Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: nAZ6FHyTu3j9D4b1Kc9mX7bh29jev5Sv3brxqHvHQH0=
Subject key identifier: 92:A1:9F:E2:9C:50:2A:BB:B3:94:33:56:EB:AA:5B:BB:80:E3:15:DE
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019D9BF587F895123D427E0524CBE9449C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 01A9
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: 1Jpc8zYzGR6Ylmmrdj2MG28xvH9RlBhrX4aGiY3oLbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:87:f8:95:12:3d:42:7e:05:24:cb:e9:44:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=92a19fe29c502abbb3943356ebaa5bbb80e315de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:6b:38:c9:be:43:cb:00:64:a9:c5:47:0e:
d8:dc:1a:09:98:25:7c:0b:92:98:32:64:57:28:1c:
67:59:22:18:d7:e6:ce:3e:04:59:0f:4a:ff:a0:36:
4d:95:30:9b:48:28:f3:76:2b:db:9b:bc:1e:1e:51:
96:0f:ec:f0:d2:19:bf:52:d1:69:37:7d:c8:41:bf:
72:a4:a2:6a:7b:b2:7b:16:1f:32:cd:90:8c:76:f8:
c8:9e:d6:23:a4:5e:d0:dc:94:1d:9e:02:86:6c:16:
cb:7d:44:7e:98:9f:71:8e:28:4e:fc:1f:90:44:c9:
32:77:3a:92:ae:39:ea:06:b2:98:50:96:fd:8b:f0:
78:ec:f5:32:2a:7a:89:2c:fd:09:e7:6b:61:ab:43:
f0:22:a4:7a:52:9f:14:36:0a:6a:dd:67:f8:4a:2f:
27:28:c3:ad:d2:30:95:c6:40:ac:03:5d:05:80:d0:
af:d1:59:20:2a:ea:2d:b4:d1:5d:05:16:b5:6a:fe:
93:e7:0b:d3:78:b8:1d:d2:27:d3:24:17:e7:95:c1:
a7:cc:18:f1:1b:f5:59:fa:33:f1:fa:86:5e:26:56:
69:c1:68:ca:a9:4a:33:06:2b:4f:5e:d4:22:64:a2:
ba:9c:dd:fc:49:b3:0d:64:64:8f:1a:ce:30:2e:c5:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:9F:E2:9C:50:2A:BB:B3:94:33:56:EB:AA:5B:BB:80:E3:15:DE
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6d:d7:13:ee:27:be:7c:b2:4c:bb:31:21:4f:17:3b:78:22:
b0:aa:3b:b7:6b:5f:e9:30:db:27:79:c9:66:94:b7:01:2d:73:
4e:f6:c8:f6:d3:11:8b:91:e0:f2:0f:f6:ee:1e:9f:f4:8f:7d:
94:ee:ff:5c:45:59:10:62:65:be:74:0a:3e:44:b2:ae:40:4e:
c1:78:3d:10:2b:15:16:fd:21:f6:ef:c4:c0:a7:28:9e:ae:e7:
48:67:27:4c:ae:91:6d:6e:90:76:8a:48:c7:ba:45:f4:b8:80:
3b:4d:89:27:b8:f5:ab:9e:a9:9e:98:02:08:2c:51:20:e3:e4:
af:d5:9a:43:96:a0:62:d9:0e:2d:8f:35:94:cb:f5:80:68:b4:
2e:46:45:a7:b1:fa:d2:40:c4:c8:17:57:c9:83:90:5d:c6:07:
d3:ac:92:ba:61:bc:05:2a:0d:66:5f:94:e9:a9:40:bb:3d:3d:
0d:f7:9b:4b:e4:db:70:67:89:53:e0:64:b2:eb:81:8c:dd:ce:
67:80:be:49:fc:25:76:f5:f3:30:b9:9a:e8:47:04:6a:02:67:
c0:08:7f:9e:07:7b:2e:98:8d:a8:e6:f4:35:70:d0:c4:31:d7:
61:bd:a4:9e:80:54:c4:10:d9:eb:d9:b2:83:96:e4:bb:8e:37:
cb:57:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:09 2026 by rpki-client