Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: aQ/rqWWnO0IqBgwJSJB4l1JiRis2Va47BDylarJAexo=
Subject key identifier: 28:09:A9:A4:37:DA:02:1C:FB:FB:C1:30:62:6D:46:AD:85:D4:35:50
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A0BD2FE85FAC629695750BCFD0F0A8FB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1A5E
Signing time: Sun 20 Sep 2026 05:00:28 +0000
Manifest this update: Sun 20 Sep 2026 05:00:28 +0000
Manifest next update: Mon 21 Sep 2026 05:00:28 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: n0x619uIF6aGPH3z0H1O+VSWzlNi/oKEOgALMI+0N7Y=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:e8:5f:ac:62:96:95:75:0b:cf:d0:f0:a8:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Sep 20 05:00:28 2026 GMT
Not After : Sep 21 05:00:28 2026 GMT
Subject: CN=2809a9a437da021cfbfbc130626d46ad85d43550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:40:09:49:f2:eb:e6:10:ae:7a:65:8d:4f:
02:6d:90:ba:5f:4b:a3:58:5a:99:29:b2:45:73:2f:
d7:43:c4:71:4c:0d:2f:29:f0:e3:01:50:53:39:7b:
93:30:03:e5:00:9e:67:41:77:bf:07:c4:17:83:3f:
1e:84:6a:93:c4:4d:b6:f4:26:94:3a:32:71:d8:0a:
3f:dd:1e:ae:4b:7a:69:4a:7f:fd:e8:3b:e7:7e:bb:
2b:31:a5:de:6d:b4:5b:65:c4:bd:a3:90:d0:7d:a2:
2f:c3:78:15:4e:75:9f:4f:e1:41:f5:04:25:28:a7:
7c:bd:aa:71:55:3c:2a:ca:da:3c:6c:a4:ab:f9:f3:
5a:87:ec:a3:97:b7:3a:67:f8:54:fe:02:d7:0a:5e:
28:95:3e:5c:13:9c:79:68:91:69:e6:78:a8:55:22:
f8:62:6d:66:3d:0d:1a:fe:f5:65:52:13:67:c1:88:
59:5d:c0:7d:ea:5f:e8:bf:fe:d1:09:fc:c4:c2:7c:
47:51:34:7b:f8:0b:cf:7b:15:c0:1c:f6:04:d8:31:
47:12:8c:70:30:2b:f2:2b:9c:97:92:ad:f9:c4:2b:
eb:88:b7:08:dc:a9:65:fd:89:f0:5c:a7:fe:57:ce:
eb:e5:56:b7:34:88:48:70:e3:ea:29:d4:46:8a:d9:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:A9:A4:37:DA:02:1C:FB:FB:C1:30:62:6D:46:AD:85:D4:35:50
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:7e:89:79:dd:05:5d:68:f8:e0:61:af:95:eb:f6:7d:14:
5e:06:ac:18:77:54:b6:84:6d:d8:11:d8:1e:3c:e3:59:70:35:
7f:e7:0a:3e:4f:3c:a6:48:4b:53:0b:e5:e1:e2:ff:f5:5c:21:
b9:9d:38:04:f3:d0:cd:b0:49:4c:3e:5b:51:89:dc:a4:00:3f:
8e:6f:9d:15:9c:29:d2:96:a6:e6:30:7f:5b:bb:df:4f:16:df:
61:7a:e2:96:ac:0e:7f:67:64:b0:9d:d3:6d:74:8f:2e:a2:3f:
ca:d8:a0:57:93:a8:07:20:4b:ce:99:2e:73:ad:39:a4:19:80:
f4:c3:3d:90:cf:18:13:99:de:a6:b5:bb:ce:98:77:94:d6:61:
a9:50:9a:e7:5b:a3:ef:d5:55:2a:be:a8:7c:5f:1f:23:4e:9b:
02:88:ec:f3:b0:a7:7b:14:e5:6a:77:0a:2a:39:7f:6a:73:e9:
45:7e:50:2a:3b:8e:32:39:2f:7e:bc:cc:1e:97:f2:0c:4d:7d:
9e:14:ce:99:ee:0e:32:19:2c:18:10:9a:23:e9:7b:28:cf:6f:
8a:b8:6e:47:f7:89:a8:6d:05:3b:da:22:00:c0:03:0b:eb:71:
6b:65:cd:7a:d1:a4:ef:0a:3f:4c:bc:90:a7:3c:af:56:9b:99:
87:36:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:48:06 2026 by rpki-client