Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: w5fJhxUR2j/v49mF1X3yJ8YaXEGXWm5lwPLtkxsmxOU=
Subject key identifier: F7:36:92:2A:E3:63:20:A8:40:2B:9C:90:B8:31:08:9E:9B:E4:64:F0
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 019D27039B069832447EA1B0B2101B9FCB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 22:00:40 +0000
Manifest this update: Wed 25 Mar 2026 22:00:40 +0000
Manifest next update: Thu 26 Mar 2026 22:00:40 +0000
Files and hashes: 1: ZEq2VxymKKqXcVDH7UVkT9RIte0.roa (hash: OutVjw9J9+RzSe2XRHmI9JPa/RxVwdLkAlr9fkxWJAw=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: svbqA6FuZkCMWzEf/jf1gjo/h9SJ05ckYGu+TGdVPYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9b:06:98:32:44:7e:a1:b0:b2:10:1b:9f:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Mar 25 22:00:40 2026 GMT
Not After : Mar 26 22:00:40 2026 GMT
Subject: CN=f736922ae36320a8402b9c90b831089e9be464f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:9a:8d:60:2d:ee:66:8a:6c:4b:92:53:f5:
a9:24:30:c6:02:17:a9:78:62:a5:07:64:6f:d8:18:
2b:a3:ac:cd:10:d4:4b:41:6f:9b:32:5c:58:16:01:
62:45:95:ce:82:0f:87:42:f2:7f:8f:ff:8a:11:02:
8d:e7:a9:ac:0f:75:8d:bf:ad:7b:7f:13:3a:c3:63:
e7:a9:3a:82:06:82:0f:23:60:cb:80:0d:53:b9:7a:
2b:2b:1a:15:b1:14:84:6e:65:bc:85:d6:a9:20:9a:
d0:de:83:90:83:2f:cf:c3:5f:fa:95:8c:79:97:2c:
e1:13:08:69:fd:6c:b2:6c:e0:21:59:de:92:7c:c5:
65:71:06:6b:df:8c:04:9e:b3:50:29:f0:ff:85:53:
c4:c9:0e:67:4b:e9:53:10:88:3a:06:94:8f:be:a5:
7a:60:95:a5:78:f4:d7:64:d3:da:00:70:9d:25:70:
7f:0f:88:46:2e:eb:4a:74:19:cb:18:d7:94:70:cf:
e9:d1:10:77:cd:37:a2:6d:ff:50:5e:17:a9:90:a6:
71:91:b8:db:7f:99:25:74:74:8f:17:c5:63:40:43:
f1:0f:c6:53:da:6b:a8:a7:54:12:1c:4b:7c:b4:ac:
24:00:2f:d6:9b:99:66:96:84:e8:25:c7:fc:62:be:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:92:2A:E3:63:20:A8:40:2B:9C:90:B8:31:08:9E:9B:E4:64:F0
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:49:5f:35:a8:e2:47:1e:7a:cf:a2:f8:b9:e6:1f:56:40:37:
54:73:74:18:ea:7f:14:7b:75:7f:32:4e:b7:84:a9:1e:e9:22:
99:b3:73:5b:e8:46:db:6d:b6:77:5d:4c:7f:83:24:62:60:64:
ac:d1:a6:cd:44:28:75:1a:1c:40:ba:aa:41:6a:a9:bf:d0:bb:
fe:d0:6c:91:6f:44:16:55:ba:91:a9:eb:9b:3b:1c:bc:6a:6e:
08:52:c3:e7:7d:a0:80:ac:f9:8e:91:f9:8d:da:37:cf:83:c2:
02:d6:62:f9:43:32:0b:3e:7e:e2:82:69:4e:28:a7:89:96:d4:
09:39:25:3b:ea:d8:a9:1e:ce:70:82:c8:e9:2e:80:07:fb:49:
e6:73:46:cb:1a:1a:b6:12:61:96:59:39:2c:79:e8:1e:81:b1:
ad:47:68:e1:50:54:97:f6:b2:fc:24:84:d2:02:fd:7c:10:6f:
37:05:da:28:a8:3e:19:cf:f5:d5:08:a8:43:68:75:39:21:08:
67:52:17:21:09:78:f6:e5:0a:68:50:4a:c7:31:6e:2f:2d:9e:
75:2c:6c:e1:03:aa:66:cd:05:29:47:b5:f3:b0:3f:f8:82:d5:
d1:e7:bd:28:1c:a8:6e:98:eb:3e:c7:28:c4:2b:05:73:e9:dd:
2d:f9:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:41 2026 by rpki-client