Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: ENqLvC98gHHKoT7CEaOJeL+lVOhmdx8p1vaR8SZ4+Wk=
Subject key identifier: A7:AA:FE:BB:21:48:7D:78:0F:DA:3B:0F:3B:85:DA:6A:88:E3:0A:CC
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 019CAB34491DC1AB8FC5E70D0F5D2BB7396A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: 1AKA9ICtH2sefFDvLoJsK9ePE54.roa (hash: 4v9nHWweB0nvxv/LfJiO5A7Jex4IvVHgN7szjLpSCK4=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: +xiAnF6fJTjEQvMrS1di9+/JECoCF2LpaUlI8N1d+aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:49:1d:c1:ab:8f:c5:e7:0d:0f:5d:2b:b7:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=a7aafebb21487d780fda3b0f3b85da6a88e30acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:36:26:a3:3d:83:de:e3:32:ea:75:76:de:
78:cb:67:f0:b8:2e:7a:9b:16:61:a0:a8:30:b1:57:
7a:3d:b7:02:b5:ba:c3:9a:0a:b9:fd:ce:a0:4b:31:
5c:b9:52:6b:f8:0e:f0:c6:a5:61:08:0d:11:54:04:
c7:0c:9e:40:58:42:b2:82:8b:9f:16:c9:eb:d9:52:
a2:26:bd:eb:8f:70:ab:06:1c:50:62:00:4b:01:29:
a5:ad:8e:bb:87:61:ec:b0:f1:a4:35:ae:bf:fd:fb:
1f:72:7a:07:c5:5d:c2:7e:d3:b2:d8:86:aa:7a:1f:
5d:dc:e3:ba:c1:e0:e4:01:4e:e1:ec:4c:f7:c0:95:
03:63:ee:0f:cc:e8:93:b6:f2:f0:5f:5c:e0:cb:68:
c6:ac:d2:a7:a8:00:66:74:ae:e9:b3:4c:c8:f9:c2:
b2:77:f9:c8:41:ee:a5:f3:a3:9b:ee:78:d2:a2:00:
92:12:6d:3b:ad:b2:45:67:96:cf:a2:56:04:1d:fd:
3d:cc:f1:b7:ac:c6:49:90:69:ae:9d:7c:48:6f:54:
e6:4d:7f:f6:de:14:e8:54:16:3a:d1:49:89:5e:a0:
a5:ad:66:aa:83:88:4b:95:11:f4:83:27:27:de:a1:
06:e2:74:22:65:d3:a1:9a:6f:59:6e:1d:b5:51:56:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:FE:BB:21:48:7D:78:0F:DA:3B:0F:3B:85:DA:6A:88:E3:0A:CC
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:05:5b:2d:56:97:65:bc:97:55:85:af:f9:67:57:0f:23:13:
1f:04:b2:09:55:7d:9f:ec:11:c5:97:92:66:f7:e1:b9:18:84:
a3:f0:e8:ff:4b:d5:ac:41:49:d2:e0:e5:30:5f:1c:83:c1:cd:
ff:63:de:84:93:bd:df:47:fa:fc:c5:42:f9:58:7e:23:36:7a:
a2:80:c2:70:83:85:00:86:0b:20:a7:c2:a8:1a:c9:ac:70:ce:
71:a8:c6:fb:ce:cf:32:98:4a:c1:e9:5f:ee:a5:a5:b5:50:e2:
de:45:4f:61:61:fd:4a:c8:f9:73:2e:a0:29:26:4b:58:08:95:
54:75:19:19:ba:61:2d:91:b5:65:9d:a8:d0:8d:37:46:23:2f:
c0:39:08:94:d3:dc:fb:5e:82:7a:bd:27:aa:8d:1b:d7:5f:39:
7d:a8:d8:d8:fa:d9:ef:4c:ab:a6:06:6d:2c:f8:52:31:2f:62:
a9:e7:21:dc:c4:2a:80:47:c2:0f:84:63:15:e8:40:ec:20:a4:
d0:54:f3:e2:72:81:37:8b:48:9d:ce:1c:9a:f7:2c:e1:17:2e:
53:39:e5:7c:6d:1c:c2:d7:7a:54:65:f9:99:3c:51:0e:95:a2:
d4:c8:42:f6:66:4b:6d:b1:4f:db:a8:b7:ee:ab:6b:5d:c5:16:
1a:0b:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:42 2026 by rpki-client