Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: TIhyUWgJnzZtQKzxjvC1DbIYZyZbOXA0CB8AkRKo6Jk=
Subject key identifier: 43:77:07:43:CC:05:10:8D:AC:30:8F:9E:45:03:38:44:EA:70:E2:5A
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019CAC7E48C43B1FE173F202416D2930F85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 012D
Signing time: Mon 02 Mar 2026 03:01:23 +0000
Manifest this update: Mon 02 Mar 2026 03:01:23 +0000
Manifest next update: Tue 03 Mar 2026 03:01:23 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: oSv/186C8eIyd6ImUrJXU9CcjemD1KEw7YncunM3aDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:48:c4:3b:1f:e1:73:f2:02:41:6d:29:30:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Mar 2 03:01:23 2026 GMT
Not After : Mar 3 03:01:23 2026 GMT
Subject: CN=43770743cc05108dac308f9e45033844ea70e25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:40:d5:41:70:41:fb:72:46:9b:33:dc:83:
c2:4e:05:fb:2d:d3:04:bd:de:76:0c:51:ea:64:7f:
6e:83:57:84:f9:d5:e9:95:d4:6d:96:92:2c:00:8d:
45:8e:51:ad:82:ad:91:ea:3a:0a:48:eb:e9:ce:40:
92:6a:34:0e:8b:3a:db:94:05:d4:29:73:2b:b0:0f:
ba:c6:6d:c6:99:59:60:59:49:f5:66:1e:87:a9:eb:
94:5a:77:3a:88:9b:d6:67:13:82:d8:52:74:c1:74:
c7:95:9d:a0:7a:3f:91:0e:d5:4a:3c:45:b0:ec:0d:
28:5c:8d:54:97:a4:c8:26:b6:7c:f8:bc:bc:e7:57:
e3:4e:d2:e7:3e:6b:de:48:54:25:b8:4a:02:06:fa:
f3:42:26:14:5c:91:7a:53:a8:3d:a5:66:03:6b:ae:
9e:b1:7e:32:0c:31:25:66:c6:ea:bf:5e:34:e1:b5:
4d:24:8e:a0:00:be:45:45:f5:59:89:95:6e:40:e1:
b5:28:e5:d5:c3:a5:9e:c8:e1:f0:22:92:3b:b2:62:
d3:c9:42:70:fd:79:90:32:62:09:d4:c6:49:7b:dc:
3a:11:19:14:6f:0c:08:6d:52:36:5d:78:13:99:46:
24:52:38:a8:d2:d2:f8:59:dc:f3:0c:64:4e:d8:c1:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:07:43:CC:05:10:8D:AC:30:8F:9E:45:03:38:44:EA:70:E2:5A
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e3:8e:b4:5f:e2:9f:b7:17:c3:97:50:48:de:9e:57:a7:8c:
89:26:cd:4e:c7:24:ad:d1:1d:02:35:7c:9f:2b:f2:ce:5c:8e:
5f:47:1c:17:e7:78:a6:33:25:84:eb:26:c0:11:84:c1:69:29:
62:d5:ff:d8:ed:97:c8:3e:88:3c:44:8c:a4:5f:ab:9a:fc:5e:
af:b9:c9:17:71:32:10:b3:d3:c6:31:4e:d0:22:85:19:d3:9c:
1f:c5:f2:67:9f:ea:69:06:49:3f:db:ac:91:0d:8c:e0:87:30:
e4:bd:bc:46:36:17:c6:58:f6:bb:35:35:85:80:fb:1b:ae:61:
76:48:71:06:ad:37:2c:bf:ad:e1:60:9b:ba:88:3a:b3:23:0c:
3a:95:5b:4f:ad:ff:f2:2d:bb:8b:97:2f:7e:6e:4d:41:2f:15:
6d:ed:36:11:65:57:36:02:09:3c:08:a2:c2:02:0f:7b:eb:98:
51:7e:20:d4:7d:26:c4:d3:49:45:36:04:f4:75:8b:bd:c8:5e:
3d:2f:d4:44:53:46:1f:3c:2c:38:07:cf:bf:0b:a4:80:b4:bb:
be:c2:72:64:e6:a7:a0:d3:2d:8d:5b:62:de:3f:78:a7:4d:7a:
33:f9:a7:6e:3b:6a:e9:1b:94:f4:e1:e1:99:1c:3b:63:49:3b:
20:3c:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:26 2026 by rpki-client