Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: DhQmR145xgMp+Qb7x2C2wn4Ibt02TZ3Thr9/Hj7A+yc=
Subject key identifier: 4C:0C:1B:95:92:19:C0:C1:50:D8:ED:CA:CF:11:D9:0F:FD:C2:17:D8
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019D27DF614320B0D3A9272E40133642C153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: JtUB764JyNY1XXOE1_eNW3xG0iQ.roa (hash: s3szDIQwIbSkPF/zR+p/071/+sqN8uUP7e4YiFiIuRs=)
2: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: 2TKEN3da3eHJv2X8q4i/d4DFM4uFjQO8mb5LgOawtmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:61:43:20:b0:d3:a9:27:2e:40:13:36:42:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=4c0c1b959219c0c150d8edcacf11d90ffdc217d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:e7:12:30:bc:a9:51:0a:c2:95:87:2b:7c:
73:6a:fe:ce:96:36:55:a5:d2:5b:49:78:4e:aa:f9:
ba:00:03:8b:77:6a:29:8a:a6:03:cf:7a:ee:44:ee:
e9:66:00:bd:fb:9c:e0:31:64:f0:6a:6d:58:bb:63:
73:90:6b:7b:4b:50:44:13:5b:4c:5f:16:53:2f:85:
e0:80:37:2b:91:34:94:e3:5b:a7:6b:80:f9:29:fe:
ae:13:1b:cc:4c:47:74:ef:3c:cf:c1:47:4c:56:f8:
e3:7d:11:12:63:63:25:f2:6d:3b:2c:f3:6d:1d:d0:
dc:d4:19:48:a1:28:39:aa:05:15:bb:aa:c2:d9:01:
0f:b6:3f:0e:d6:65:29:e2:4d:34:9c:e0:bc:56:43:
ed:e6:4a:c2:1d:6f:0f:3e:5a:05:cc:41:1e:20:6b:
a3:11:2e:64:28:f6:be:b6:e5:8c:7b:c8:f5:04:c6:
84:8a:88:aa:c4:b7:68:cb:a4:94:06:a4:ea:fc:8c:
e6:ef:98:11:51:b8:6a:ae:9b:6d:ae:42:ad:5c:c6:
2f:27:6c:fc:23:25:45:29:55:c4:c6:63:ae:c0:99:
8d:4d:81:91:64:cf:83:e2:95:9e:33:b3:0e:97:45:
30:06:c5:f8:69:44:d3:80:07:c1:72:9b:56:bf:a0:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:1B:95:92:19:C0:C1:50:D8:ED:CA:CF:11:D9:0F:FD:C2:17:D8
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:02:37:93:27:3e:ce:d5:9e:50:e9:20:dc:3d:7b:9a:37:
38:54:da:f7:83:34:14:b4:1c:fd:04:d0:27:0b:0a:f1:ce:77:
82:4b:48:0e:a2:4c:43:17:31:40:36:94:9a:cd:a7:bf:7d:35:
00:17:da:7d:48:23:7c:63:35:fd:e1:80:57:05:c0:4d:37:cf:
70:8f:c6:18:74:b0:e0:c6:74:71:c4:27:c3:18:ab:d9:cc:c1:
c2:12:0a:d2:af:e0:40:67:12:2e:37:1b:96:4e:5b:75:23:c7:
2e:38:8c:50:4a:fc:0f:40:f2:41:64:ce:0e:f2:b8:e3:1d:f2:
48:e8:24:99:ed:1b:01:65:7a:4d:df:0c:2f:7e:b6:96:b5:e5:
5b:ea:58:d9:0b:45:8f:47:84:df:bd:3d:ca:dd:0d:0c:73:65:
1a:b5:21:b2:fb:37:1c:a5:3c:9b:c5:6a:a6:5b:45:8c:d1:86:
25:4a:4d:a4:34:2a:b8:11:cd:eb:47:5f:30:57:08:79:8c:ec:
2d:70:90:86:f2:27:b2:31:05:ca:95:03:c5:b4:4b:65:4b:0c:
08:9b:65:3c:ee:95:5c:7b:8c:66:05:1b:93:cc:f4:fb:39:02:
fc:e2:fa:9d:eb:b8:8e:ba:98:23:95:bf:75:dd:e5:7e:81:dc:
22:57:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:57 2026 by rpki-client