Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: i97gXYPyYrfeLiIXAb24s2SW+P7vdgew3j39cXp8ez0=
Subject key identifier: A4:B3:2A:06:9B:65:0A:9E:21:7A:99:F4:F8:31:EB:2A:E9:05:99:57
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019E1D22987A445E54893CB3DDA564F2A7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 17:01:06 +0000
Manifest this update: Tue 12 May 2026 17:01:06 +0000
Manifest next update: Wed 13 May 2026 17:01:06 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: 39ECDM12mVq/+TkIsyFpRt+qHhOpMayur7BVEFg9mnw=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:98:7a:44:5e:54:89:3c:b3:dd:a5:64:f2:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: May 12 17:01:06 2026 GMT
Not After : May 13 17:01:06 2026 GMT
Subject: CN=a4b32a069b650a9e217a99f4f831eb2ae9059957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:43:fd:c3:28:e8:b7:c3:b3:6b:14:b8:c3:
6f:59:66:9f:d9:00:39:9e:a3:2d:0d:70:c3:bc:91:
30:54:aa:b1:6c:f4:ab:67:07:32:89:e4:04:b1:6f:
6d:31:f7:ac:c7:93:61:62:e5:b5:fd:b6:e5:7c:23:
87:d5:5e:78:49:92:35:70:c9:6c:e3:7e:9e:aa:03:
e3:86:40:fb:08:dc:27:12:ea:bb:c4:bb:92:76:ed:
57:b1:88:96:63:da:f7:58:5f:43:ea:b4:3d:5a:55:
7c:94:9e:3e:55:22:fc:8e:44:c2:0c:6c:ce:b5:12:
19:26:7d:c9:62:d6:6c:3c:db:ab:64:38:d8:d7:f1:
80:fa:57:48:4b:83:ea:01:4a:3e:c7:ea:63:48:fe:
ee:20:c8:c3:14:d2:8f:a3:81:a6:a7:18:96:6a:0b:
d5:ac:dd:91:00:86:ce:6e:92:79:d8:ad:7f:a1:de:
78:9d:ad:eb:3c:93:15:fa:c8:c5:8b:18:d0:18:36:
e5:26:57:34:b2:07:b0:ad:60:7a:3d:54:39:cf:56:
10:b5:b7:5a:3f:49:97:b8:5e:cd:33:5e:5e:75:8f:
f4:dd:73:f1:8a:09:35:c4:06:92:f5:43:8f:c6:90:
0e:ca:cf:0e:e6:91:80:56:49:31:90:af:0d:b7:3f:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:2A:06:9B:65:0A:9E:21:7A:99:F4:F8:31:EB:2A:E9:05:99:57
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:85:c6:1f:6f:31:2d:e0:e3:71:42:95:bb:38:f3:00:c2:dc:
be:32:1e:41:f2:f6:16:b1:3e:f6:67:af:37:ce:42:0f:e9:73:
14:59:9a:0d:67:00:c0:1b:d7:15:ec:aa:7d:50:71:99:5d:9c:
4c:b8:67:b4:1d:39:ed:b9:d4:2c:5d:7a:91:66:4e:b2:26:a1:
1c:09:59:b7:63:12:2a:94:89:f3:4e:a5:65:05:ec:32:f7:dd:
41:50:2f:06:c2:65:01:22:6a:39:01:f3:75:84:e1:cc:2d:df:
03:59:5a:25:ab:b3:4f:05:88:8e:2b:37:56:81:f3:ef:8a:b1:
a3:26:f9:53:c0:c4:32:fb:ea:9c:cd:a8:83:a4:92:fa:c3:c3:
19:7f:f4:3b:3c:f5:5a:2c:24:79:40:8c:65:56:c2:44:02:0e:
49:d2:56:97:d5:6a:64:c9:40:60:28:bf:19:74:92:03:54:a6:
40:2c:46:84:db:67:4f:df:76:a8:58:b5:ea:9f:9e:9f:9c:c2:
5d:c0:c8:91:7e:bf:4a:4d:92:bc:5b:1e:4a:fe:eb:b2:35:f5:
3e:08:c1:3e:c6:20:65:5a:25:75:e9:b0:41:1a:41:73:99:f4:
ca:6f:03:a1:b8:51:54:b6:3c:12:1a:bc:9d:c6:d1:2f:66:9c:
c8:29:41:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIph6RF5UiTyz3aVk8qfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi
MDc5YTYwHhcNMjYwNTEyMTcwMTA2WhcNMjYwNTEzMTcwMTA2WjAzMTEwLwYDVQQD
EyhhNGIzMmEwNjliNjUwYTllMjE3YTk5ZjRmODMxZWIyYWU5MDU5OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW5D/cMo6LfDs2sUuMNvWWaf2QA5
nqMtDXDDvJEwVKqxbPSrZwcyieQEsW9tMfesx5NhYuW1/bblfCOH1V54SZI1cMls
436eqgPjhkD7CNwnEuq7xLuSdu1XsYiWY9r3WF9D6rQ9WlV8lJ4+VSL8jkTCDGzO
tRIZJn3JYtZsPNurZDjY1/GA+ldIS4PqAUo+x+pjSP7uIMjDFNKPo4GmpxiWagvV
rN2RAIbObpJ52K1/od54na3rPJMV+sjFixjQGDblJlc0sgewrWB6PVQ5z1YQtbda
P0mXuF7NM15edY/03XPxigk1xAaS9UOPxpAOys8O5pGAVkkxkK8Ntz9NmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSzKgabZQqeIXqZ9Pgx6yrpBZlXMB8GA1UdIwQY
MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt
OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz
LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYXGH28x
LeDjcUKVuzjzAMLcvjIeQfL2FrE+9mevN85CD+lzFFmaDWcAwBvXFeyqfVBxmV2c
TLhntB057bnULF16kWZOsiahHAlZt2MSKpSJ806lZQXsMvfdQVAvBsJlASJqOQHz
dYThzC3fA1laJauzTwWIjis3VoHz74qxoyb5U8DEMvvqnM2og6SS+sPDGX/0Ozz1
WiwkeUCMZVbCRAIOSdJWl9VqZMlAYCi/GXSSA1SmQCxGhNtnT992qFi16p+en5zC
XcDIkX6/Sk2SvFseSv7rsjX1PgjBPsYgZVoldemwQRpBc5n0ym8DobhRVLY8Ehq8
ncbRL2acyClBAA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:10 2026 by rpki-client