Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: jCDPUuYSCvcJ7ujPAG909b8M+FWBs3U75GkMj9Y0pDw=
Subject key identifier: 41:73:25:82:F8:71:FC:D3:43:A1:BA:9B:03:02:72:1F:25:9A:08:07
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019CAC474650FE28EDB57159BCEC2BAB1F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 02:01:18 +0000
Manifest this update: Mon 02 Mar 2026 02:01:18 +0000
Manifest next update: Tue 03 Mar 2026 02:01:18 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: tefq5MhCQ+LHqBznTmQ3/9rnMWol02j9XjrQkgAzklg=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:46:50:fe:28:ed:b5:71:59:bc:ec:2b:ab:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Mar 2 02:01:18 2026 GMT
Not After : Mar 3 02:01:18 2026 GMT
Subject: CN=41732582f871fcd343a1ba9b0302721f259a0807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:96:1b:dc:74:82:a0:00:c4:8d:3f:fc:e7:
f5:86:1f:53:86:06:9a:d7:be:78:ea:94:e6:8f:db:
c1:de:22:bb:36:5d:96:73:3d:95:26:c4:91:ea:da:
c9:2c:69:c8:1a:5b:46:c2:2c:65:83:fb:2b:6c:e5:
06:09:8d:8c:82:dd:f6:f5:88:d2:25:b4:a5:56:69:
fd:ba:9e:8a:d2:2e:b7:20:d7:87:d6:38:75:2f:00:
5d:5c:55:41:ba:00:f6:1b:37:20:14:0c:04:4a:ed:
db:36:89:e9:22:9c:e2:04:31:60:46:f8:77:ae:6c:
82:cc:8d:0a:47:cc:eb:80:ac:8f:af:22:fb:35:54:
dd:9c:09:cf:28:5f:37:0e:57:05:c7:59:f2:c7:98:
34:0e:e6:4e:b6:d7:e7:e2:e5:5a:d2:61:45:da:4d:
dc:65:dd:50:fd:2f:87:c3:58:f1:8f:73:6b:ab:04:
83:92:7f:37:0e:24:3b:67:08:51:fb:91:d3:4c:bc:
a5:70:6d:fa:43:67:42:5b:d3:c8:71:ea:3e:6f:cc:
4f:e9:99:2e:c6:68:62:f5:9a:37:ac:c1:11:61:59:
48:bd:dd:63:c5:b5:20:ce:ee:55:dc:e2:bb:b0:61:
d5:11:06:36:27:db:49:98:4d:58:bd:72:d2:d3:bb:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:73:25:82:F8:71:FC:D3:43:A1:BA:9B:03:02:72:1F:25:9A:08:07
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:a8:94:de:b6:dc:57:d5:96:8c:15:2b:25:40:e0:b5:bc:
2a:6d:f0:35:c5:27:26:3e:3d:04:73:2b:1e:09:43:9c:0d:16:
e9:b2:3c:fc:86:91:7b:a7:0b:f4:31:c5:10:c8:64:55:f7:ad:
45:83:be:ca:0b:67:a0:6c:ae:7c:fd:47:0b:9b:b0:8e:75:7f:
e6:ab:07:62:1b:ba:80:fa:70:ad:a1:bb:96:9e:f7:e0:63:d9:
a1:0f:d3:e4:c0:2c:59:3c:39:47:fe:bb:30:ef:d6:c9:0a:60:
d2:d8:0d:10:7e:ee:b7:10:6b:b1:9f:ec:1f:e0:0c:78:97:81:
33:de:b1:b2:e2:a0:c5:0b:87:86:35:03:2a:9b:77:a1:70:3d:
6a:e9:61:87:73:f0:ba:6a:6f:16:02:04:0f:0a:c9:5c:f2:10:
0d:14:28:9d:63:5c:11:09:9b:b1:4b:c6:18:31:d1:96:ee:f7:
8e:9d:bc:9e:f9:9e:8b:62:dc:db:ec:90:43:7f:91:f1:89:5a:
a4:0b:22:80:48:1f:85:c1:58:65:10:85:e1:bc:89:c7:40:8a:
ca:cb:3f:55:bd:a7:90:d9:6f:8a:1d:4c:b1:d9:a6:9b:29:97:
ca:7f:c9:01:6f:07:23:8c:ce:b9:b0:39:37:1b:43:b9:88:f8:
17:06:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:25 2026 by rpki-client