Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: gU3gu/E343w5PKUwNuh+/FQhfbLCEZFp0MFdkf+aGxE=
Subject key identifier: 6C:CA:B6:F7:43:5B:25:CB:D9:1B:AA:DE:68:33:A1:4A:47:39:17:50
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 01A0F18B97130B1CFB137C1B9B92474A7285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 0363
Signing time: Wed 30 Sep 2026 09:00:52 +0000
Manifest this update: Wed 30 Sep 2026 09:00:52 +0000
Manifest next update: Thu 01 Oct 2026 09:00:52 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: 3aVYNv20elIr6MqeBcICji9cAlGniWk1Yf3l/WrBnEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:97:13:0b:1c:fb:13:7c:1b:9b:92:47:4a:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Sep 30 09:00:52 2026 GMT
Not After : Oct 1 09:00:52 2026 GMT
Subject: CN=6ccab6f7435b25cbd91baade6833a14a47391750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:3b:3f:c3:fd:d3:94:96:03:32:9e:4c:fd:
ed:01:96:7d:02:bb:57:62:93:db:58:fd:32:99:58:
9b:14:a3:e1:3b:2f:d8:cf:4b:d6:e2:a3:b8:7e:59:
7b:ce:6c:1d:5c:a3:67:17:e8:e9:3c:f8:aa:26:e2:
b7:eb:ae:34:94:8c:21:08:27:af:4d:3e:aa:b8:43:
22:08:1e:eb:d4:7a:25:11:08:75:16:77:aa:73:86:
7a:80:f4:d1:d6:bf:85:e3:99:79:2a:db:68:8c:0b:
7a:31:00:f7:fe:21:77:f5:c9:15:7e:d6:f4:9f:c2:
47:d1:7c:23:4f:24:d3:75:67:9e:c5:d2:dd:b1:ba:
42:3d:2a:86:b6:75:0d:2c:cc:bc:44:b7:a7:54:9e:
dc:d4:ef:ac:9b:2c:cf:00:4f:60:0c:68:f1:68:2e:
f6:73:bf:24:6c:39:7e:44:27:93:a1:85:b1:ac:dd:
50:c2:42:c5:0e:64:a1:6e:a4:24:ce:b3:65:6d:18:
72:1e:99:c7:64:a0:50:11:50:d3:48:0b:a2:cb:6d:
b0:66:09:6f:70:0c:62:86:56:47:f3:39:44:5d:f6:
c5:c8:ff:75:86:b4:67:5e:05:aa:67:73:fe:ad:92:
08:22:85:d4:14:cd:01:3d:ea:10:91:6a:28:b0:fb:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:B6:F7:43:5B:25:CB:D9:1B:AA:DE:68:33:A1:4A:47:39:17:50
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:c0:49:0c:ec:32:80:c1:9d:8c:d7:e1:3b:88:51:f6:fd:
00:3d:b7:f8:76:2c:8a:3e:98:f6:a9:5f:37:7e:a8:52:09:e8:
a2:6b:19:81:e7:b9:ac:21:f2:9c:40:62:a6:4f:73:f7:fe:10:
ec:90:e0:14:8f:b8:c4:6f:58:45:70:97:ef:e8:6f:b8:2d:69:
ec:59:4b:22:59:b5:a9:df:9f:aa:19:e6:50:0e:0e:b0:34:d1:
1d:f6:53:e5:30:33:27:ab:20:ca:53:2f:80:95:3e:47:9d:11:
43:c6:ef:3a:56:51:6f:78:c7:64:00:7c:3a:50:64:1f:88:eb:
bc:c5:58:81:cb:05:28:17:3c:91:8a:4b:fc:07:3c:3a:6c:f4:
b3:fb:d8:8a:ab:4e:b9:41:f0:44:19:6d:f6:24:72:da:3a:f5:
ee:ec:9e:6f:26:60:20:62:90:9b:97:0b:6e:e4:13:a1:b7:43:
92:da:ff:65:24:da:d2:04:3f:7f:0f:51:c2:44:48:a6:8e:c2:
17:cc:c4:dc:e9:b9:49:45:2f:f3:2d:61:87:95:93:49:57:e8:
49:4e:bd:fd:ce:39:76:ec:05:db:2b:8f:4e:7f:77:34:28:ee:
65:9c:50:88:3a:ec:32:4c:38:93:55:4a:4d:71:ef:ba:1f:a2:
0b:d3:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:48:08 2026 by rpki-client