Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: 2VVkWh24rEel5YCNmOwV02iT7XIRWdINHOnxYukWcyU=
Subject key identifier: 37:A0:BD:D7:4D:CD:F6:FA:9F:14:5E:BD:97:E4:34:28:D1:7C:CC:B2
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 019D27A86FC1A5B46FCD5FE22B177390B39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:00:43 +0000
Manifest this update: Thu 26 Mar 2026 01:00:43 +0000
Manifest next update: Fri 27 Mar 2026 01:00:43 +0000
Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: jKzflDH+zBz0Skb9cr4WRlF1KKrTG9AQcCFXTahQXnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6f:c1:a5:b4:6f:cd:5f:e2:2b:17:73:90:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Mar 26 01:00:43 2026 GMT
Not After : Mar 27 01:00:43 2026 GMT
Subject: CN=37a0bdd74dcdf6fa9f145ebd97e43428d17cccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:21:27:96:a9:61:d9:a6:d3:33:4c:45:90:
79:6a:ac:bb:04:92:cb:11:93:29:a0:e5:c1:d2:2b:
28:7f:46:84:99:f1:bd:1c:f4:d7:e5:c8:5a:19:a7:
ab:62:2f:01:ad:96:84:78:68:71:4c:70:8e:44:e3:
1a:91:38:23:79:16:11:0e:d8:27:b9:a6:25:17:e1:
43:27:7b:2f:d6:99:ff:bc:cb:aa:27:05:aa:0d:7d:
53:0b:6f:18:bb:dc:93:6c:9c:4f:7f:76:c6:d0:2f:
6b:a5:17:09:b5:61:b9:0c:8f:42:11:36:4c:09:c7:
65:00:79:d3:63:42:9d:9f:70:d9:5a:97:ae:b5:07:
fe:28:5c:e9:6c:dc:20:37:c5:35:19:1b:df:3d:c0:
39:df:74:bb:98:0a:5d:01:db:4f:d0:02:75:a3:7b:
83:55:3e:43:86:da:01:d6:fd:cc:d6:a1:c3:ef:1b:
81:42:88:e1:b7:5b:00:32:ac:26:b0:7c:48:ab:0c:
29:7b:2e:f1:80:17:b1:4e:22:38:15:2c:ff:e2:9a:
6c:bf:cf:14:f5:5a:53:f9:21:62:43:cb:1b:df:5a:
7e:a5:99:07:33:cd:c0:9a:53:ad:2c:5d:ce:f7:45:
3b:be:c5:8b:94:e7:32:b7:09:92:eb:87:f3:c9:71:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:BD:D7:4D:CD:F6:FA:9F:14:5E:BD:97:E4:34:28:D1:7C:CC:B2
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:d0:09:b4:e8:92:dd:44:0b:2d:13:e0:ad:93:f0:84:21:
a1:99:d8:5e:4a:ec:a0:b3:10:87:13:15:81:d7:57:94:8e:c7:
ad:12:a1:59:d3:ac:4c:85:45:d6:52:42:78:5d:64:ac:fe:de:
8d:d3:6b:2b:b2:29:1d:29:d8:53:97:2c:48:de:58:73:06:3c:
f4:26:80:27:09:ae:d2:94:2b:b2:53:2f:79:82:c9:27:a5:3b:
7e:fd:9c:d9:ea:75:74:ec:70:2d:33:23:c4:32:2f:32:97:e3:
8b:74:bd:e9:b8:12:83:d5:da:2b:54:12:b6:b7:bc:47:22:6a:
3f:59:61:f6:31:44:84:6e:bd:4e:33:86:25:42:46:0c:9d:4e:
be:06:3e:a9:b2:9f:bd:a5:84:bf:3b:73:1c:b2:5f:1d:fc:b5:
eb:16:68:84:91:5d:75:bf:63:6c:8c:08:21:18:90:5b:19:c9:
a3:f9:fe:3c:59:a3:96:28:a9:28:60:fe:4e:fb:31:c2:c8:79:
2e:2e:14:bc:5a:6c:59:a6:62:4f:b7:0b:a5:86:95:2e:36:5c:
4b:1e:d1:a3:d0:42:b1:9d:e6:d0:31:34:c8:0b:e7:ce:ff:6b:
4c:28:56:39:d1:09:ed:07:f3:e9:ee:98:84:3e:4e:ce:8a:db:
31:b4:f0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqG/BpbRvzV/iKxdzkLOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw
NjBlMmMwHhcNMjYwMzI2MDEwMDQzWhcNMjYwMzI3MDEwMDQzWjAzMTEwLwYDVQQD
EygzN2EwYmRkNzRkY2RmNmZhOWYxNDVlYmQ5N2U0MzQyOGQxN2NjY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8whJ5apYdmm0zNMRZB5aqy7BJLL
EZMpoOXB0isof0aEmfG9HPTX5chaGaerYi8BrZaEeGhxTHCOROMakTgjeRYRDtgn
uaYlF+FDJ3sv1pn/vMuqJwWqDX1TC28Yu9yTbJxPf3bG0C9rpRcJtWG5DI9CETZM
CcdlAHnTY0Kdn3DZWpeutQf+KFzpbNwgN8U1GRvfPcA533S7mApdAdtP0AJ1o3uD
VT5DhtoB1v3M1qHD7xuBQojht1sAMqwmsHxIqwwpey7xgBexTiI4FSz/4ppsv88U
9VpT+SFiQ8sb31p+pZkHM83AmlOtLF3O90U7vsWLlOcytwmS64fzyXES7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDegvddNzfb6nxRevZfkNCjRfMyyMB8GA1UdIwQY
MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt
N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj
LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQnQCbTo
kt1ECy0T4K2T8IQhoZnYXkrsoLMQhxMVgddXlI7HrRKhWdOsTIVF1lJCeF1krP7e
jdNrK7IpHSnYU5csSN5YcwY89CaAJwmu0pQrslMveYLJJ6U7fv2c2ep1dOxwLTMj
xDIvMpfji3S96bgSg9XaK1QStre8RyJqP1lh9jFEhG69TjOGJUJGDJ1OvgY+qbKf
vaWEvztzHLJfHfy16xZohJFddb9jbIwIIRiQWxnJo/n+PFmjliipKGD+Tvsxwsh5
Li4UvFpsWaZiT7cLpYaVLjZcSx7Ro9BCsZ3m0DE0yAvnzv9rTChWOdEJ7Qfz6e6Y
hD5OzorbMbTwFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:20 2026 by rpki-client