Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: nlp9RsLBGOTqvhHoJqq981pVdHFHYVSz3ff1Y3d7ixg=
Subject key identifier: B3:75:79:63:AE:33:D7:E6:2F:D8:4E:8F:CA:43:B0:23:E4:A8:09:36
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019E1E6CA52C942B6070955945AC7B04BCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 09B1
Signing time: Tue 12 May 2026 23:01:37 +0000
Manifest this update: Tue 12 May 2026 23:01:37 +0000
Manifest next update: Wed 13 May 2026 23:01:37 +0000
Files and hashes: 1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: Om0M/6fWzUc2aR9DapPyv9C6FKDcM3pfnQDL222++Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a5:2c:94:2b:60:70:95:59:45:ac:7b:04:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: May 12 23:01:37 2026 GMT
Not After : May 13 23:01:37 2026 GMT
Subject: CN=b3757963ae33d7e62fd84e8fca43b023e4a80936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:31:74:a0:9e:45:86:a8:ff:91:9a:61:3b:
1f:a2:54:d3:cb:f9:63:34:6c:3c:6a:56:a3:ae:92:
8a:37:a0:86:bb:73:15:0d:3a:55:74:f9:e3:44:44:
de:b5:47:3d:f1:31:0f:a0:94:a3:9c:68:a8:ab:17:
9d:85:ff:92:bc:67:0f:1a:74:ea:28:cf:ae:3d:81:
ef:27:b8:6b:dc:a2:0e:de:8b:b7:20:19:9f:d3:d9:
da:9f:9d:0a:02:ab:17:84:ba:7e:ed:85:e6:43:7f:
f7:dd:53:d1:89:28:5f:54:9e:5c:f0:54:6f:05:f2:
5a:df:53:3b:5b:a0:ff:a7:d5:fc:41:55:0a:b4:a9:
c7:01:77:59:aa:de:c2:86:78:77:49:32:6f:0e:06:
94:c1:18:38:a4:9e:54:c5:a3:a9:2d:31:f3:aa:85:
52:8f:0d:9d:2d:c3:d1:61:c5:3f:62:e4:20:85:30:
66:be:01:23:d9:3c:df:b6:2c:07:3a:9f:85:f7:7d:
79:0b:12:b0:a3:5e:11:a0:01:d9:00:31:b2:c5:74:
d2:f4:99:03:83:78:3a:54:da:86:87:ac:d8:2a:38:
d7:57:72:d0:10:f4:11:1a:38:4b:75:41:d6:8a:2f:
e0:8b:ad:2a:24:f9:91:b5:49:be:20:84:a0:b5:97:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:79:63:AE:33:D7:E6:2F:D8:4E:8F:CA:43:B0:23:E4:A8:09:36
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:50:95:51:9a:f3:9f:06:09:8f:e5:6f:5b:4e:c6:41:d5:ea:
40:7c:f9:a4:14:58:54:f9:f5:98:0b:20:e7:a8:dd:31:8f:46:
ed:45:6d:54:0b:b2:6e:31:c7:82:a8:0d:a7:55:a8:cf:a0:10:
98:ae:fd:c9:04:1a:62:6c:80:85:cf:5f:b0:7a:e0:2a:8b:ce:
91:46:ed:23:88:89:4d:c5:f9:2e:e6:eb:90:98:d3:e5:71:2d:
f8:65:8a:9a:6d:be:f5:ab:be:30:23:b8:b2:1c:97:b6:43:64:
83:01:69:23:5f:45:0b:68:e0:bf:f6:cc:dc:b1:9d:aa:61:6c:
d0:77:5a:b1:4a:73:78:a6:61:07:3b:4b:22:ad:e4:4b:bd:f7:
fc:a6:21:ad:31:e8:5d:53:e1:3c:cf:54:fe:2b:cb:fd:60:a2:
e7:79:61:5f:04:66:5a:5c:21:de:07:97:c2:65:fb:c5:c9:2d:
83:35:8c:9a:2f:ac:a8:d3:17:e3:50:e0:3e:67:58:d9:90:40:
1e:23:b7:bb:32:18:2c:70:3a:38:9f:18:fe:a8:74:20:ed:d8:
1c:29:37:66:06:8a:68:c6:90:5a:34:9d:ce:df:7a:b0:22:1b:
a4:61:65:f6:33:47:40:d6:34:b5:36:a5:55:3d:3a:49:e2:09:
4f:09:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:45 2026 by rpki-client