Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: 4nDrHSyXn6zN07y8QQEVMsk5/I+6N/NChhqW0/FjWdc=
Subject key identifier: 44:B2:3B:0B:FA:32:9E:91:56:CC:82:C6:A0:EC:BB:4C:55:F8:D9:3D
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019CAD5A22C24142B955311413C13148878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0A99
Signing time: Mon 02 Mar 2026 07:01:31 +0000
Manifest this update: Mon 02 Mar 2026 07:01:31 +0000
Manifest next update: Tue 03 Mar 2026 07:01:31 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: 5CWJ4L3yIUkwcmIjCYrPIPw3LcFymxlfUZ3uycndcLU=)
2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:22:c2:41:42:b9:55:31:14:13:c1:31:48:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Mar 2 07:01:31 2026 GMT
Not After : Mar 3 07:01:31 2026 GMT
Subject: CN=44b23b0bfa329e9156cc82c6a0ecbb4c55f8d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:3d:d0:13:18:41:24:40:40:f6:de:22:97:
69:8a:bc:5d:fd:6b:18:9e:ee:0b:f5:cf:dc:97:e5:
40:c5:a7:fd:c7:af:d9:ec:23:12:38:43:2e:55:56:
82:ef:67:7b:d9:4b:fe:4c:95:fa:35:d7:57:37:e5:
10:ba:71:4d:3d:b9:54:5a:0b:f8:48:60:2c:3c:b6:
f2:09:b7:9c:80:f6:ff:14:68:57:d1:9e:f9:c1:f2:
f9:b0:28:51:0e:3f:84:44:6d:59:a3:77:d2:86:d1:
6c:cc:88:22:87:81:64:62:ce:07:e0:63:b7:7e:72:
57:c5:ac:06:e2:ff:26:3a:21:43:78:34:46:fb:56:
c6:67:f3:55:20:b7:37:fe:6a:97:10:26:3f:58:85:
d2:7d:42:46:33:4d:f0:f5:b9:97:2f:83:35:06:f7:
dc:5a:d0:78:0a:04:fd:eb:48:43:1c:73:1f:86:8d:
3c:92:65:26:ba:61:28:6c:f5:43:2a:dc:a4:5f:f1:
a4:3e:20:bf:06:06:aa:bf:9a:db:44:c4:69:71:79:
d3:2d:9f:b1:f1:9e:06:9c:3c:95:42:0d:21:38:f0:
99:98:a4:e0:5e:e6:33:d2:09:c8:f9:c7:b0:43:2c:
9f:d4:b4:26:ea:b9:46:32:63:81:38:ac:97:86:f3:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:3B:0B:FA:32:9E:91:56:CC:82:C6:A0:EC:BB:4C:55:F8:D9:3D
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:f7:8f:92:61:93:41:5a:19:b2:10:2e:8a:40:bd:54:64:
6f:40:16:ca:ea:c3:04:2e:9c:35:9b:ad:b6:2b:a4:1c:b6:a6:
69:43:d6:14:b4:de:fe:e1:e1:bb:88:bb:4f:b0:d7:53:bb:58:
a5:78:19:bb:38:49:d1:23:d7:01:ed:b3:1e:9f:34:b1:b4:bd:
21:63:14:9e:ee:3b:ca:76:49:cb:9f:64:80:8d:da:a6:71:bb:
40:30:da:67:cd:58:31:d7:3c:47:ad:d3:78:be:e1:7b:01:47:
84:81:f6:ab:cf:64:1d:36:bf:0e:8f:5d:19:70:e3:23:eb:3c:
ba:43:db:0e:e0:d6:07:88:cc:66:a8:de:ef:6c:2f:4d:48:d7:
3e:90:f4:cb:92:18:c4:ae:46:e6:e8:b1:39:24:02:54:9e:e8:
4c:25:a4:b6:5f:48:3a:7a:9e:6b:34:d9:87:1d:72:17:90:66:
d3:1e:81:b9:b9:39:a1:c9:c8:11:27:75:7f:11:48:80:46:2d:
a1:65:3f:78:09:73:a5:91:cc:a7:37:2e:43:c0:4d:62:dd:7d:
01:7f:fd:3a:0d:4b:4c:20:91:03:cf:8e:12:71:df:82:e7:e2:
ce:80:26:be:69:09:ae:d0:a4:ac:cd:74:41:c3:a4:4e:5a:ea:
08:b2:d2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWiLCQUK5VTEUE8ExSIeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjYwMzAyMDcwMTMxWhcNMjYwMzAzMDcwMTMxWjAzMTEwLwYDVQQD
Eyg0NGIyM2IwYmZhMzI5ZTkxNTZjYzgyYzZhMGVjYmI0YzU1ZjhkOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNc90BMYQSRAQPbeIpdpirxd/WsY
nu4L9c/cl+VAxaf9x6/Z7CMSOEMuVVaC72d72Uv+TJX6NddXN+UQunFNPblUWgv4
SGAsPLbyCbecgPb/FGhX0Z75wfL5sChRDj+ERG1Zo3fShtFszIgih4FkYs4H4GO3
fnJXxawG4v8mOiFDeDRG+1bGZ/NVILc3/mqXECY/WIXSfUJGM03w9bmXL4M1Bvfc
WtB4CgT960hDHHMfho08kmUmumEobPVDKtykX/GkPiC/Bgaqv5rbRMRpcXnTLZ+x
8Z4GnDyVQg0hOPCZmKTgXuYz0gnI+cewQyyf1LQm6rlGMmOBOKyXhvODjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESyOwv6Mp6RVsyCxqDsu0xV+Nk9MB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSH3j5Jh
k0FaGbIQLopAvVRkb0AWyurDBC6cNZuttiukHLamaUPWFLTe/uHhu4i7T7DXU7tY
pXgZuzhJ0SPXAe2zHp80sbS9IWMUnu47ynZJy59kgI3apnG7QDDaZ81YMdc8R63T
eL7hewFHhIH2q89kHTa/Do9dGXDjI+s8ukPbDuDWB4jMZqje72wvTUjXPpD0y5IY
xK5G5uixOSQCVJ7oTCWktl9IOnqeazTZhx1yF5Bm0x6Bubk5ocnIESd1fxFIgEYt
oWU/eAlzpZHMpzcuQ8BNYt19AX/9Og1LTCCRA8+OEnHfgufizoAmvmkJrtCkrM10
QcOkTlrqCLLSRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:28 2026 by rpki-client