Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: 8qAvXjaQ1f3NPPlwAYeFxsQ4MrG+6203FSoK4ieuMM8=
Subject key identifier: 41:60:76:CD:06:D8:39:65:D1:B4:50:06:EE:82:9C:7F:9E:EF:E8:2C
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019D25BABA8639B39B67C168C10887F9F839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:27 +0000
Manifest this update: Wed 25 Mar 2026 16:01:27 +0000
Manifest next update: Thu 26 Mar 2026 16:01:27 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: Ev/xHZrPGuDbES5b8rQkkJSJ/N9U6AkFgVjDNmvlxz4=)
2: OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa (hash: Gff4FAc0x1oRI71/96AW462cCchXrhxYJx69los4A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ba:86:39:b3:9b:67:c1:68:c1:08:87:f9:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Mar 25 16:01:27 2026 GMT
Not After : Mar 26 16:01:27 2026 GMT
Subject: CN=416076cd06d83965d1b45006ee829c7f9eefe82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:25:cd:86:5b:be:57:ab:f1:09:04:f9:48:
99:41:cb:34:fe:7b:23:19:a6:45:6e:67:d6:af:c6:
18:81:e6:46:9e:d3:bd:d3:58:34:c6:c2:4c:b4:6f:
1f:bf:f0:05:fe:f1:b9:11:dc:05:21:cc:20:d0:1e:
13:83:aa:b4:c2:93:55:1e:dc:b3:22:f2:8a:22:b5:
e5:07:98:26:17:5f:9e:95:83:e5:61:ef:38:7f:1f:
15:05:0b:b0:74:98:ad:71:2f:5c:d5:38:af:d7:dd:
20:8b:ca:de:4d:30:43:c6:30:fd:62:64:da:69:03:
6e:a1:f7:8f:7a:3c:38:7f:b7:a4:fc:3e:a0:78:ce:
a6:ae:98:35:9b:66:ac:b1:18:df:f1:10:bf:29:82:
02:c3:17:eb:df:92:62:85:79:c8:49:fc:69:95:b0:
3e:5a:2e:44:02:fd:75:a8:7e:de:6d:c6:88:7c:53:
4f:aa:31:7b:1f:7e:cd:d0:b2:3a:26:f7:94:16:c6:
74:31:39:4a:77:e9:25:a5:e2:4b:35:22:78:89:16:
58:31:9f:0c:b1:c3:00:8a:d3:a4:37:96:36:9f:4a:
60:cd:eb:22:c1:d6:04:47:71:07:c0:07:47:dd:f6:
36:d7:f9:23:0f:b0:a5:43:6d:da:90:fb:8a:70:d3:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:76:CD:06:D8:39:65:D1:B4:50:06:EE:82:9C:7F:9E:EF:E8:2C
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ad:5e:f1:78:df:cb:d6:fb:46:9b:0e:28:5f:8f:ca:4a:a1:
c5:f5:36:bc:f8:60:20:24:b5:56:db:73:a0:09:1d:fe:fa:a4:
40:8e:e1:52:32:4b:99:05:ae:2a:6b:c0:91:c0:a8:46:92:90:
72:79:0a:9c:05:41:b8:1c:ef:f7:30:a2:c5:ea:6a:89:30:a0:
f9:c4:d7:0a:ce:05:76:60:0a:c5:9f:9a:5f:61:a6:c8:84:16:
79:f4:d8:cf:bc:af:68:d8:9d:2c:3b:9c:62:c0:8e:ee:00:16:
67:48:12:d9:30:ec:d8:b9:3e:22:96:e8:d4:c6:55:78:5d:95:
10:09:b0:51:b6:e4:1c:41:96:6d:df:a1:66:c5:4e:71:c7:93:
a6:b3:e6:cf:16:d9:fc:c5:88:dd:e1:40:87:e2:ee:c4:a8:75:
41:48:6f:1d:cf:a9:24:82:bf:de:a3:2b:ed:d0:4d:b0:c1:50:
ce:fd:37:2f:41:74:86:28:70:df:8c:85:d5:15:74:f7:bc:6d:
43:50:39:d4:fe:9b:fe:b7:c0:36:34:15:2b:a8:1f:5a:56:af:
4e:46:5b:94:a5:0b:f1:02:3f:dc:40:67:4a:ae:80:49:64:99:
85:c2:fe:09:fc:0f:c4:1f:5a:95:02:26:86:5c:aa:69:c4:82:
3f:28:44:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lurqGObObZ8FowQiH+fg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjYwMzI1MTYwMTI3WhcNMjYwMzI2MTYwMTI3WjAzMTEwLwYDVQQD
Eyg0MTYwNzZjZDA2ZDgzOTY1ZDFiNDUwMDZlZTgyOWM3ZjllZWZlODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ4lzYZbvler8QkE+UiZQcs0/nsj
GaZFbmfWr8YYgeZGntO901g0xsJMtG8fv/AF/vG5EdwFIcwg0B4Tg6q0wpNVHtyz
IvKKIrXlB5gmF1+elYPlYe84fx8VBQuwdJitcS9c1Tiv190gi8reTTBDxjD9YmTa
aQNuofePejw4f7ek/D6geM6mrpg1m2assRjf8RC/KYICwxfr35JihXnISfxplbA+
Wi5EAv11qH7ebcaIfFNPqjF7H37N0LI6JveUFsZ0MTlKd+klpeJLNSJ4iRZYMZ8M
scMAitOkN5Y2n0pgzesiwdYER3EHwAdH3fY21/kjD7ClQ23akPuKcNOdxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFgds0G2Dll0bRQBu6CnH+e7+gsMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq1e8Xjf
y9b7RpsOKF+PykqhxfU2vPhgICS1VttzoAkd/vqkQI7hUjJLmQWuKmvAkcCoRpKQ
cnkKnAVBuBzv9zCixepqiTCg+cTXCs4FdmAKxZ+aX2GmyIQWefTYz7yvaNidLDuc
YsCO7gAWZ0gS2TDs2Lk+Ipbo1MZVeF2VEAmwUbbkHEGWbd+hZsVOcceTprPmzxbZ
/MWI3eFAh+LuxKh1QUhvHc+pJIK/3qMr7dBNsMFQzv03L0F0hihw34yF1RV097xt
Q1A51P6b/rfANjQVK6gfWlavTkZblKUL8QI/3EBnSq6ASWSZhcL+CfwPxB9alQIm
hlyqacSCPyhEdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client