Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier: hgFUtzyzgVBINMPMhq8HUv0bqJB7Y4h146emXVqTOCg=
Subject key identifier: 04:FB:3D:75:03:63:4F:C4:5D:BE:A2:C8:82:EF:14:E6:47:A9:1D:09
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019F92113B6626C4A38FE13F60AE1A13CC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number: 02AD
Signing time: Fri 24 Jul 2026 03:00:30 +0000
Manifest this update: Fri 24 Jul 2026 03:00:30 +0000
Manifest next update: Sat 25 Jul 2026 03:00:30 +0000
Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: AjFem03UmgDJOlLPWn7GVZsb7wZKuu5HEmimKoCj/Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:3b:66:26:c4:a3:8f:e1:3f:60:ae:1a:13:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Jul 24 03:00:30 2026 GMT
Not After : Jul 25 03:00:30 2026 GMT
Subject: CN=04fb3d7503634fc45dbea2c882ef14e647a91d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:e8:29:46:24:c7:b2:13:7e:e7:53:1e:0f:
b8:1f:bc:d7:a1:b7:22:7f:0f:ae:68:3f:c5:64:14:
4f:16:77:8f:81:db:a9:25:87:b7:81:e0:6d:85:e9:
74:c8:82:31:ae:ea:7b:38:5b:64:21:7c:43:19:06:
f9:7a:cd:3e:36:29:ea:be:6d:9d:31:c9:8e:0a:4c:
5d:32:90:30:e8:d8:f1:c9:55:fb:c3:4d:0d:b2:27:
a4:f1:53:17:fe:eb:74:4d:9b:4c:2c:f7:2c:0b:0b:
03:5a:c8:b8:d8:f4:c0:3f:85:21:4b:12:8f:ad:46:
ff:b9:e6:be:6c:c2:19:0b:12:55:8d:32:1a:63:3c:
7f:a2:8d:d7:c3:59:69:86:90:10:0c:15:a3:2c:31:
64:3a:4d:74:6d:57:50:a1:24:68:cf:29:69:68:cc:
fa:2a:17:00:32:17:b9:0f:77:25:da:0f:cc:0e:23:
84:61:64:d6:3b:3e:8f:cf:69:5f:20:30:42:df:8a:
ba:04:5d:75:50:a0:73:6d:cb:16:00:5c:01:ce:f7:
28:0e:72:3b:39:11:08:05:c0:e5:06:66:fa:3a:bf:
04:47:1b:a7:d0:5b:34:41:0e:27:4c:0e:d9:f8:f9:
60:ad:b7:75:45:44:7e:5f:9d:ca:1b:22:39:b3:1b:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:3D:75:03:63:4F:C4:5D:BE:A2:C8:82:EF:14:E6:47:A9:1D:09
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:37:0f:1a:11:b2:ce:ef:3d:2c:42:71:7e:c9:99:58:35:
be:17:8e:f1:90:93:25:77:27:c9:df:51:2a:ba:0b:ba:8e:af:
15:b5:56:bd:fa:a0:b2:d9:51:88:eb:51:64:10:c9:13:04:e8:
a1:4c:88:49:8a:1c:b3:25:de:eb:fe:e4:ab:43:eb:b7:95:d1:
3a:20:b7:f4:74:5f:1b:51:e9:28:c4:59:66:ae:f9:64:86:c4:
7c:79:0b:81:26:a0:56:d8:75:62:6d:2e:f1:c3:26:bf:a1:bd:
f5:eb:cb:b4:06:bc:04:f7:71:b3:4e:5b:f9:a8:3c:36:62:69:
a3:b0:e6:f7:06:87:4c:72:64:f1:71:c8:d7:12:7d:10:62:56:
84:8c:42:2b:aa:f1:92:1d:7a:a4:1e:f1:ba:e8:4b:9a:36:ea:
bc:1c:79:ea:89:f8:17:67:04:56:64:f1:e0:48:3d:f8:46:ac:
50:91:91:36:bf:09:9d:48:5a:f9:d0:89:86:18:ee:a9:e2:0b:
17:94:4e:69:e0:54:a6:1c:60:93:9a:b4:39:f6:ab:20:41:78:
de:0e:39:ff:98:43:82:9a:23:08:a0:68:03:2f:1e:6b:d8:59:
f4:2b:9d:27:31:54:49:14:0a:57:33:c3:6b:b8:7f:83:d4:a9:
fa:ad:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:59 2026 by rpki-client