Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: PduF++va2jANKY0+p/gCwlhsK276CvyNFB7jVmu/SiY=
Subject key identifier: A6:17:4A:A6:DC:BF:45:E4:D7:16:FF:C8:85:AF:B8:B5:DF:50:55:BE
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019D9AE35B8525188160E8E0B20BF0EE0526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0B14
Signing time: Fri 17 Apr 2026 10:01:24 +0000
Manifest this update: Fri 17 Apr 2026 10:01:24 +0000
Manifest next update: Sat 18 Apr 2026 10:01:24 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: rYMIGNfnkf0T57ih1HU7OGZ14rcES8z4wBQzbd3Lrkc=)
2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5b:85:25:18:81:60:e8:e0:b2:0b:f0:ee:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Apr 17 10:01:24 2026 GMT
Not After : Apr 18 10:01:24 2026 GMT
Subject: CN=a6174aa6dcbf45e4d716ffc885afb8b5df5055be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:68:83:b5:88:cf:41:53:4a:75:8d:d3:77:
72:09:fc:d5:4b:67:92:3e:03:5c:5a:23:1c:67:6a:
af:09:d2:e8:40:b0:43:11:c7:61:87:c7:43:7e:78:
cd:12:28:bf:52:21:84:e8:73:c6:f3:eb:0d:d6:f6:
9e:2e:09:89:8e:8e:e4:c8:cd:f9:7f:4a:98:d5:8c:
5f:1b:7d:d2:32:90:c7:c1:66:ec:5e:2f:b2:70:9a:
ac:a2:de:23:e0:1d:9f:9a:5f:10:5c:8a:04:77:87:
9d:dc:52:d9:17:7a:0c:45:b4:c0:3c:93:ec:38:1a:
a9:ea:7c:ab:88:7d:fd:89:b4:0c:17:f2:75:b8:5d:
06:15:69:1b:0b:b6:b8:4e:c3:76:e0:13:ff:50:96:
50:bb:16:68:4c:26:31:7b:c6:ad:ac:42:45:31:70:
ec:cc:2f:ca:e4:1f:5c:69:ee:2f:78:27:33:a4:59:
16:00:d2:5d:7b:fa:a1:6c:dc:52:ce:db:67:3e:d8:
29:ce:29:b2:fa:2e:1f:2b:82:37:f7:08:bb:5d:45:
59:71:35:0a:8d:77:16:42:18:97:dc:7e:b5:63:29:
0e:9f:8f:df:3b:09:3e:0b:8a:bf:6d:12:80:ef:7a:
17:9d:4c:e5:9e:ae:f7:e0:66:c5:f0:34:6d:60:f0:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:4A:A6:DC:BF:45:E4:D7:16:FF:C8:85:AF:B8:B5:DF:50:55:BE
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:40:c3:3c:94:33:34:38:33:35:ca:8c:b3:4c:05:40:1d:
86:4c:cc:a2:74:fc:41:4c:ba:67:9d:c4:42:4e:0a:ec:63:63:
6e:ff:1a:97:59:fd:ab:60:45:9d:2c:61:c2:fc:3b:2f:fa:bb:
ce:2e:43:2c:ca:13:1b:f1:32:c0:5d:03:87:c6:ed:6d:af:3f:
86:6f:bb:07:df:fc:73:24:06:1b:28:2a:36:70:32:3e:b6:66:
69:21:3f:b1:27:5e:7b:d4:ab:f6:f0:78:ac:1f:11:84:9c:3d:
30:9e:fd:83:5c:1d:f7:5c:50:e6:aa:0a:c3:04:de:2c:2a:5c:
67:dc:80:42:97:2c:83:b3:7d:5e:9d:7d:f4:81:fa:91:c9:79:
56:f5:14:12:a7:5b:ca:ba:77:28:8f:9a:4a:2c:cb:d1:0c:fd:
e8:31:cd:06:3e:de:41:16:95:5e:81:92:2f:98:cb:8b:52:37:
a0:f5:6a:76:4b:9a:37:38:7c:53:a9:17:5c:d1:c1:07:15:e9:
32:e1:63:b7:78:6d:0e:32:d3:42:89:2d:41:cb:7c:86:bb:12:
81:47:23:44:4b:57:c6:ad:d1:30:de:f3:05:a7:88:e9:9a:75:
d7:5f:36:3e:47:c7:a7:ee:49:35:2b:7a:c1:dd:52:06:a2:25:
44:3a:7e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a41uFJRiBYOjgsgvw7gUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjYwNDE3MTAwMTI0WhcNMjYwNDE4MTAwMTI0WjAzMTEwLwYDVQQD
EyhhNjE3NGFhNmRjYmY0NWU0ZDcxNmZmYzg4NWFmYjhiNWRmNTA1NWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhog7WIz0FTSnWN03dyCfzVS2eS
PgNcWiMcZ2qvCdLoQLBDEcdhh8dDfnjNEii/UiGE6HPG8+sN1vaeLgmJjo7kyM35
f0qY1YxfG33SMpDHwWbsXi+ycJqsot4j4B2fml8QXIoEd4ed3FLZF3oMRbTAPJPs
OBqp6nyriH39ibQMF/J1uF0GFWkbC7a4TsN24BP/UJZQuxZoTCYxe8atrEJFMXDs
zC/K5B9cae4veCczpFkWANJde/qhbNxSzttnPtgpzimy+i4fK4I39wi7XUVZcTUK
jXcWQhiX3H61YykOn4/fOwk+C4q/bRKA73oXnUzlnq734GbF8DRtYPCKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYXSqbcv0Xk1xb/yIWvuLXfUFW+MB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSZAwzyU
MzQ4MzXKjLNMBUAdhkzMonT8QUy6Z53EQk4K7GNjbv8al1n9q2BFnSxhwvw7L/q7
zi5DLMoTG/EywF0Dh8btba8/hm+7B9/8cyQGGygqNnAyPrZmaSE/sSdee9Sr9vB4
rB8RhJw9MJ79g1wd91xQ5qoKwwTeLCpcZ9yAQpcsg7N9Xp199IH6kcl5VvUUEqdb
yrp3KI+aSizL0Qz96DHNBj7eQRaVXoGSL5jLi1I3oPVqdkuaNzh8U6kXXNHBBxXp
MuFjt3htDjLTQoktQct8hrsSgUcjREtXxq3RMN7zBaeI6Zp11182PkfHp+5JNSt6
wd1SBqIlRDp+JQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:44 2026 by rpki-client