Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: GqCmc0XV+UT9iHLo1N8Wl6ckBnlxGpI2J7FQiuksv1U=
Subject key identifier: C0:56:EA:35:5C:63:1D:CE:95:3E:00:AA:38:B7:09:58:33:D7:FE:61
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019EBF9137D8D0693E730C2D6CE96388359D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 0240
Signing time: Sat 13 Jun 2026 06:00:25 +0000
Manifest this update: Sat 13 Jun 2026 06:00:25 +0000
Manifest next update: Sun 14 Jun 2026 06:00:25 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: jQaIm5Wl+Ar/InfKI1XiIj4kA9klJs+cqVdmyXVk3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:37:d8:d0:69:3e:73:0c:2d:6c:e9:63:88:35:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Jun 13 06:00:25 2026 GMT
Not After : Jun 14 06:00:25 2026 GMT
Subject: CN=c056ea355c631dce953e00aa38b7095833d7fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:ae:f5:ed:01:ae:3b:99:f2:07:42:2b:0b:
90:0a:74:de:86:92:61:03:d5:7c:6a:ce:fb:42:b2:
8b:69:8c:8b:de:81:7b:28:b7:05:5f:ea:a7:ec:87:
c7:28:ed:d5:5b:23:f9:d1:9f:42:f6:14:a2:ea:82:
51:5d:c0:4f:3f:e3:50:22:a2:4e:8c:95:21:aa:05:
d7:4c:22:c6:66:a3:ad:7f:50:4d:5e:2f:47:d8:9c:
f6:15:11:60:e5:1d:bb:74:d8:7e:50:38:d2:ad:c5:
fe:16:64:7e:09:2c:85:1d:14:c9:f5:83:0d:16:57:
79:fd:bd:0c:3f:2c:6f:83:68:bf:d2:8d:78:32:1e:
7f:de:b3:4d:01:2e:e2:26:c1:40:4e:18:d6:28:ad:
52:a7:78:a5:f8:13:b6:f3:49:ed:1c:0d:83:04:e7:
57:a1:23:4f:a4:64:d7:8a:c3:b7:f5:12:63:66:a3:
60:9d:d5:31:d5:06:b9:7e:88:66:bb:36:cb:35:e6:
42:99:b6:15:c2:8a:ee:bf:12:66:26:ec:f8:d0:13:
27:02:05:c7:b6:fe:c7:e6:24:35:58:4a:ab:0d:16:
45:b8:de:46:f7:ad:8e:24:fc:46:86:8f:1c:eb:31:
0c:0d:b3:68:46:6e:4d:5b:29:3c:34:33:36:a7:bc:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:EA:35:5C:63:1D:CE:95:3E:00:AA:38:B7:09:58:33:D7:FE:61
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:63:b9:c8:18:03:08:02:1e:db:aa:ee:4b:33:6f:4b:70:23:
41:07:d9:6e:e0:99:75:34:80:5e:47:9f:b6:47:af:82:8e:15:
fd:c2:0f:ce:5e:fb:80:c7:5c:f2:7a:13:d2:6d:52:71:7b:42:
af:4d:46:aa:3e:65:c5:4a:ca:d5:03:c9:8c:2e:98:ab:e0:6b:
33:48:51:5a:b7:18:1c:68:6b:9a:3b:50:dd:e6:c7:61:d0:de:
f0:bd:73:53:53:f7:fc:29:c0:5e:70:83:35:6c:ea:00:b9:7b:
f7:45:03:03:f2:f8:d2:05:43:4a:46:8d:92:ad:fd:ab:3b:60:
54:53:3d:30:24:fb:ea:af:98:45:bd:a0:85:db:50:1c:d1:08:
93:80:9f:3a:95:1a:75:bc:6c:a6:c4:ef:45:81:37:df:55:75:
df:7b:6d:f1:aa:05:91:3e:f4:4d:37:69:89:55:7b:34:e3:ee:
c4:e0:93:1f:8a:ee:b4:45:98:e7:1d:12:9c:60:cc:29:80:cd:
d7:10:75:a6:bb:4e:11:0a:15:d7:b5:21:2a:b5:df:59:73:dc:
5e:67:ec:a2:b2:93:ba:64:0e:b9:8f:5e:35:30:7e:a0:e0:59:
84:f0:5d:81:8d:4e:57:86:3d:6d:2a:1d:c7:bf:3f:8f:f9:68:
dd:00:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:05 2026 by rpki-client