Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: Rt6QJ7935rsozB8GGKcPgBDVbh14DkAzwsmxHd31TBk=
Subject key identifier: AB:57:54:B2:1F:6C:FA:E0:90:5B:D2:E4:E8:C0:13:16:F4:F1:5F:5C
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A1AAB9E25C682244A8C4DCF7A388C23A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1AD9
Signing time: Thu 05 Nov 2026 08:01:11 +0000
Manifest this update: Thu 05 Nov 2026 08:01:11 +0000
Manifest next update: Fri 06 Nov 2026 08:01:11 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: 61MlpQSyXQtZJbXqlxulHdrMFzALZa0RNEx8jTg+W68=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:b9:e2:5c:68:22:44:a8:c4:dc:f7:a3:88:c2:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Nov 5 08:01:11 2026 GMT
Not After : Nov 6 08:01:11 2026 GMT
Subject: CN=ab5754b21f6cfae0905bd2e4e8c01316f4f15f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:66:cf:17:ba:30:e3:68:80:86:f2:f5:e7:
5c:fe:9b:41:b0:30:db:6c:05:67:3b:61:05:3b:33:
f3:76:e3:4c:26:63:20:bf:58:c1:2f:25:95:b8:d5:
82:1a:f6:15:d1:40:42:6e:08:69:01:35:02:a4:ab:
dc:49:43:67:ac:03:10:be:f3:85:83:7e:05:f4:cb:
57:7b:bb:68:a8:e0:8c:4f:64:6f:54:75:24:9f:13:
21:ae:47:50:58:78:24:2c:9b:42:de:ac:51:5d:6c:
46:93:a7:0b:b1:5e:2f:90:26:f8:8b:bb:1b:d7:ea:
58:f2:c1:cc:ab:49:cd:7c:b0:d4:3f:97:cb:d0:e8:
7a:8d:40:00:3f:ca:c1:c5:4b:92:f2:c1:83:97:56:
8a:25:77:ee:5f:c3:7d:44:a6:12:44:c7:42:11:c0:
ed:39:9b:98:91:2a:30:ea:bf:6f:27:bc:54:0f:ad:
59:f8:f1:ff:9a:b8:dd:a2:b4:ae:50:fd:48:3c:37:
8b:e2:3c:9a:4f:11:60:74:11:e1:09:0f:c1:92:ae:
81:47:e4:0a:65:96:da:d2:e8:d5:56:5e:87:f8:0f:
28:d7:b4:6b:b6:2e:c9:b2:12:25:5c:c9:df:a7:1f:
04:80:d7:fb:1c:6f:4c:c3:1e:db:08:6b:b9:7a:fc:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:54:B2:1F:6C:FA:E0:90:5B:D2:E4:E8:C0:13:16:F4:F1:5F:5C
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:3c:00:3a:a6:da:9b:66:ba:76:18:6a:ed:3c:da:7f:1c:
3b:da:f2:c6:df:2f:31:1d:f3:c9:56:b8:ee:d0:2e:20:ec:77:
98:63:cf:9b:75:17:d6:12:6a:bb:64:7f:7e:5d:6d:ee:ec:8f:
8d:aa:b5:34:99:06:77:35:ad:05:e3:00:f1:75:69:bb:84:15:
c4:00:b3:52:39:68:3a:23:3b:50:13:61:5c:3a:f2:ff:3d:f8:
75:92:7c:43:49:a7:90:62:76:49:79:ac:24:a7:bd:88:57:73:
92:4e:31:a0:9d:4f:0c:d9:e7:b4:00:57:4e:3b:89:e8:32:b6:
48:f7:e4:5f:7e:6f:f7:e3:6e:53:1d:51:70:91:c7:1f:c7:19:
6c:41:fc:9b:b0:ea:4e:8e:1b:7e:c2:14:80:50:c2:49:04:27:
8b:a3:fe:90:f1:84:db:04:30:ed:f6:f3:9e:7a:69:e7:5d:c5:
b6:d5:f3:81:01:e2:03:f5:f5:3d:5a:0b:d7:70:a3:18:30:6d:
3a:eb:07:5f:11:0d:32:0e:e3:e4:dc:38:83:26:79:6a:b7:f7:
55:5e:77:3e:a1:3b:d4:d5:5b:62:83:0c:41:b7:c5:fa:c4:ec:
5b:ca:35:f2:56:bc:a5:fd:2f:e4:b5:a7:92:0c:f5:dc:32:89:
b1:2e:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:25:58 2026 by rpki-client