Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: XI1IycDi3S+/A8SdIR4nR72XHx/kyhb9WRA69a+REhI=
Subject key identifier: 28:31:14:82:18:EC:BE:4E:22:F2:28:DC:98:CD:5E:3A:AF:CC:5D:B2
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 019D29CE2C3E8F8AD5B47E1E065CDD3CC325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 11:01:10 +0000
Manifest this update: Thu 26 Mar 2026 11:01:10 +0000
Manifest next update: Fri 27 Mar 2026 11:01:10 +0000
Files and hashes: 1: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: JqDRjTYdojVPwgJUJ4SBk6K0ppI16Wp2AHZv6NLlmOI=)
2: nNuKOyzIzGTmwQXRbtMZnXxqNGU.roa (hash: pxyHPXJVvBIPu6pK4/g/RHWK47X4cy2XKV2yuRdADe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2c:3e:8f:8a:d5:b4:7e:1e:06:5c:dd:3c:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Mar 26 11:01:10 2026 GMT
Not After : Mar 27 11:01:10 2026 GMT
Subject: CN=2831148218ecbe4e22f228dc98cd5e3aafcc5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:cd:5b:7e:f1:a0:53:9d:1f:b2:84:75:9f:
6b:7b:82:f4:39:a1:34:dd:91:8f:7a:e3:89:3a:3f:
49:cd:96:5f:7a:25:fe:59:29:ab:8a:91:e6:69:e2:
70:b0:08:0e:d0:bb:be:51:a5:b9:b0:04:a7:c2:44:
76:e7:b1:c3:0b:93:89:5a:ca:c0:1e:80:5c:81:e1:
93:bc:a1:63:30:13:0a:41:5c:42:1d:3b:44:3d:50:
36:01:13:ba:31:ca:12:a0:1e:18:3f:e6:9f:34:1a:
52:d6:fe:60:9f:f9:5f:be:2d:9d:7e:7e:d1:6a:a4:
57:04:86:15:73:f9:f4:22:98:fc:4b:c7:67:02:89:
e7:42:32:62:b4:1b:54:7b:4c:00:a3:25:05:42:04:
44:ab:3b:77:88:71:fd:02:88:f4:7e:45:50:2f:d4:
a0:43:93:cf:9d:7d:67:6b:1a:ad:39:f6:1d:94:4a:
82:2e:91:a0:63:35:86:ab:66:0d:85:ff:68:3a:d5:
c3:fa:be:5f:5a:14:ce:28:f7:e1:d6:c6:19:ac:7e:
1f:ce:73:3f:23:d6:bc:7a:be:7e:82:71:77:2f:fc:
1c:ad:10:f0:66:c0:98:a2:77:90:b0:2a:9e:83:97:
4e:1f:16:43:c5:f5:d8:c3:e1:02:7b:6e:ac:0b:f8:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:14:82:18:EC:BE:4E:22:F2:28:DC:98:CD:5E:3A:AF:CC:5D:B2
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4e:ed:ea:e8:7e:5c:3a:07:6b:b9:69:69:68:d3:9f:07:fa:
39:ed:ed:13:2b:15:e2:02:cf:5c:bc:0c:87:42:3f:e9:7a:0d:
32:30:84:12:64:38:f0:8a:3f:dc:6e:8d:27:f6:cb:85:91:37:
81:84:ac:1b:48:c2:15:4b:f7:10:07:94:e3:46:45:6d:b0:89:
6d:a9:20:73:00:60:cc:4f:b8:b0:0b:cb:40:73:82:25:42:b1:
7f:c8:b0:29:5c:4c:46:94:b3:3e:b7:1e:fd:b9:db:7c:83:b3:
de:f2:18:a7:39:c8:5f:99:15:ed:89:b9:30:b7:0e:51:3c:36:
ad:60:55:74:08:02:41:18:c5:e8:ba:38:30:90:01:0e:aa:8a:
bb:6f:44:93:c8:cc:55:95:14:2a:c6:8e:1c:44:41:85:a3:5f:
c8:d7:a3:5e:a5:15:4c:4e:39:9f:77:4c:02:2b:fa:a2:08:2e:
7d:9a:2f:f6:75:f1:e1:4c:84:76:89:21:72:7a:50:5a:42:ca:
a1:5f:b1:ec:fe:6a:9b:eb:07:9e:22:ab:07:c2:7f:86:39:e1:
22:b1:32:2f:e2:70:47:3d:d9:d5:ee:95:26:08:48:dc:7f:f2:
a0:fd:31:d0:8a:ae:89:a5:d6:21:aa:42:af:23:38:56:ff:3b:
f1:ed:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:43 2026 by rpki-client