Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier: NYERxba6chXjA94QkDVwvJhHLgDr+Lqy0dHcwZeiRts=
Subject key identifier: FF:9C:37:99:65:C5:10:70:FD:22:4A:B9:1F:19:E7:BB:D4:AD:F0:2A
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 019CAAFD6FDB4A28D0FAA5950E0666459D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number: 0FFB
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: 4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa (hash: M2LCXYLEX3b9grh9Bx0Bx9T8hoNsI8LqiGlWoxzR18A=)
2: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: oyQH4t4xaWe0qV+Yfuma4cFbdxfRU4ZuC4HRX1ejHKc=)
3: UHhYBwfJii3naOaGRuZDntzyEGc.roa (hash: v1Wwj+whEEtDL3RaA1XzQqeJUUXbVn0Gf3wev1XGAMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6f:db:4a:28:d0:fa:a5:95:0e:06:66:45:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=ff9c379965c51070fd224ab91f19e7bbd4adf02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:5c:8d:8d:71:62:5c:a5:89:f3:76:9f:1e:
f4:6d:0d:a3:cf:94:da:2c:37:82:31:24:93:f5:cd:
22:de:12:5b:18:21:1b:1e:9b:b8:8a:5c:37:9b:81:
35:8f:3f:f3:93:9d:3b:ae:4e:5d:2b:29:4b:5d:c0:
78:b1:59:64:b1:11:16:2d:6d:19:3f:60:fd:57:6a:
a7:e1:65:87:0d:bd:3d:ac:20:0f:8d:52:71:ea:74:
a9:bc:e6:9a:8f:19:e2:75:73:07:8c:58:00:24:ec:
fe:12:ad:59:f3:a1:ba:e8:0a:d0:6e:42:f5:fa:cb:
de:d2:12:48:de:2f:2a:f2:9a:5f:26:7a:82:7c:58:
42:f9:c5:3e:f1:b7:be:39:f3:41:77:7b:d0:b9:9f:
8c:cc:51:74:40:c4:66:a6:79:21:79:a0:7e:be:e9:
df:ae:71:97:0f:02:43:41:0b:cf:8b:ae:d8:9b:b3:
ff:ef:20:1b:68:64:2c:c7:4d:2d:19:0e:f6:c5:0f:
c2:25:fa:3a:2c:01:68:7f:cc:73:51:cd:1c:74:59:
eb:81:6b:80:69:6d:e0:c3:3f:2a:20:34:5b:21:68:
32:dc:24:97:1c:d7:23:58:4a:78:ee:fa:12:9e:53:
17:cf:3a:0d:37:b1:bf:21:c6:79:09:48:5d:98:39:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:37:99:65:C5:10:70:FD:22:4A:B9:1F:19:E7:BB:D4:AD:F0:2A
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5c:57:85:b7:b8:b7:77:d5:17:b3:b2:9c:d7:a9:dd:b0:28:
83:be:4f:16:45:10:1f:90:63:db:45:50:d0:c3:7c:c3:e3:36:
b1:06:1d:4c:e6:2f:35:1c:76:72:a8:af:30:23:fa:af:d8:2c:
68:54:c5:bb:77:33:3f:2c:e5:8f:fb:68:ce:34:60:f6:00:a3:
9b:d7:02:75:c3:d2:36:a6:8d:3a:51:52:09:19:8d:c7:4a:f0:
f6:57:9e:41:e4:6b:2d:57:e8:e0:08:6e:ae:a3:4d:87:85:c7:
61:b1:eb:b7:b8:08:9c:9e:43:62:c9:d6:ca:14:8c:3b:e6:d2:
36:a1:d0:aa:17:79:57:21:3d:6a:42:b0:5a:52:24:05:5a:8a:
5f:8a:d6:84:70:21:95:cc:fa:56:7a:f3:98:db:b5:53:c2:47:
6a:b0:70:ed:cf:0e:87:52:9d:ca:ff:7a:b1:24:46:3d:0f:c3:
63:49:01:7d:f9:c6:62:28:61:aa:b1:66:03:23:6a:d9:af:0b:
92:0d:a8:f1:27:76:ea:92:c6:1a:b5:7b:1e:b3:6b:e3:31:af:
ce:8c:48:e5:03:6b:82:b2:12:57:aa:4e:e2:4d:0f:20:95:9c:
b2:f5:58:ab:d3:99:85:ad:8c:1c:e4:ae:a0:25:d3:b2:21:7d:
f6:65:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:28 2026 by rpki-client