Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: 6gXEFoYp/IrDo10TmfqVzWaVSKirdDolLWMGrzh8bX8=
Subject key identifier: ED:44:7A:26:70:90:B8:11:7D:F5:9D:94:8B:CA:59:DC:23:3C:BF:94
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019D2884D1EFBDBAA3D5BE2ECE1A60F8D5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 109F
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: GGpCS/mPI1Zi+UvEtti1EJvt7qyzj74T5sv0pxfrUKw=)
2: VI1Pdat37Jv7tPxYGIsry5LOD7w.roa (hash: ZvnfeGRZ4e6seCSPIniU9Klu2LcfEkoX8a9oOIfdFRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d1:ef:bd:ba:a3:d5:be:2e:ce:1a:60:f8:d5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=ed447a267090b8117df59d948bca59dc233cbf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:80:f2:3b:11:f3:e1:56:6e:e0:53:39:03:
21:af:d7:d0:2e:87:79:7a:db:6d:e1:dc:32:16:f1:
14:34:a3:03:5b:c5:97:2f:27:95:b1:1d:c5:58:c3:
66:f3:a3:f5:a4:35:65:86:10:3d:a5:b6:77:fb:3a:
ec:ff:73:83:35:ab:2e:a4:0a:56:00:8b:1f:3a:5e:
5e:2c:02:49:e5:9f:b8:90:21:9b:ac:b8:b2:fc:af:
c4:0f:f3:83:e5:e1:db:67:99:da:8c:81:fd:00:17:
84:6c:cd:ec:b3:00:28:fa:27:2c:fd:06:af:e4:14:
52:4d:33:2c:b3:e7:01:f5:f0:7a:74:0c:a4:11:f3:
59:bb:52:f7:be:91:bc:df:c9:8b:d0:8e:d7:d8:50:
a7:5a:4a:59:af:fd:80:8a:8c:b8:6e:10:20:dd:74:
92:63:0d:8b:f2:df:ed:78:a1:b1:bd:90:98:58:e9:
9f:68:b1:c9:74:81:e8:c1:1c:84:7a:65:ec:b7:45:
24:28:09:d8:9b:c8:f1:b6:69:c2:22:97:1c:62:a4:
b9:12:22:2d:99:ed:6d:6d:3e:1b:b9:36:c1:ba:3d:
48:6a:d0:f9:af:f5:2f:a6:0b:2d:18:04:3c:97:4d:
a5:b3:98:99:35:eb:5e:1c:7d:02:53:54:ef:92:26:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:7A:26:70:90:B8:11:7D:F5:9D:94:8B:CA:59:DC:23:3C:BF:94
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:93:27:c1:ce:f7:67:3b:0b:7e:3a:49:23:41:71:71:2d:
64:ab:3a:7b:49:ce:92:5d:f7:87:42:91:c9:ff:4e:ef:41:f2:
60:0c:4c:9b:8c:24:c6:73:5b:de:da:f8:cc:99:12:2a:41:6a:
3f:0a:06:24:5c:3f:bb:5d:1b:0f:a8:08:69:f8:58:b3:b2:5f:
36:87:16:fd:96:fe:06:cd:f9:ea:c9:ea:be:51:af:c0:92:57:
13:d2:76:6c:1c:86:43:c9:5a:7f:ea:2c:64:e9:0d:d3:e0:fa:
54:e3:c2:de:6a:53:e4:7d:ea:c6:3e:23:a5:74:b5:3b:b2:74:
33:7c:70:76:38:e3:48:3d:bc:8d:5b:a7:a1:ed:03:61:b6:53:
6e:db:7b:d7:44:02:2b:cf:ea:60:3e:f1:6d:72:e5:d3:46:d8:
de:81:75:77:5d:05:ff:a0:ae:28:2b:d8:6d:79:43:ae:45:7b:
18:4e:a7:78:a3:47:cb:12:51:15:61:39:f0:fc:8e:94:89:fd:
39:d3:86:70:0f:ac:8b:9b:1e:67:41:6e:87:49:04:d3:47:9e:
5e:4d:52:7e:e8:e3:74:84:26:ab:2e:89:91:79:c6:a5:f5:0f:
1b:17:54:41:d5:6b:37:43:d4:3a:7b:c1:98:34:38:a2:b6:f3:
1c:51:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:06 2026 by rpki-client