Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: G+h8i+arZrJXERRR5HPaJ/s0gPDPe3rb5IIQS7mXdJc=
Subject key identifier: 0D:6A:1F:79:99:36:FF:45:DF:F6:2E:F6:A7:D4:28:CA:4E:DB:86:E7
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 01A0FB34443E6395861231F945F494F876C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 0368
Signing time: Fri 02 Oct 2026 06:01:41 +0000
Manifest this update: Fri 02 Oct 2026 06:01:41 +0000
Manifest next update: Sat 03 Oct 2026 06:01:41 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: o2bUsDPf5iLH0j8IThpafCdKaTqqxP7rP7aiK9Ok4VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:34:44:3e:63:95:86:12:31:f9:45:f4:94:f8:76:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Oct 2 06:01:41 2026 GMT
Not After : Oct 3 06:01:41 2026 GMT
Subject: CN=0d6a1f799936ff45dff62ef6a7d428ca4edb86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:bd:ea:3a:91:7c:2b:a9:ae:7b:b9:ff:48:
a2:c3:66:8c:c4:f9:ed:7d:6d:ac:74:63:a3:75:b5:
81:82:4c:38:68:48:cc:a7:64:29:9c:cd:f2:f7:65:
e8:3a:b7:33:9b:d4:b3:a8:cb:03:25:18:cc:3b:ac:
38:8d:ad:db:84:5e:59:4d:12:b6:2e:de:a5:5f:7a:
2a:b8:c2:52:af:1f:02:fd:9c:96:04:2f:19:db:d6:
55:61:ff:1a:17:42:81:42:c5:c0:ae:31:c9:d8:0b:
7e:66:32:e3:02:81:1a:c0:e7:8e:7f:8d:8b:5c:0d:
22:88:a1:89:c7:4e:41:8b:6c:c9:a6:8d:54:64:ba:
df:5d:b2:cf:ff:79:5d:8b:26:4f:5b:23:c8:5b:7d:
45:a6:d6:be:48:c8:b0:73:14:79:08:27:b3:e1:d1:
b5:ce:d2:3a:25:b9:59:08:46:f7:00:b5:05:38:c0:
f4:87:62:8d:85:6f:14:7a:43:fe:d4:b6:a5:64:26:
3d:82:23:e4:04:6a:23:c8:af:78:5d:8c:f2:de:a4:
c8:4e:3d:1c:d6:cd:50:f1:6a:6b:8f:21:d2:46:02:
11:51:18:62:9d:d3:f1:18:88:8a:a6:7a:33:29:7b:
e3:7a:48:2b:0e:50:35:58:f8:4b:bb:53:49:b6:5c:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:1F:79:99:36:FF:45:DF:F6:2E:F6:A7:D4:28:CA:4E:DB:86:E7
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:86:c3:0b:f3:37:3c:26:f4:b0:01:05:08:ea:49:9d:e2:38:
4f:ea:6a:aa:ad:a0:ba:80:4b:73:aa:1e:99:cf:8b:cb:cb:4e:
c3:48:76:12:0c:3d:6f:d9:70:54:0e:d2:e1:2d:d9:ee:a0:b6:
27:c8:b9:a2:46:f0:aa:af:d5:33:c4:35:2f:45:76:94:7c:1e:
a6:06:4d:0f:12:13:19:18:92:bb:48:f7:6d:a7:00:52:82:bd:
a5:5c:c1:4b:7f:a3:10:87:5c:66:81:91:d3:e7:35:b1:de:a8:
ef:4a:fb:cb:dd:8f:f2:79:2b:fa:39:6d:08:69:1d:9e:09:06:
6d:8a:2f:f5:a0:26:18:d1:a4:ea:d4:04:d4:c7:21:b0:88:88:
5e:a2:e7:b1:e4:a7:bc:b8:a1:15:75:4c:ec:24:b5:17:08:4b:
1e:43:08:ee:df:43:85:43:66:f3:e6:ed:b1:c2:f9:70:a9:d0:
48:4f:35:73:72:d6:1d:a4:f4:43:a8:4e:b1:eb:3b:84:f6:f8:
0a:2c:44:4f:8a:3e:6a:e5:2a:86:ce:8f:90:7e:39:bc:aa:91:
af:c2:3a:bf:fb:b6:18:66:64:06:12:8a:f0:66:a6:e3:d0:51:
90:35:03:de:5c:95:a0:fb:02:3a:33:a4:04:bc:67:27:dc:bc:
af:d9:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:56:55 2026 by rpki-client