Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: mVceqzM4cv95aRJ3e0OFkM3ZhMuFkY8ShK3RJbj9y7o=
Subject key identifier: 9E:D1:77:A3:F8:C8:78:18:8D:61:10:03:E9:F2:AB:F4:B5:AE:BD:BD
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A1DB021E2EB2F64CEC18D5C1450914F964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1AF2
Signing time: Sat 14 Nov 2026 17:01:51 +0000
Manifest this update: Sat 14 Nov 2026 17:01:51 +0000
Manifest next update: Sun 15 Nov 2026 17:01:51 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: IvTiPQ/HXmVLDB1Rvwkbdq5nlNPFBDtWTi9g6BAQKmw=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:1e:2e:b2:f6:4c:ec:18:d5:c1:45:09:14:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Nov 14 17:01:51 2026 GMT
Not After : Nov 15 17:01:51 2026 GMT
Subject: CN=9ed177a3f8c878188d611003e9f2abf4b5aebdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:1b:ba:34:26:80:9b:d9:23:37:d5:57:07:
35:2c:ff:17:5c:58:17:e0:be:1e:6c:85:fa:47:10:
c0:ae:8f:a5:ea:45:f2:8c:76:46:90:2a:fd:74:91:
5c:98:ef:90:8b:5b:37:2b:04:fe:7b:92:ad:91:f9:
e8:5d:3b:a2:8e:8a:e8:71:dd:4c:39:f1:c8:69:70:
7e:b9:3d:60:30:b1:3d:6c:08:61:01:e3:6a:77:81:
59:f9:43:8a:ee:0d:b8:91:dd:16:a1:8b:39:21:bb:
83:3f:4f:90:f4:d4:10:0c:a3:55:6b:be:64:bc:76:
d4:e9:71:b2:86:ff:05:d6:4a:f1:19:82:23:3c:f6:
04:fe:0c:aa:04:25:6f:0e:97:94:db:f8:59:a5:c1:
0f:42:1e:19:53:31:a3:62:fd:d5:7b:a3:40:ef:96:
d8:38:76:24:25:6e:9f:5f:29:c2:06:f8:14:13:07:
10:14:e3:84:cf:a5:0a:d9:fb:0b:c9:e2:92:26:00:
05:d7:34:d8:3a:29:04:63:83:8a:27:b1:0b:a8:a9:
53:9c:55:4b:41:a3:9c:98:22:54:e9:25:e5:3c:04:
52:fd:3e:37:51:22:5e:d3:b8:a5:e0:a4:26:b1:a7:
cd:b7:7e:4f:89:ff:07:3a:8c:8b:a8:3c:b1:25:b0:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:77:A3:F8:C8:78:18:8D:61:10:03:E9:F2:AB:F4:B5:AE:BD:BD
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:28:7d:45:ed:bc:d9:08:66:b4:bb:c5:ef:2f:8d:27:0e:b8:
79:0b:4e:3f:82:11:3a:c7:92:5d:a3:8c:0d:6f:31:ce:83:ab:
2b:2d:a8:fc:4a:db:2e:c9:c4:5a:aa:0e:dd:b9:0f:19:77:2f:
77:d9:3e:f3:41:4f:23:09:4a:68:6d:fe:49:a1:69:4b:8e:f2:
86:27:2e:85:c6:6c:63:a1:d7:6f:85:7f:a5:49:32:77:35:5f:
b6:7f:21:12:6e:98:04:90:62:05:80:72:4a:08:2f:03:24:d0:
74:eb:ef:88:4d:38:71:65:1d:6e:13:c4:24:ca:49:7b:46:82:
ac:8b:19:f0:26:eb:3f:ba:15:95:50:82:64:17:be:f2:02:1c:
9e:60:a0:7b:ea:53:4e:92:40:87:31:18:57:a5:7e:f2:63:18:
a7:0e:31:89:8f:02:8f:7e:c0:35:5a:f1:15:e1:55:1e:fa:b3:
27:d2:36:38:1f:71:d6:27:3e:74:a6:13:ab:7a:5a:e5:dc:75:
94:83:6b:a3:cf:91:b4:1b:7e:16:86:f6:52:15:c0:64:db:6b:
75:78:45:4b:33:92:ec:99:e1:29:34:47:33:ee:19:a0:f3:bf:
28:62:e1:5e:6c:3e:f7:a7:cb:f3:9f:db:f5:fe:11:69:95:a2:
8a:87:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:06 2026 by rpki-client