Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: DKU1E1wjFxVkW5wtrf8rpJ3vvid119+p4SeqJ7QcLXw=
Subject key identifier: F0:9A:F1:31:58:35:56:20:D3:3A:52:41:CF:B3:2B:CB:DC:86:9D:29
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 019CAC10192FACCEDEF7741E15B03E7DBAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: HbvtIX/LNO6BtIiuIUMstZco01HEZBxw0C7jTXB7A98=)
2: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (hash: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag=)
3: auEpgiPIX3h008e7_hstjhVeKb8.roa (hash: AEMD5xTfuBQMPnNdbcNGPYKM0fV1Wstpq65O+O7gGKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:19:2f:ac:ce:de:f7:74:1e:15:b0:3e:7d:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=f09af13158355620d33a5241cfb32bcbdc869d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:82:80:8b:ef:e1:f7:15:54:db:37:8b:94:
02:b7:82:94:44:7c:2b:29:49:81:04:4c:fd:78:56:
06:4f:1f:b4:4d:70:6a:6a:a2:07:98:07:39:3e:14:
13:b9:47:9d:3e:cc:01:45:1d:f2:98:ba:a4:72:ab:
74:dc:9b:06:b6:ea:d3:f4:34:a7:3e:8b:38:a7:2a:
d5:74:05:0a:67:96:07:e9:7c:ab:75:e4:47:47:7e:
d1:ad:68:d4:2f:65:d2:12:ae:cd:56:fc:d9:50:78:
0c:58:d2:4b:5d:a0:7e:b2:6c:05:53:fa:4b:ad:9b:
10:c3:ba:18:78:bc:27:97:6d:c1:38:d2:26:a1:a4:
30:62:a0:3b:c2:e3:68:ea:de:72:5b:e3:05:57:54:
55:d7:13:ef:37:c4:7b:b4:bc:24:ed:1b:88:92:62:
17:a9:fc:1f:cd:9c:d0:19:9f:b3:92:1b:48:ee:fa:
46:7f:36:46:10:6d:55:5a:0b:64:3b:f7:c8:b3:f0:
37:c7:b6:ce:b4:ba:1b:d3:f7:e8:b7:1b:ad:6e:c7:
44:03:5c:7e:43:9b:d0:9e:e2:73:5d:95:4f:6f:86:
26:92:83:09:c4:8c:72:4b:40:7b:85:8d:27:1a:1f:
49:92:49:f5:65:68:5f:b2:3c:d5:3d:99:3b:0b:5c:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:F1:31:58:35:56:20:D3:3A:52:41:CF:B3:2B:CB:DC:86:9D:29
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:a9:b4:9d:9e:5b:c6:88:47:f3:31:44:b6:2c:58:c6:97:
3c:ae:6a:f6:ce:aa:99:f0:af:80:93:04:7a:52:d1:6b:55:60:
c0:5b:32:d6:c2:37:5b:ce:3e:5c:80:27:4e:8c:f2:31:a9:9d:
a0:28:d7:db:cd:9e:0a:ae:f7:4e:5a:c4:12:9f:cd:18:f3:31:
e4:2c:10:5f:33:d0:3c:36:af:26:50:af:c0:92:96:28:d1:91:
74:9d:5c:88:d2:c7:93:c2:19:cb:7b:26:19:7b:59:fe:2c:bc:
00:e3:a2:9d:8e:9d:3a:75:63:06:65:88:cd:0e:93:27:8f:8d:
b9:7f:25:0e:83:f0:a6:4f:27:3b:98:a0:39:82:7a:6c:8a:0b:
e9:9a:31:73:f2:6a:9b:70:7b:0b:08:28:00:1f:f9:68:ad:57:
3c:ef:31:5f:c2:c5:e1:8b:28:b2:2f:dd:36:18:dd:13:da:43:
a6:14:bd:4b:e1:10:b1:17:a1:f0:c9:a5:5f:33:b9:f4:30:42:
64:90:3b:6a:60:91:74:85:92:10:1b:cb:fe:30:81:e3:56:a6:
26:9f:8f:6d:fa:ee:1d:c9:a1:a0:4c:bc:47:1e:39:ef:da:c4:
51:48:81:0c:93:61:34:50:2a:35:30:c0:80:cc:75:07:5f:da:
70:d1:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:06 2026 by rpki-client