Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: wkj0Xk/k+ws+MO9dUsMSOouCknJOQG2Bc6cOKpTGsXE=
Subject key identifier: 7E:63:33:D2:99:AB:07:18:96:23:AE:14:64:42:40:35:14:51:EB:D6
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019CAC1041A4A7CF050C19663B1164FCD05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: GmR43HDxHHHQWeISFHiecL0flwv7/EBc/6Xc2In4T3o=)
2: OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa (hash: Gff4FAc0x1oRI71/96AW462cCchXrhxYJx69los4A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:41:a4:a7:cf:05:0c:19:66:3b:11:64:fc:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=7e6333d299ab07189623ae14644240351451ebd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:37:84:ae:c6:0c:9e:c0:03:60:ce:1b:ed:
8c:57:09:67:e3:f0:63:60:eb:aa:f0:8e:42:1e:0f:
70:81:f6:37:7f:ba:47:fd:e3:4d:03:61:1a:9f:55:
f4:1d:c0:ec:7b:23:97:b2:33:8c:7d:19:9b:3c:15:
7e:67:a0:e1:8a:d1:8d:1a:43:65:b0:5e:6c:e0:fb:
e9:cc:b1:37:61:76:db:d2:bd:f9:b1:b8:d3:bd:bd:
f9:21:ca:94:25:cc:87:3f:0e:07:d9:e0:ce:9d:48:
12:0c:d5:96:b7:0c:89:3a:14:5c:35:39:6f:8e:97:
32:2c:6c:9d:4f:c7:a6:35:09:49:5c:8b:40:50:46:
72:10:b4:27:fd:c9:19:47:97:01:91:b0:10:0e:ad:
7f:0a:df:06:0b:56:0b:0e:3d:40:c3:83:64:65:8b:
53:99:90:58:16:fb:23:72:9e:f0:b8:eb:4d:ed:ab:
13:5f:0d:bd:ff:9c:55:e8:75:6c:ac:4d:02:77:a1:
fd:af:bd:db:c6:38:c2:34:c4:39:19:36:76:db:11:
34:aa:e9:9b:3c:05:ad:9c:3d:17:d3:ee:70:b2:13:
ee:4d:ee:5b:7c:78:63:a3:5e:5f:87:e8:b4:81:b5:
17:43:d7:46:38:b2:4c:78:f4:05:dc:4f:a6:f8:2e:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:33:D2:99:AB:07:18:96:23:AE:14:64:42:40:35:14:51:EB:D6
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:38:20:80:2d:2c:72:af:e6:a4:09:0f:a3:a0:2a:8c:b8:12:
9e:bd:a6:ac:98:14:cc:5b:fa:88:aa:d8:68:aa:4a:e3:70:4c:
fa:58:f8:8c:5d:91:61:d9:3f:76:93:c1:be:66:dd:31:f9:eb:
fb:f3:f6:20:e7:87:d2:29:9d:f0:20:f2:82:38:2c:06:82:02:
4a:b0:1b:7e:04:6b:14:2e:30:10:df:8c:30:57:f7:3b:2f:c9:
72:28:44:58:5e:b0:51:8f:73:be:99:af:78:93:1e:3a:5e:cb:
d3:9a:13:d6:73:54:da:24:a9:48:a7:32:be:7f:17:3f:8a:28:
8d:92:8e:04:65:d6:53:28:71:08:92:41:11:09:f8:a0:45:38:
83:98:d8:b6:4c:b3:e2:e7:64:f7:b6:8b:e0:29:67:40:60:fe:
6e:5e:98:a1:9c:60:40:f8:85:df:43:49:9a:e6:e5:e1:b5:ab:
3d:53:6d:d9:11:92:27:3c:d3:0c:34:e4:e3:92:dd:8c:6b:ac:
ed:e4:8c:81:21:87:66:e2:25:2f:8d:a5:58:20:b8:48:57:a6:
be:be:73:b2:36:95:41:ac:08:da:c4:1c:10:22:b3:08:a2:cb:
d7:55:8e:9c:ac:0c:2b:aa:24:70:32:d6:34:f8:11:cf:90:44:
75:5f:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:51 2026 by rpki-client