Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: SqR3U0PGQ+PpGEemyGciSQ4A9yA9uRt8FqwKlKUvyZI=
Subject key identifier: 03:C2:BE:F6:0C:60:9D:B0:CF:5F:FD:A7:B3:B2:1F:97:1F:08:FE:65
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019D273AC2351A06369802065BC9CB112997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 0931
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: IoiXsZtAukUjfTPpC969yEHDiGGuDdTAODkCDKqs/0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c2:35:1a:06:36:98:02:06:5b:c9:cb:11:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=03c2bef60c609db0cf5ffda7b3b21f971f08fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:fd:8d:66:89:4e:bb:3b:f0:3d:44:7d:fb:
f0:b0:22:58:6c:e0:3c:49:78:01:89:f3:96:c7:af:
35:9c:b3:1a:ee:fc:4d:13:bd:3a:99:b8:0e:89:6e:
7d:7d:2a:53:f5:03:6a:12:af:23:f9:8f:d0:15:cf:
54:e0:a8:48:8b:13:70:21:42:9a:64:d0:16:74:91:
97:21:78:c6:c6:b3:26:dc:c2:e3:85:de:6b:78:37:
4c:a9:e2:56:16:d3:9a:ff:50:73:01:c5:fd:f8:6c:
f0:5f:a7:18:14:a7:6f:da:5f:b1:c8:31:57:2e:37:
6b:e5:28:3c:1d:77:76:6b:a0:e9:a0:88:28:e4:20:
55:10:90:e3:ac:f3:ea:a9:cb:0e:24:04:9e:66:8a:
89:81:62:e4:07:0f:40:e3:a4:07:54:82:bb:0d:d3:
c4:f1:a0:3f:d2:69:03:e1:69:9f:01:ae:e5:38:ed:
29:3b:47:9d:b2:7a:f4:e6:2d:52:8a:94:d4:f0:ec:
ee:be:e9:11:47:70:e6:fe:0f:74:30:36:35:95:c7:
60:f3:87:dd:7a:b7:b8:8a:67:a6:aa:c5:48:90:b6:
94:b5:df:6c:66:01:1e:0c:89:6e:97:4d:d1:f1:ea:
80:87:35:9b:83:5f:95:35:78:e2:f5:2b:45:b4:c3:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:BE:F6:0C:60:9D:B0:CF:5F:FD:A7:B3:B2:1F:97:1F:08:FE:65
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:e8:86:8d:d8:bd:14:b3:f2:68:a8:18:ba:28:42:12:3f:
b5:cb:ec:16:d0:34:b5:6b:f3:bc:77:34:cd:2e:50:ab:13:2f:
49:ca:33:e5:dc:87:7c:55:7a:67:db:8d:f6:94:db:89:46:eb:
32:5d:37:e7:9b:41:bc:af:56:09:d5:6b:75:ee:df:32:ff:88:
cc:6f:43:a2:17:68:47:43:a6:40:f3:71:e9:c5:01:a3:b5:1c:
39:66:bf:8a:c2:62:57:82:88:2b:ef:8e:cf:99:18:24:95:a8:
43:17:34:8e:83:94:cd:b5:db:36:65:d3:3b:4e:78:4f:eb:b4:
9c:1b:8c:78:52:18:22:6e:26:29:bf:94:14:2a:0c:74:68:73:
c4:f6:ed:70:3c:d3:1b:1a:7e:a1:3b:6a:47:6d:38:04:bd:ca:
3c:d0:4f:bd:c1:e2:b7:d4:3a:b5:c5:cb:d8:88:da:b1:ab:e9:
31:9e:b6:9e:b8:33:15:37:05:64:78:8c:c8:03:85:ac:08:91:
b3:55:04:53:20:01:ce:91:2b:ae:25:91:b8:55:00:c1:6e:62:
72:db:74:c4:29:24:d3:9d:df:09:8a:b9:ee:55:62:fc:31:ea:
9f:09:56:6a:55:19:31:2e:ca:1a:0c:72:08:c6:7d:40:b7:ad:
d9:55:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:24 2026 by rpki-client