Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: GLQYUm0OMWr2XhFgKfl9xqI/tmzEUk7XiqK9FAarn48=
Subject key identifier: 8F:24:BE:F6:9C:EA:7B:F6:D6:83:D4:93:3A:98:78:1E:A8:8F:C3:C1
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019FAB2CB80A95D7E4C2B7DF67A340E93FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 02BA
Signing time: Wed 29 Jul 2026 00:01:02 +0000
Manifest this update: Wed 29 Jul 2026 00:01:02 +0000
Manifest next update: Thu 30 Jul 2026 00:01:02 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: WOW6yHVycqt/tEyRUHarZokZH+WRKvJ5xrLf59fbFkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b8:0a:95:d7:e4:c2:b7:df:67:a3:40:e9:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Jul 29 00:01:02 2026 GMT
Not After : Jul 30 00:01:02 2026 GMT
Subject: CN=8f24bef69cea7bf6d683d4933a98781ea88fc3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:07:52:1b:e4:02:58:f8:85:66:02:44:e5:
5e:7f:7c:ad:87:30:43:d1:50:2e:47:e7:c6:2e:0d:
83:43:f4:9c:03:8d:c4:a0:84:25:7e:d2:00:4f:91:
d7:c3:72:99:7d:1a:05:cd:ee:5d:42:85:22:d6:67:
61:48:a7:e8:21:77:f0:b7:a2:64:51:25:28:46:84:
a0:70:d0:91:8e:41:92:b1:b4:66:9f:3b:38:14:af:
87:89:53:9d:55:55:39:4c:75:27:a8:ad:37:b9:09:
8f:54:f8:c3:36:d5:1c:51:1f:34:48:7e:95:1a:9e:
03:b5:be:0c:10:be:45:8c:05:a3:67:14:ac:1a:d5:
d0:c0:9c:64:ef:a5:44:f6:a6:d9:5b:62:00:6b:99:
20:16:55:7f:04:06:d9:c3:8b:47:4a:61:82:cf:8a:
79:10:64:8b:05:4c:fa:a2:88:06:24:a8:4c:30:da:
3e:b4:2d:5a:27:00:ec:a8:00:4e:f4:7a:81:de:3b:
79:ae:bb:b1:3b:02:61:74:3c:98:2d:f1:1b:73:2f:
73:60:fe:8a:24:97:7c:3b:4b:cc:2c:5c:6f:b2:b0:
8d:e1:55:bb:76:8a:c6:cc:07:13:02:19:79:7b:a4:
e4:ed:fa:9e:4e:c7:bc:7d:69:11:b3:84:72:5d:1f:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:BE:F6:9C:EA:7B:F6:D6:83:D4:93:3A:98:78:1E:A8:8F:C3:C1
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:25:ac:92:e5:f2:e8:d3:8e:af:fe:42:03:4e:de:14:74:
09:57:bf:f8:cc:3c:67:c2:4f:bf:cc:d2:a3:f6:4a:1e:e0:e6:
ea:65:32:4e:93:c5:1f:35:12:f7:96:12:fa:a8:ed:a6:fe:c9:
54:a4:d4:91:fd:4f:81:85:d6:cf:92:cc:37:e7:b4:25:93:47:
20:64:5f:9b:4f:f4:05:f4:1f:cf:a8:15:d5:c5:33:2d:2c:0e:
49:bf:43:25:fb:df:fa:44:a0:d5:b6:f4:90:86:11:9c:7f:6e:
84:a1:72:6a:ef:13:2e:15:00:aa:a6:18:c2:24:04:14:30:02:
3c:7f:50:4c:02:f8:be:93:23:56:fe:48:2b:2a:e6:db:68:31:
5d:cc:5e:8e:2a:86:ab:e6:f7:e8:e1:53:ac:1f:3f:cf:a5:88:
4d:c8:08:a7:3e:c9:0b:8c:54:3e:8e:2f:96:49:e7:c5:8b:06:
09:de:74:4a:94:e5:2d:60:eb:21:3a:2e:59:bc:58:01:f6:84:
0d:b5:26:b3:63:ac:78:3c:44:54:6a:89:d1:84:b9:b0:5c:24:
95:d3:6d:e2:8b:14:c2:2c:26:8a:fd:d2:11:c8:c7:56:8a:06:
a6:91:e9:0e:ee:a6:75:13:87:21:cd:4a:ef:11:c3:cd:1e:b3:
ab:28:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:30 2026 by rpki-client