Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: igYTmNl9KftcOTDIksTOOqs/d8nQJ+/NHSoq8dzpb9g=
Subject key identifier: 82:CD:90:26:1B:D7:F9:15:53:C7:1D:81:75:07:45:97:88:A4:2B:07
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01A0DFF3BBF5305A18465D905826F7727008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 23:01:27 +0000
Manifest this update: Sat 26 Sep 2026 23:01:27 +0000
Manifest next update: Sun 27 Sep 2026 23:01:27 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: l/u58kZoDatAupZPHKUghTQJBSbNvg9+O8EL1q+a534=)
2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:bb:f5:30:5a:18:46:5d:90:58:26:f7:72:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Sep 26 23:01:27 2026 GMT
Not After : Sep 27 23:01:27 2026 GMT
Subject: CN=82cd90261bd7f91553c71d817507459788a42b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:72:39:33:8a:da:2c:82:f5:75:06:5f:27:
cb:2c:34:d2:65:45:08:d0:e7:fc:04:2c:69:68:05:
ec:74:f5:9e:fe:5c:7c:11:e7:4d:e0:26:9e:dc:ca:
f0:0d:54:56:76:ca:0a:cf:95:7c:09:4c:48:38:08:
03:e9:95:55:6a:ab:59:ef:92:05:21:98:da:ce:97:
c4:bc:49:8e:c3:ed:28:c9:69:0e:d6:a1:a0:73:42:
5e:83:4b:9c:fb:70:51:1e:ca:d0:78:62:6b:7c:51:
39:81:02:f1:d0:6b:a9:e7:fe:de:f8:81:e1:a8:cb:
28:7a:c6:39:dd:94:f3:46:70:af:32:c1:28:6b:69:
c9:0c:5c:f8:f7:80:06:ae:c8:e4:21:18:1a:f0:01:
35:3c:7f:e8:7e:a6:33:79:b2:c3:3d:03:57:45:f9:
f1:91:0a:02:63:a8:7f:ae:b5:76:c2:a2:e2:58:4a:
a5:08:e8:cb:f4:e5:cf:f0:10:e5:ba:07:5b:a2:2c:
f2:c3:a1:22:0b:db:fb:a4:2d:d3:53:39:c4:96:d9:
3e:af:63:9c:f5:5e:6a:e0:3c:a3:2d:41:30:08:bd:
a9:b5:03:6e:64:03:03:98:40:08:7c:3c:e2:09:9c:
2d:33:af:74:45:1f:ec:a1:e9:93:aa:52:57:9e:0a:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:90:26:1B:D7:F9:15:53:C7:1D:81:75:07:45:97:88:A4:2B:07
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:4b:d6:96:7b:e8:92:57:a5:67:50:3f:de:79:e7:70:ef:
ac:1b:ba:f3:cb:e7:2c:87:d1:70:5b:d4:71:65:cc:21:d9:f3:
82:2f:ed:e0:ed:04:f6:dc:fe:bd:ad:63:ea:e6:b6:94:4a:de:
6b:e3:7a:20:c9:4f:6c:b0:1b:20:01:6c:75:8f:f1:ed:07:e7:
a7:9a:e4:c0:9e:3d:ad:64:8b:d1:92:87:d3:01:21:15:68:7c:
67:13:4f:50:96:ed:32:1e:d9:cc:a4:04:1e:83:46:36:91:e2:
5d:39:2a:90:c3:37:cc:28:fe:c1:f3:28:ff:e5:d5:71:b6:c2:
5f:86:a1:90:f7:b9:13:0b:56:4b:f6:eb:f3:60:ad:1a:68:fe:
66:c3:03:c1:2a:1b:c4:3b:c2:fa:70:fc:87:16:a3:de:da:f1:
84:1f:59:2d:3d:91:d5:bd:43:53:10:f2:0b:88:53:9d:c4:c9:
de:cc:c2:6a:01:a4:d4:65:33:8d:e1:14:d1:81:ab:c2:c3:f3:
7d:5b:9b:27:61:73:4c:97:8d:59:28:db:78:78:b1:54:4e:be:
da:59:27:7a:fc:cd:5f:18:89:ba:26:0c:77:e6:24:e8:7f:e5:
d4:9b:83:d2:24:e3:c9:6a:4c:a9:ed:9c:c9:ae:fd:ad:3d:ce:
47:2a:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:05 2026 by rpki-client