Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: 07RDdhGn4MzwM0Fx3EsLZxOEjQ1Z4uPEb5eN/hA1Ny4=
Subject key identifier: D8:25:7E:88:51:4C:2F:F1:73:E6:9F:C8:E0:B5:16:72:0D:0F:A7:8C
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019D27E044A29AFF63AB4EFA9871EF55676B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: EeYllcgaEoWM/gHV8YlW7k88g97HAkCvylCpI/1XLM0=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:44:a2:9a:ff:63:ab:4e:fa:98:71:ef:55:67:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=d8257e88514c2ff173e69fc8e0b516720d0fa78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:6c:32:13:fd:e6:db:2b:c6:00:f2:37:00:
47:88:f9:bb:ac:52:5e:64:bd:43:ea:36:81:0b:26:
63:5f:f6:01:52:e1:e3:bc:67:b1:33:05:a9:4b:e2:
49:b7:2c:67:d7:94:c1:22:be:98:92:29:62:f3:a0:
c0:d1:13:0c:bb:b7:0e:d2:28:9a:fa:cb:54:d2:6c:
1c:d7:59:c8:71:a7:aa:d2:a3:a2:1f:3f:8b:3b:06:
f6:6e:13:4f:42:8a:be:a9:e7:4e:d4:08:9c:03:1d:
dc:f0:9c:31:7b:b2:a4:02:12:fa:d4:89:50:4f:f3:
f1:a3:0e:e9:f6:53:40:93:5d:c1:36:84:91:d9:47:
44:de:4a:cf:93:8a:ee:a7:46:9b:5f:62:0f:a5:39:
01:65:ec:a4:be:3b:cf:4d:9d:3f:da:01:3c:f0:78:
13:8b:68:66:10:14:3c:8c:0e:ec:cf:ee:f4:63:bd:
1e:3e:1c:af:6a:41:3c:8f:20:5d:98:04:2a:fe:dc:
8f:92:01:26:5c:60:50:30:74:43:65:e3:b4:88:d3:
85:50:cd:af:c6:7e:fe:8d:75:e3:8e:3e:f6:b3:85:
ae:38:2f:c8:06:6f:0c:c0:d3:98:7c:37:64:02:7b:
43:c9:7d:06:13:f6:03:3b:15:5d:26:4c:fc:33:79:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:7E:88:51:4C:2F:F1:73:E6:9F:C8:E0:B5:16:72:0D:0F:A7:8C
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:71:33:f4:df:c7:d4:7a:a4:0d:64:3a:0b:10:f6:63:b1:
12:50:91:2e:74:01:02:af:df:f8:ed:da:0d:93:2c:86:3d:ad:
16:39:ff:bb:ab:80:9b:2a:1d:9e:d7:02:7a:98:6f:66:a3:e5:
b1:f7:1b:db:1a:8d:3b:01:59:82:e8:0b:22:40:f9:81:ba:cb:
61:1b:27:f2:37:c9:bb:fc:5d:d5:ad:e7:d2:0b:89:83:e4:6f:
38:c2:30:6a:47:17:11:6d:b6:7d:69:6a:77:0b:d8:f0:65:83:
28:b2:66:35:7a:e3:25:3a:ea:94:56:b4:83:bf:1b:f2:8a:f7:
a1:6f:54:5f:03:93:6b:1f:f9:bc:aa:88:97:34:80:be:88:26:
63:6f:de:18:00:40:1a:06:a9:cf:ca:38:41:ea:c5:12:0f:85:
4e:a3:3d:e9:d7:4f:d5:80:fc:e6:1d:a5:b6:06:8a:ae:f6:9c:
cc:25:41:30:38:7d:ff:37:0d:9c:b8:1b:40:de:43:90:89:29:
92:ab:d4:aa:26:1b:96:97:49:ea:f2:95:41:0d:f0:6d:5f:d4:
29:19:3f:66:4b:ea:c6:9b:ec:9e:e5:e6:99:76:e1:5a:d2:5c:
46:fd:e6:3a:c9:b9:75:f8:ac:47:e1:db:c0:3c:69:62:22:ea:
cf:84:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:16 2026 by rpki-client