DF4CB6FE4E185FD18CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 08F1
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: HoZ4okyAPiqWiHcQ4xMQdt6XooQrQ/7f84dyQ344yKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0b:7f:fc:19:df:4c:b6:fe:4e:18:5f:d1:8c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=668f918726b6b49d10ccd5e3bc4e4eacf2480ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:52:1b:63:02:e5:c4:b7:d3:65:15:3c:1f:
15:76:9b:2e:10:d2:10:1c:a9:57:fe:11:91:39:65:
83:6e:85:1a:86:1e:6f:03:81:22:41:4d:08:0d:a5:
57:69:f4:79:c0:1a:54:f4:91:9a:22:11:d5:4e:df:
91:b8:58:9d:05:83:4d:00:d6:fb:ce:36:f1:ba:65:
5c:2e:c4:8a:8a:9f:57:bf:2b:ec:2c:ab:f2:d4:d0:
d3:41:99:43:0c:a8:5d:39:6f:99:23:0e:2e:0c:29:
a6:97:fe:71:69:4d:53:3a:a7:65:79:12:4c:65:f4:
e0:5c:a3:c3:37:a0:73:50:af:29:bf:8a:24:cd:20:
14:81:50:2d:dd:f6:ea:80:ff:46:3c:55:d4:50:71:
68:86:d6:27:2f:72:35:ec:c4:a8:a5:a1:72:d8:39:
c0:20:21:73:dd:2c:11:70:f6:26:8a:a8:e2:6d:c3:
53:a6:12:be:a1:d8:ca:af:06:b3:32:9b:fa:72:29:
e9:c9:2b:3d:37:9d:d6:d8:1a:3e:69:4d:ce:fa:33:
4e:4a:79:69:a2:b1:a1:5d:58:42:8b:30:7b:be:3b:
af:60:37:15:39:3f:e7:f7:47:43:7d:41:1b:36:d2:
a9:bc:a6:ff:c7:56:04:ba:5a:f0:f5:39:be:b6:b8:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:91:87:26:B6:B4:9D:10:CC:D5:E3:BC:4E:4E:AC:F2:48:0E:DE
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ce:7a:63:51:4b:e5:f5:e8:a1:3a:a9:5f:5c:d6:f7:fb:8e:
a5:c2:00:6f:64:ac:61:ba:51:a6:41:92:1e:50:64:3c:2c:63:
02:ac:96:94:79:c1:73:2c:46:ce:7e:66:75:3a:c0:82:a7:80:
b5:da:e4:37:6c:e9:bf:55:6d:a8:07:41:c2:73:ea:0a:7f:68:
54:63:12:17:d1:0e:63:0c:7f:46:83:e7:98:84:e3:7f:2a:12:
64:07:51:80:00:27:41:ff:ce:b6:ea:4d:59:ac:a7:bb:8b:e0:
88:2d:e1:28:25:87:32:d1:ea:66:fa:bd:ba:1c:2a:0f:db:81:
b3:a9:eb:e0:47:7e:a8:53:00:e8:f7:f6:3e:dc:66:03:9f:ad:
4a:d5:38:db:a1:92:19:3b:f8:8f:2e:31:8d:8c:99:b7:5e:9b:
4a:fa:0a:14:09:6e:0c:f3:14:39:eb:00:67:a1:22:b3:41:2b:
6e:a8:bb:38:0b:d7:87:ee:58:af:f1:e9:47:20:fd:b5:91:07:
1f:bc:bb:74:6b:3b:18:5e:76:32:f8:3c:6b:c4:64:f0:19:cb:
80:b0:ca:b5:a7:04:b8:a5:12:b0:15:3d:a5:71:86:26:8d:94:
1b:38:c8:cc:04:81:fa:63:a3:c2:0e:f3:77:a0:de:d7:43:4a:
88:2d:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:42 2026 by rpki-client