Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: XADIxWLNEBCLjEJRRdJxdE1jS1u+THfwHBaKZd8ww4s=
Subject key identifier: 44:7E:EE:03:47:F7:55:06:69:DD:E8:56:71:BA:23:54:BF:8F:48:32
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019D28169E322726D6268EA6ED5A536620CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 016D
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: ugSNvwFy8D63MdXmpzZY16H9H/U//XY8TJ1FMSq7TPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9e:32:27:26:d6:26:8e:a6:ed:5a:53:66:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=447eee0347f7550669dde85671ba2354bf8f4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:b4:aa:89:f5:f5:c7:2a:6b:6b:2a:4f:f3:
d7:82:58:74:09:16:22:e1:ab:d3:ea:a1:39:c5:67:
4c:7f:b5:a9:a0:51:40:3b:a1:ba:7b:0e:3c:60:28:
59:7a:93:27:7d:32:29:4f:1e:c1:7e:ba:29:be:e3:
64:84:f8:85:fb:15:92:e2:37:2a:0a:6c:aa:ff:55:
2a:8f:bb:44:22:69:6a:70:e4:63:7c:5b:68:e0:f0:
ec:0a:56:0d:1a:fe:d4:1f:f4:6c:8b:b2:2d:8d:4a:
3c:98:0f:18:44:19:ed:ce:3b:61:85:6d:ed:04:11:
ce:82:22:c5:cd:c2:34:a0:56:6e:39:8d:b2:55:05:
fe:87:19:76:95:88:25:e6:8e:e4:97:a2:ce:c9:73:
72:ee:a1:a8:a0:c9:43:a9:76:99:29:8f:d0:a0:d7:
43:b8:8d:d3:da:22:a3:32:d7:64:c7:83:ca:1e:f2:
82:6a:04:7c:43:ad:2c:33:66:44:8d:f0:b9:1c:d7:
e7:fb:50:7d:96:21:f8:95:72:e4:2a:32:52:c8:a4:
0b:96:dc:f2:98:d1:16:80:e8:34:6c:b9:05:20:9e:
5b:03:24:72:a0:5a:22:e8:22:6c:74:34:76:26:e1:
f0:32:68:73:7e:36:95:c9:a6:10:bd:9a:9d:c7:19:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:EE:03:47:F7:55:06:69:DD:E8:56:71:BA:23:54:BF:8F:48:32
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:74:2b:f1:0e:5e:bb:a5:32:0c:9a:fe:0b:60:f4:ce:1d:
4c:78:13:eb:1e:48:d2:d8:98:e2:bf:25:63:d6:7d:26:50:3a:
dd:c5:15:17:3c:0d:17:67:5b:3d:66:28:7b:5f:a3:59:20:b9:
db:63:31:11:26:ab:92:a8:9a:2c:b3:c6:87:8a:9b:d4:85:4d:
f6:d9:11:fe:41:53:84:66:13:8a:bd:27:f8:e8:3a:45:70:69:
89:c8:b9:fd:af:65:11:68:88:d7:23:50:91:42:72:93:0d:4b:
84:13:da:e0:97:18:74:70:e8:6b:02:d0:0b:ad:cb:14:97:0f:
23:32:03:79:a6:09:ad:44:53:c6:f2:a3:44:1b:24:4d:97:52:
35:9e:fb:d5:16:1e:43:eb:88:81:07:6c:eb:31:b7:2c:77:ef:
ad:dc:cc:3e:ab:37:20:41:0d:fb:15:9a:c8:5f:cc:1f:05:12:
81:41:03:2c:f3:24:59:02:f5:6c:89:db:91:54:16:57:62:9a:
5f:60:c8:21:41:21:33:0d:4b:21:9c:db:ff:b6:b1:20:67:d3:
a9:16:17:a2:3a:48:0d:df:95:d8:0b:fd:0b:55:af:62:ae:32:
0b:6c:93:f3:69:72:56:72:44:c9:f4:47:96:1b:78:7e:02:ff:
41:44:7d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFp4yJybWJo6m7VpTZiDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJhOGNjZjM0NWVlZjBkY2Y3ZDAxNTQ5MjA4MThmMzE5
YzI1ZjgwHhcNMjYwMzI2MDMwMTA0WhcNMjYwMzI3MDMwMTA0WjAzMTEwLwYDVQQD
Eyg0NDdlZWUwMzQ3Zjc1NTA2NjlkZGU4NTY3MWJhMjM1NGJmOGY0ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3a0qon19ccqa2sqT/PXglh0CRYi
4avT6qE5xWdMf7WpoFFAO6G6ew48YChZepMnfTIpTx7BfropvuNkhPiF+xWS4jcq
Cmyq/1Uqj7tEImlqcORjfFto4PDsClYNGv7UH/Rsi7ItjUo8mA8YRBntzjthhW3t
BBHOgiLFzcI0oFZuOY2yVQX+hxl2lYgl5o7kl6LOyXNy7qGooMlDqXaZKY/QoNdD
uI3T2iKjMtdkx4PKHvKCagR8Q60sM2ZEjfC5HNfn+1B9liH4lXLkKjJSyKQLltzy
mNEWgOg0bLkFIJ5bAyRyoFoi6CJsdDR2JuHwMmhzfjaVyaYQvZqdxxn2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER+7gNH91UGad3oVnG6I1S/j0gyMB8GA1UdIwQY
MBaAFCErqMzzRe7w3PfQFUkggY8xnCX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMt
ZTA2NmUwMDQxYTA1LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMtZTA2NmUwMDQxYTA1
LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnl0K/EO
XrulMgya/gtg9M4dTHgT6x5I0tiY4r8lY9Z9JlA63cUVFzwNF2dbPWYoe1+jWSC5
22MxESarkqiaLLPGh4qb1IVN9tkR/kFThGYTir0n+Og6RXBpici5/a9lEWiI1yNQ
kUJykw1LhBPa4JcYdHDoawLQC63LFJcPIzIDeaYJrURTxvKjRBskTZdSNZ771RYe
Q+uIgQds6zG3LHfvrdzMPqs3IEEN+xWayF/MHwUSgUEDLPMkWQL1bInbkVQWV2Ka
X2DIIUEhMw1LIZzb/7axIGfTqRYXojpIDd+V2Av9C1WvYq4yC2yT82lyVnJEyfRH
lht4fgL/QUR9MA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:43 2026 by rpki-client