Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: gw2pzy/0+NmntBpv6MbhiQ7h04ATS0eCUm5wt+2/Fmo=
Subject key identifier: E7:17:67:78:FB:95:7B:A9:C1:C3:3E:08:7E:19:B5:F1:5D:AD:6B:47
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019D97E22C36D54C0775BACD49DE3836FE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 20:01:15 +0000
Manifest this update: Thu 16 Apr 2026 20:01:15 +0000
Manifest next update: Fri 17 Apr 2026 20:01:15 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: D19HQ6wT7H7WQ9N0J5WS00iIIaxY2iKnnTt4+PIqvTc=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:2c:36:d5:4c:07:75:ba:cd:49:de:38:36:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Apr 16 20:01:15 2026 GMT
Not After : Apr 17 20:01:15 2026 GMT
Subject: CN=e7176778fb957ba9c1c33e087e19b5f15dad6b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:10:6d:5f:9d:a1:ff:b4:f2:d0:1e:97:2a:
e4:4c:58:5f:91:ad:a6:32:79:c5:69:ca:85:e0:d5:
7a:2a:38:a2:1f:3f:fa:a1:b5:a8:f8:5e:06:50:21:
6a:ac:cf:ee:70:ba:d8:4f:f4:78:7d:db:c4:c6:b8:
70:0a:78:0f:88:00:f0:6f:74:2e:bf:50:c9:6d:1e:
9d:d5:51:62:91:a4:08:6f:91:65:c6:fa:48:ca:52:
0a:f5:5c:ed:8f:87:a6:02:bf:c8:5f:a4:92:5f:f0:
23:9a:ee:d0:ea:1f:9b:22:33:d9:40:c0:5b:92:12:
5a:96:4e:5a:0e:fe:db:4a:af:13:21:03:5c:34:41:
72:7a:54:ab:31:76:d8:68:cc:51:d3:99:95:d1:6d:
d4:81:1d:51:2f:7a:4d:a4:f8:ab:26:20:50:ef:bc:
3c:7c:45:21:1b:93:66:b0:90:23:da:70:8c:a5:3e:
17:08:8b:bf:c0:45:e3:fe:67:ff:10:52:69:fe:33:
cf:78:0d:ff:6d:b1:5a:08:23:03:ee:4a:ce:65:12:
33:e3:7f:76:de:92:d2:25:fa:73:ba:ef:1e:63:ea:
9b:2c:64:14:db:f7:88:44:ab:97:62:fd:f6:ec:fc:
a9:4b:d6:ef:8b:b4:c8:cc:ac:a5:c0:f6:57:1c:95:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:67:78:FB:95:7B:A9:C1:C3:3E:08:7E:19:B5:F1:5D:AD:6B:47
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:90:42:7f:59:0a:bb:07:55:ec:06:a7:d4:34:5a:e8:15:65:
21:d6:74:78:63:29:21:75:d3:5d:20:a3:04:4e:e5:ce:0e:b0:
fb:c2:26:87:3e:88:8e:26:ca:51:fe:a1:9d:bb:8f:68:36:4f:
f6:d9:15:62:67:25:db:8f:94:d0:86:c0:e1:0b:12:6d:1f:92:
3c:e5:9a:3d:27:99:df:63:00:b0:35:66:21:97:2d:17:2f:21:
45:7f:f9:41:0a:14:d6:7f:61:eb:87:e8:ad:10:bf:97:70:31:
a2:c7:11:c7:9b:be:38:4e:a2:38:e4:9b:4e:a4:38:6f:24:ad:
19:51:9d:ed:aa:2c:15:b4:43:d0:2a:c8:9a:c6:66:22:85:8b:
a8:2f:d8:ea:0f:86:6d:06:5f:1d:a2:70:97:b8:9d:46:60:1b:
71:1b:83:08:7a:57:69:b7:07:4a:f2:45:b9:29:80:0a:b2:77:
9b:c7:c7:58:44:00:a8:e3:ee:18:f3:41:40:75:60:be:71:5e:
7f:e7:87:06:1a:fa:fa:7d:cc:d2:d5:b0:ff:cc:20:77:37:c7:
47:af:d3:ac:89:ff:de:16:ec:cd:0b:58:e0:05:59:b0:9f:a9:
6f:7a:71:5a:cc:94:9c:b0:2e:b1:7e:ed:2e:90:9f:ad:25:f2:
01:0a:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:16 2026 by rpki-client