Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: C0JsOVhqcrbe9Ibd1SBrJA+xDDSwj4MGQmtrblWlIJ4=
Subject key identifier: FA:4D:81:2B:C3:60:55:6E:08:86:51:D6:B3:BD:46:66:FC:6D:DB:25
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019D2AE0502578E2DBED553C45CD2ED55245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0ADA
Signing time: Thu 26 Mar 2026 16:00:36 +0000
Manifest this update: Thu 26 Mar 2026 16:00:36 +0000
Manifest next update: Fri 27 Mar 2026 16:00:36 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: yhgOMg3t7/gNNkHqoX6M6JLAT31nYEMmJc1tEeCqZK8=)
2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:50:25:78:e2:db:ed:55:3c:45:cd:2e:d5:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Mar 26 16:00:36 2026 GMT
Not After : Mar 27 16:00:36 2026 GMT
Subject: CN=fa4d812bc360556e088651d6b3bd4666fc6ddb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:66:60:61:e6:7f:c6:dd:04:1a:9a:d3:ae:
91:93:ec:e7:a5:e5:6a:3f:b0:fb:d2:a6:c7:4e:28:
f1:21:fa:2c:8c:c7:d6:4b:3c:80:96:da:09:4c:e9:
2e:48:03:32:1c:74:11:e9:74:d7:4f:3d:f8:b4:98:
7e:93:51:6a:2f:c1:05:2c:79:00:f4:99:40:82:23:
96:cf:04:86:72:c7:0f:f9:f9:b8:ed:4d:10:3c:cb:
c7:de:e5:66:07:e9:19:e2:d0:11:57:e1:96:a1:a5:
2a:7e:9a:5b:e1:c9:79:c3:49:2c:29:9d:44:20:68:
06:01:5d:c3:e9:c3:45:ae:68:1d:55:9c:00:b4:21:
14:cc:da:3f:d9:13:e7:9c:d9:07:fa:63:cb:80:17:
ea:a8:6e:b9:22:35:04:b1:40:3b:9e:45:d4:31:a7:
3d:d0:68:e1:f2:44:f8:bb:38:e6:48:9e:03:63:d5:
fa:54:dd:f5:fa:5f:5c:e7:20:f1:11:75:2c:4c:20:
75:f5:4b:50:ab:0e:ea:eb:17:69:9d:1c:d6:cf:bb:
62:f7:48:f7:49:d8:ab:1c:93:aa:4d:58:d3:f7:ad:
60:f4:77:3b:99:c0:5e:cd:0f:18:73:21:d0:43:36:
64:2e:2d:ac:b5:d9:3e:08:14:2f:b4:a3:00:df:59:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:81:2B:C3:60:55:6E:08:86:51:D6:B3:BD:46:66:FC:6D:DB:25
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:29:ef:3b:4e:45:5c:1d:cb:61:2e:36:ad:fa:b2:3f:f0:
00:42:87:94:16:46:d0:a0:14:65:14:31:e1:a3:f5:92:50:66:
34:45:78:97:33:fb:bc:ef:f9:7b:ee:57:7f:8a:91:ba:15:61:
18:bd:e0:b9:95:6a:26:c6:e5:5b:6c:7e:1e:50:48:06:1d:51:
dc:89:9c:7f:8c:18:af:36:c4:31:be:2b:0d:e6:e7:4e:44:f2:
6e:e4:54:90:74:6c:7b:24:b8:04:63:0b:8e:05:77:de:89:51:
18:a3:50:21:6d:b9:df:db:0b:86:49:32:97:42:b1:c2:a8:8e:
32:5e:1e:6a:cb:c5:09:95:c9:f7:0e:56:6f:b6:d5:32:bb:f4:
31:42:75:7d:1a:5e:37:8d:e8:ad:88:50:7d:81:d2:ad:7c:af:
f9:33:39:89:8b:e1:27:d7:a0:70:fd:69:be:5f:da:dd:25:1e:
2a:26:42:e2:31:35:f1:42:bc:46:5f:cc:fa:95:39:b2:4f:e5:
20:09:54:0d:28:8e:52:b1:3a:1a:ad:e6:bf:0c:72:33:bf:8f:
c0:b0:a6:ea:e7:78:50:fe:26:a1:ae:ef:02:c4:5b:60:21:0d:
f8:b6:3c:18:e2:60:61:67:6e:ca:a1:cb:a8:f5:8e:50:12:51:
69:6c:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:39 2026 by rpki-client