Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: yFvlX7VWnTN7nz3+W4VBOxERBplB6DQ6wO+agquFK2E=
Subject key identifier: 66:9D:77:14:3D:AD:DC:56:5D:24:25:7D:E1:0D:75:C3:EF:ED:17:9E
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 019D27A905E581A7694BB5C4AE2DCCF517E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: /UnmnyGO6Tcoa6xJxQEQKJEwtd5b2x7+8lj8cY/Hps0=)
2: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (hash: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag=)
3: auEpgiPIX3h008e7_hstjhVeKb8.roa (hash: AEMD5xTfuBQMPnNdbcNGPYKM0fV1Wstpq65O+O7gGKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:05:e5:81:a7:69:4b:b5:c4:ae:2d:cc:f5:17:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=669d77143daddc565d24257de10d75c3efed179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:6f:f5:78:89:c8:cf:3c:ca:1e:8b:e3:70:
5d:3f:d1:a6:d3:e1:65:f1:d5:71:d0:80:9b:32:5b:
fd:a1:69:af:f8:6d:70:bc:ab:44:2f:53:62:07:6f:
b0:27:8f:76:d8:be:9c:13:1d:08:5b:df:6f:9f:8f:
d5:f3:b1:c6:fc:e2:86:c6:57:da:2d:29:4a:42:5a:
6b:c4:9b:68:fa:f8:6b:ad:69:d9:69:c2:40:7d:31:
a5:d3:6f:63:21:72:ee:f6:e8:03:89:c8:26:81:20:
3e:fb:0d:64:e2:d4:68:24:71:f5:13:ce:b9:98:8c:
f0:ad:e7:9b:3b:ba:04:26:40:7d:1a:a6:93:86:62:
77:33:28:73:3f:56:19:57:f4:f0:77:59:88:fe:59:
87:1e:65:31:e4:f7:7d:2f:a5:33:ed:24:76:a2:cc:
af:51:82:45:7e:62:85:c1:a4:bc:26:4b:23:eb:49:
53:1d:0f:77:89:e2:e4:cb:9f:c3:ab:5d:c6:f8:f0:
45:5d:af:d2:76:1e:0d:1a:3a:f6:d7:44:7f:0f:e0:
18:ec:2f:dd:6c:3d:6e:9a:9f:93:7f:b3:fe:fe:e4:
dc:1f:ca:50:c1:e6:29:9b:be:9b:e6:9b:67:3c:17:
06:94:7c:5b:9f:bc:2c:9b:ee:b0:12:30:dd:fe:81:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:77:14:3D:AD:DC:56:5D:24:25:7D:E1:0D:75:C3:EF:ED:17:9E
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8e:87:78:d7:72:93:9e:89:c3:49:51:98:a1:c9:c7:c4:2d:
e0:9f:a0:45:24:d6:20:b2:50:9e:71:40:66:ee:6a:40:d5:51:
6e:5b:85:d7:18:e9:d6:34:7d:e9:2a:5e:cf:1b:21:73:69:c2:
b2:20:59:f2:21:2c:50:ca:44:86:5e:bd:b5:95:9c:a2:79:22:
66:78:b4:9e:1e:10:1c:05:65:46:ce:35:8c:f1:43:6b:65:a6:
90:f5:0f:13:0a:5b:89:df:fe:61:5e:5f:13:41:c2:94:bc:3f:
6e:6c:cc:90:d1:57:aa:0c:f3:5a:e3:5c:c4:94:89:9a:47:34:
52:47:d7:6a:be:2b:a5:1d:fc:1f:97:a0:c2:a5:85:b0:b9:9f:
1a:7e:98:39:7f:12:fe:17:ba:c4:44:6d:13:fb:4d:3a:4a:5e:
86:77:a0:29:64:f7:b9:64:49:9a:51:91:7a:c1:28:a2:d8:d8:
d8:80:0c:7d:47:98:65:6b:5c:df:f1:8a:63:ea:a6:3a:37:67:
b2:29:91:d9:78:f0:14:52:e3:50:47:03:dd:28:45:25:47:2d:
19:82:65:f4:b0:64:c5:48:23:27:45:30:de:41:8b:9e:c5:0b:
19:d5:51:48:3d:ef:23:96:dc:89:2c:7d:33:f4:06:29:13:b6:
32:61:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:04 2026 by rpki-client