Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: Wodmomm6giEM0Mmr6eTvRjNzLGOf39NZrTcHDZc5p4w=
Subject key identifier: 75:1F:F9:2D:21:39:78:29:9C:06:68:A1:3F:52:28:0F:AF:8C:D8:17
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 01A0C9D980BD16529C6E59084E878EB73BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 0CBA
Signing time: Tue 22 Sep 2026 16:01:09 +0000
Manifest this update: Tue 22 Sep 2026 16:01:09 +0000
Manifest next update: Wed 23 Sep 2026 16:01:09 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: /TCgj2gnvjb5ehGUSPigSmEJoyybFZuNCquLtxd48Gk=)
2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:80:bd:16:52:9c:6e:59:08:4e:87:8e:b7:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Sep 22 16:01:09 2026 GMT
Not After : Sep 23 16:01:09 2026 GMT
Subject: CN=751ff92d213978299c0668a13f52280faf8cd817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:37:dc:88:43:45:10:74:36:5c:2f:6a:8e:
e5:7e:ac:11:92:0f:1a:5d:d7:37:f6:05:ad:cf:e6:
8a:b7:8b:3f:36:5c:92:d8:ac:de:3d:99:94:86:80:
2f:af:c1:35:14:49:46:2c:c7:d1:59:63:ec:50:6a:
f6:51:9c:35:22:5f:83:64:55:62:1a:77:14:b4:6e:
3e:1e:e1:e7:c6:ef:1f:09:f5:d0:0d:e9:82:26:5d:
14:5a:84:48:9b:34:88:a3:87:64:48:40:86:be:b5:
8b:70:65:ed:12:86:24:87:f4:cd:43:3e:e1:84:14:
7e:cc:6b:2c:f2:2e:2e:51:1b:aa:64:1c:2e:53:8f:
4a:7f:24:a2:df:a7:7f:57:8b:a5:92:ce:ab:e0:1c:
02:76:5e:4b:0a:92:7f:ec:4f:28:4a:25:23:5b:25:
5b:04:ab:8e:06:b4:cc:59:8a:14:6a:ba:a3:a4:46:
88:3f:93:75:fa:bd:e5:ff:5d:e7:bb:47:46:a5:ae:
14:12:62:6d:ea:f3:b9:b4:77:0c:7f:b1:29:f1:d4:
3d:71:21:a6:22:1d:36:6d:d6:b1:2c:c0:2c:5b:0f:
2c:5e:86:76:93:49:b6:6a:09:d4:3b:3a:da:ad:03:
50:09:7b:38:cf:92:fa:47:06:cc:87:97:f0:3f:17:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:F9:2D:21:39:78:29:9C:06:68:A1:3F:52:28:0F:AF:8C:D8:17
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2c:9a:93:f9:1a:90:83:c9:e6:77:b7:86:ec:aa:a7:65:e0:
5d:5f:14:26:3c:de:a6:ea:ac:8b:86:8e:fb:46:9d:e3:69:a7:
02:c6:d4:79:86:4f:f0:bb:a9:ad:ec:a9:98:56:c1:50:44:59:
7d:28:5f:53:78:2e:78:ae:69:6c:4f:41:48:7d:4b:12:5e:2a:
62:29:37:f4:47:15:aa:be:9e:8c:82:3c:69:5b:a3:81:26:db:
f8:59:56:46:06:c2:7b:f4:fc:ad:09:ca:ba:40:b9:7a:41:0c:
6a:33:08:15:ad:db:1f:9e:1d:95:d2:69:ca:08:53:89:c8:7c:
c1:7b:e4:cb:21:44:5f:aa:82:c5:ef:31:c9:10:ff:4e:b9:e6:
29:22:db:85:e2:b0:7f:69:4c:eb:5e:18:82:27:6d:80:6b:79:
95:f2:99:47:7e:9e:b0:af:e3:61:f3:d8:91:9f:f7:a2:9b:b7:
aa:64:c1:cb:a9:9c:85:9d:32:5c:07:3b:11:72:f1:da:93:bb:
7f:a9:d6:50:31:61:60:a0:98:32:8a:aa:87:28:55:b1:db:81:
c2:1b:29:2c:d4:bf:21:ff:86:6d:c0:06:71:f5:68:35:aa:91:
6c:94:09:18:5c:32:35:d3:b2:82:2b:4b:7a:50:1a:ad:2c:cf:
58:af:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:06:43 2026 by rpki-client