Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: vc+1Tpb+Tv07QI/W/WICaWji7QDw6obUmw+BXwG3MGQ=
Subject key identifier: 87:FE:11:7D:03:C7:72:E6:06:DA:DE:79:F4:CB:5A:50:55:04:5B:22
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019D992B1560C013F8AA0493D77BCB0B1AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 0963
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: Ds0Paib9l5axY1C/kAphg2TnDaKSOryUl0YnNwLWrMc=)
4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:15:60:c0:13:f8:aa:04:93:d7:7b:cb:0b:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=87fe117d03c772e606dade79f4cb5a5055045b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:0a:cd:47:49:a1:06:d8:84:dd:4b:c1:a4:
12:4f:6c:a0:52:f8:8f:b6:23:3c:bf:cf:aa:85:cf:
15:7b:69:32:3d:ea:31:35:f3:04:89:87:da:c3:01:
46:2c:ff:0c:0a:69:52:b1:67:f1:a8:19:22:6c:9e:
f9:ba:95:2f:ef:f5:0d:13:91:9e:85:6c:9b:b9:58:
fa:ef:f8:62:b3:64:d8:f4:eb:ce:ed:8a:13:5e:95:
86:5f:ed:44:71:d0:ff:8d:0d:88:a8:73:dd:10:07:
c6:a3:4c:f5:dc:06:1b:c9:80:18:d9:86:00:72:f4:
d6:56:a0:12:e7:9a:05:65:4d:12:76:b2:4d:35:b1:
93:31:89:11:ba:b8:de:e2:3f:9d:41:3f:b6:73:57:
6b:a6:55:57:da:85:11:9c:94:9f:cc:4e:d1:4e:c5:
0c:bd:ea:06:9c:54:ad:a7:c4:09:5e:e2:19:18:79:
93:51:1f:57:37:31:74:54:8c:e1:9e:7f:c9:44:aa:
7e:e4:0f:84:7e:6e:3f:09:d3:a3:c7:2b:4f:7e:65:
ae:b1:79:ae:c6:93:e6:f7:4e:29:d1:70:74:d2:ab:
56:0f:57:95:f5:bd:8f:76:a8:20:c9:2d:0c:70:11:
ac:1f:41:63:ba:8f:ff:64:6a:c9:ee:ef:71:07:ab:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:11:7D:03:C7:72:E6:06:DA:DE:79:F4:CB:5A:50:55:04:5B:22
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:ad:e1:a3:e9:ac:f7:5b:fa:5e:94:b9:b2:e8:f7:19:ae:
ee:55:39:91:67:ca:f6:1f:5e:5a:4c:21:6b:24:ae:c2:84:88:
66:22:6a:33:db:39:7f:9f:6a:e1:7d:14:00:8b:c2:d3:af:98:
04:36:cc:44:2a:3e:9e:29:0a:07:40:71:d4:ce:29:82:b5:53:
ef:8d:cc:58:51:af:59:75:29:9c:19:a8:24:b2:82:90:45:9d:
b2:27:77:b4:61:84:2c:be:30:da:09:ab:06:3c:35:7b:a6:79:
dc:8b:98:7d:9b:00:31:c2:1c:2c:38:e7:63:d4:94:59:ba:02:
e1:64:38:a1:64:db:b3:f4:a4:aa:9f:c3:1c:b3:78:8e:b8:7f:
57:d2:9a:6a:84:98:90:a8:46:34:dd:d8:7c:4a:ad:72:79:05:
05:a5:75:70:e6:f9:ab:0b:b0:50:dd:26:df:1c:d6:36:01:aa:
a1:d8:54:dd:56:28:d7:e8:fa:fb:ce:76:13:cd:1b:53:f4:e8:
6c:91:3f:13:a7:43:62:79:c3:89:df:74:9d:0f:ba:9c:44:4d:
da:cd:fc:fc:34:b3:db:22:9a:d8:f8:15:f4:8e:a7:33:8b:43:
37:96:e6:97:55:0d:d4:de:56:ce:e7:eb:43:68:c7:b0:07:46:
b3:85:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:40 2026 by rpki-client