Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: Nej6xsYAiZ0aYxE5PcKphGOgAw1y2mKuo9FGP2mdJuc=
Subject key identifier: BD:24:A7:EC:2D:53:7D:3E:C3:E8:70:84:CC:19:9F:F4:3E:02:57:68
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 019CABA23B4992F87EE3CDDCC9BA1A986C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: g2vqSqKKvxOmKFzly9aga3n7bPwVSbDauw1e8zDzJFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3b:49:92:f8:7e:e3:cd:dc:c9:ba:1a:98:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=bd24a7ec2d537d3ec3e87084cc199ff43e025768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:19:13:63:35:33:b0:a3:76:20:c3:9a:e4:
63:8b:c4:a9:8a:82:48:5e:18:29:99:b8:60:66:12:
42:cc:d7:10:e9:de:c6:56:3e:76:86:f5:93:79:05:
87:45:e0:c0:59:db:4c:3e:3c:23:7c:2a:ce:47:37:
88:b3:28:73:5c:6c:f2:e0:0a:b7:16:69:68:49:82:
d6:13:3d:99:4b:96:84:44:38:4a:10:8a:c4:47:d0:
a6:53:d9:4e:33:3b:a4:77:75:3e:8f:ff:34:90:5a:
6b:e9:03:e6:c1:4d:8d:ac:ce:4e:30:48:35:95:86:
3a:0e:fa:b2:26:be:bf:0f:d0:7e:29:6a:7d:50:7b:
9e:7f:1f:c6:a5:b1:88:32:ad:c4:52:30:61:77:e8:
c1:f9:23:65:5c:66:74:18:55:92:a2:6b:af:92:06:
d5:12:7b:53:19:cf:f0:d9:bd:62:42:dc:19:9b:70:
93:f6:53:7f:93:23:b9:05:c5:9d:5e:c2:23:19:3d:
ae:c4:cb:15:6a:a3:2b:7a:cd:88:12:54:ee:68:86:
79:33:7c:42:d9:0f:d9:52:25:f2:0e:ab:1b:48:2d:
cc:fc:29:04:b5:d7:b1:68:47:40:fd:34:b4:11:39:
b0:20:ed:fa:5c:82:ef:a4:bf:fb:85:42:20:f9:ca:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:A7:EC:2D:53:7D:3E:C3:E8:70:84:CC:19:9F:F4:3E:02:57:68
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:59:8b:e3:ff:5f:e8:0f:00:b4:83:8b:a5:29:49:de:29:
92:77:8e:5f:cc:6c:80:b4:59:92:18:2e:a5:c0:a0:de:90:d2:
01:72:1b:42:5b:9a:de:56:e4:d0:da:03:fd:9c:7f:6f:f9:8b:
a3:31:be:50:97:f5:56:59:0a:97:16:ab:74:0f:cd:8c:82:b0:
4a:4d:8b:94:f2:ed:e4:eb:5e:50:73:82:7d:a4:6b:5d:ac:10:
80:e3:f7:96:9a:4c:43:53:a3:ec:8d:af:86:d3:fa:d7:c9:c8:
5e:c4:a7:11:4d:da:86:62:b1:57:12:c5:59:c8:da:c3:51:e9:
cd:95:c6:78:16:31:44:9a:8e:af:a7:4f:9a:53:27:19:fc:da:
34:f4:8c:ef:ac:6e:1f:a0:03:e1:d4:0a:0a:97:ab:97:9b:19:
2c:f0:6c:c4:99:23:5c:7b:12:8b:32:09:d3:b5:9c:26:96:94:
84:df:96:cc:91:8d:ad:c4:59:62:d6:b7:9d:b7:4e:7a:ba:b4:
81:0a:2a:6e:75:9e:0e:d2:a9:fb:a8:2c:c5:0c:1d:d0:ca:34:
37:eb:97:27:c7:b1:a4:f2:5f:cd:7c:13:1f:51:da:aa:90:56:
3f:e0:ba:93:57:b8:61:d4:e5:d4:c6:6e:fd:8c:8c:7b:a0:2a:
42:e8:6c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojtJkvh+483cyboamGycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjNkNzAyMjRiN2JkM2MyYTdjZTdkYzdhODdjOTJhZDVh
ZmYyNjkwHhcNMjYwMzAxMjMwMTAxWhcNMjYwMzAyMjMwMTAxWjAzMTEwLwYDVQQD
EyhiZDI0YTdlYzJkNTM3ZDNlYzNlODcwODRjYzE5OWZmNDNlMDI1NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40cZE2M1M7CjdiDDmuRji8SpioJI
XhgpmbhgZhJCzNcQ6d7GVj52hvWTeQWHReDAWdtMPjwjfCrORzeIsyhzXGzy4Aq3
FmloSYLWEz2ZS5aERDhKEIrER9CmU9lOMzukd3U+j/80kFpr6QPmwU2NrM5OMEg1
lYY6DvqyJr6/D9B+KWp9UHuefx/GpbGIMq3EUjBhd+jB+SNlXGZ0GFWSomuvkgbV
EntTGc/w2b1iQtwZm3CT9lN/kyO5BcWdXsIjGT2uxMsVaqMres2IElTuaIZ5M3xC
2Q/ZUiXyDqsbSC3M/CkEtdexaEdA/TS0ETmwIO36XILvpL/7hUIg+co+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0kp+wtU30+w+hwhMwZn/Q+AldoMB8GA1UdIwQY
MBaAFIkj1wIkt708Knzn3HqHySrVr/JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUt
Zjk4NjU1MWE3MDdkLzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUtZjk4NjU1MWE3MDdk
LzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvdZi+P/
X+gPALSDi6UpSd4pkneOX8xsgLRZkhgupcCg3pDSAXIbQlua3lbk0NoD/Zx/b/mL
ozG+UJf1VlkKlxardA/NjIKwSk2LlPLt5OteUHOCfaRrXawQgOP3lppMQ1Oj7I2v
htP618nIXsSnEU3ahmKxVxLFWcjaw1HpzZXGeBYxRJqOr6dPmlMnGfzaNPSM76xu
H6AD4dQKCperl5sZLPBsxJkjXHsSizIJ07WcJpaUhN+WzJGNrcRZYta3nbdOerq0
gQoqbnWeDtKp+6gsxQwd0Mo0N+uXJ8expPJfzXwTH1HaqpBWP+C6k1e4YdTl1MZu
/YyMe6AqQuhszA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:54 2026 by rpki-client