Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File: ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier: 6g9DsvKZHtR+CKW7xPYOuFE11D2h95r2NA7ILQw+bnM=
Subject key identifier: A9:DB:EE:2E:3F:57:14:A2:BC:10:C9:B1:87:AD:DA:83:AE:96:93:A4
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019D2772231B3D307328E29F74A035CD4DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: DPIuTlPDQsCMliQH2yCW70IWFSA.roa (hash: XoPgon1icCFhtP9xfLWgNL9py4uMSqIopAyjCfTp874=)
2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: v9AWeR7qf3FL4SDjpjrzJZzzvgy5HqXUd43IrEJasqg=)
3: XoroHKzHcF4gIRR_sz3VpH7FRlk.roa (hash: gbEFPzyD3F8+HScFUiNxrYjDnQgNn3EhyOvcJtp08oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:23:1b:3d:30:73:28:e2:9f:74:a0:35:cd:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=a9dbee2e3f5714a2bc10c9b187adda83ae9693a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:3e:9a:9b:7a:a3:66:07:c4:be:2a:47:c2:
2a:3d:ef:47:e5:ce:b9:ad:88:a9:7a:e0:86:8b:36:
46:91:e9:fe:16:c6:e5:f5:a5:8e:82:3b:88:e2:35:
e1:b6:90:02:2c:89:14:19:19:8f:08:bb:97:ec:13:
ad:05:e4:7e:56:8f:dc:37:37:bc:d4:48:f4:63:dd:
fc:5a:c6:cb:a4:06:73:a5:09:15:18:87:ab:f9:ad:
d6:2e:43:12:40:3d:92:3e:ed:9b:36:ff:89:a6:d0:
b6:fe:62:e8:6c:87:63:26:71:ad:42:14:2a:46:62:
35:c1:43:45:ed:f9:5c:bf:30:89:4b:48:7c:8f:30:
e6:57:f0:d1:19:e6:96:6a:11:4c:53:f9:be:1b:ba:
0d:0c:63:2d:68:e4:94:ab:57:ed:c2:96:87:05:5e:
f0:4e:a2:a9:47:ce:30:d9:5c:0b:45:7f:27:10:c1:
6c:a4:84:87:37:9e:af:82:2f:87:2d:8e:5c:14:90:
09:57:08:14:a8:55:23:13:9d:c9:23:11:8f:2e:48:
3c:b0:b1:4c:89:25:2b:0a:08:48:d5:dc:46:9d:f1:
11:31:8d:db:5d:79:a7:06:6b:ac:ad:b2:e2:30:ea:
dc:cf:e2:fc:06:86:62:2e:f4:c2:7e:f3:4d:e4:f9:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:EE:2E:3F:57:14:A2:BC:10:C9:B1:87:AD:DA:83:AE:96:93:A4
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:f5:5c:83:07:c6:f9:fc:96:0c:3a:90:ba:7b:5f:3b:58:
49:79:0c:82:ff:2e:a4:c8:ec:2e:fb:2e:0b:47:a4:f5:27:c1:
5e:b4:47:a4:dd:e1:79:77:cd:4b:e4:9e:ae:09:bb:cc:f7:77:
32:95:8d:52:ec:c9:70:b8:9c:ec:0a:4e:ab:b1:f3:cb:a7:28:
6d:b6:2a:27:ce:f0:1f:67:57:d5:41:d4:80:ee:8c:39:d0:33:
cc:f8:6a:9e:79:87:2e:1f:3c:7b:92:05:56:5f:a3:62:34:84:
21:f5:20:c8:ff:f3:52:0e:50:8e:b9:93:3f:b6:80:08:44:7c:
49:a4:97:07:5a:91:3e:e9:a6:25:e5:7d:d4:31:d3:43:9a:90:
13:c9:e9:9b:a1:b8:21:85:41:85:ff:c9:64:22:92:7a:e0:89:
ab:ae:23:44:90:ec:9b:11:a4:c4:26:b2:ee:90:93:11:40:35:
a1:41:26:d2:95:f9:46:c3:fe:99:1c:a1:97:9e:7b:39:67:57:
b5:ac:91:59:ea:20:ea:f0:e1:c4:f2:4e:1f:81:4e:a8:e1:2e:
b8:92:be:3c:2e:62:ab:e3:a1:10:24:4f:b2:fd:8c:b3:e8:fa:
1c:24:f8:53:6b:5a:5f:8d:95:a6:7d:83:13:70:46:b7:d5:29:
12:8a:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:21 2026 by rpki-client