Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: 6ar8hKfV1Q4E8OKjrGVUN6CziRmgqAvF3JZuQsYIkH4=
Subject key identifier: 1A:37:AE:61:3D:26:A0:A2:BF:FC:6D:B5:A9:F3:40:29:CF:7B:74:71
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 019D2AA94224D2C9E2D20AE47BFDCA8190CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:00:28 +0000
Manifest this update: Thu 26 Mar 2026 15:00:28 +0000
Manifest next update: Fri 27 Mar 2026 15:00:28 +0000
Files and hashes: 1: 1AKA9ICtH2sefFDvLoJsK9ePE54.roa (hash: 4v9nHWweB0nvxv/LfJiO5A7Jex4IvVHgN7szjLpSCK4=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: K+Qj46OzfFkUWk1dSDfv6TQaNN9r41UTIlwnyfg2FP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:42:24:d2:c9:e2:d2:0a:e4:7b:fd:ca:81:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Mar 26 15:00:28 2026 GMT
Not After : Mar 27 15:00:28 2026 GMT
Subject: CN=1a37ae613d26a0a2bffc6db5a9f34029cf7b7471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:bd:75:64:8a:eb:76:7a:9f:28:f8:73:27:
02:97:65:f3:2b:fe:2f:21:d9:4f:ee:d4:80:e6:a6:
27:d0:d3:93:72:ff:cc:5f:1e:36:46:ba:b9:9b:98:
7f:61:2f:26:78:f8:57:51:12:fa:d5:b5:04:73:40:
27:5b:d0:3e:60:39:66:0e:6d:82:9f:cb:a7:62:a8:
30:f1:4c:84:d0:83:63:4c:00:79:ed:95:46:a1:f6:
9c:85:d8:95:a0:1a:2e:4f:20:c9:df:7b:dd:e6:75:
08:22:6d:23:c1:e9:b9:f9:2e:23:3a:95:ba:e6:3c:
25:34:76:b6:e6:69:27:78:f8:4b:b2:2d:cc:6d:68:
03:d4:fe:a9:c2:c5:00:c3:da:a7:e2:10:64:a0:a6:
2e:43:7b:c6:43:8f:d9:e6:5d:5c:cb:bd:91:3b:52:
d7:d9:3e:6e:76:99:cb:44:4f:9b:81:d0:41:29:d1:
6c:c9:6a:a8:bc:8c:17:16:40:1f:b4:59:e2:c7:2a:
90:9d:60:25:a4:a5:67:af:37:c0:08:75:f1:1d:79:
b2:03:ea:4f:b7:5f:b0:4c:0d:19:1c:cd:83:1a:da:
b5:f3:a9:a3:88:63:1f:ac:86:bc:37:3f:8e:ff:b6:
1d:60:0c:5c:4a:54:dd:89:85:4f:f8:8c:62:43:41:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:37:AE:61:3D:26:A0:A2:BF:FC:6D:B5:A9:F3:40:29:CF:7B:74:71
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:05:8c:0f:f9:1a:70:2d:fe:cb:54:ba:aa:66:0b:45:8a:
b4:e2:d6:96:9a:b1:5a:a3:00:eb:cf:a4:23:2d:79:26:63:83:
f8:c6:68:bd:cd:7e:1b:ca:52:aa:f3:ab:03:c0:42:c9:fb:1c:
8f:36:fa:51:73:19:f9:a3:ce:c6:60:83:07:56:ba:ce:1f:c4:
f7:e8:2e:a0:38:e5:1a:9a:6d:1c:a6:13:8f:03:0d:7a:7d:21:
35:f5:b3:9f:4b:ab:79:35:e5:93:d3:1f:eb:d6:17:91:7f:52:
b4:2d:55:cf:c1:09:d1:ae:07:4d:bf:58:61:5d:85:1f:fe:5d:
f2:69:48:59:c6:1d:86:88:11:b4:d8:f3:0d:8b:22:b0:a1:41:
74:68:82:ba:b5:04:3f:ed:c6:46:81:8f:22:08:c1:66:e8:fc:
5c:6e:b5:72:5c:f3:65:3a:f7:33:35:52:81:96:f1:51:2e:1f:
eb:20:1f:56:fb:50:cf:f4:7b:ef:7e:8e:19:e9:42:ff:4f:8a:
a1:ad:24:c0:09:5e:4b:03:5c:df:16:c8:f3:f6:d1:01:bf:7a:
82:e6:c6:81:ef:0b:e5:5a:27:85:6c:55:ec:e7:09:17:fe:f4:
fb:f2:ca:73:46:42:22:e4:19:64:07:ec:97:66:ce:b6:41:04:
81:e7:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:37 2026 by rpki-client