Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: lrFSJAcLIVNxWyz62ZryZ9+lrWAwAV6wf0b4Db1XERE=
Subject key identifier: F5:E9:F5:F3:40:8E:D2:C2:EA:85:E1:8A:A9:B9:03:9D:A7:7A:FA:04
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019D2961A238CBBC78817B01D3300DE4DEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1583
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: uiToUSZeXtP7/65eB+b8NxiHj3X5FsVhFByglu8OJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a2:38:cb:bc:78:81:7b:01:d3:30:0d:e4:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=f5e9f5f3408ed2c2ea85e18aa9b9039da77afa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:7f:b8:2d:8d:18:01:38:89:ec:10:a3:49:
c0:f8:60:66:8e:f7:a9:28:32:81:78:86:db:b4:a8:
f1:d4:48:1f:1d:63:97:8d:ed:13:b5:aa:05:82:8e:
c9:12:b8:ee:26:d2:20:70:92:82:30:29:93:98:29:
a0:a9:93:30:cc:bc:29:86:34:3e:6f:27:0a:7c:72:
8d:06:a2:e0:78:e8:c7:66:e1:88:cb:24:1f:57:d9:
c9:71:9c:ef:93:dc:0d:4e:23:43:a9:53:62:31:73:
f4:aa:35:99:c8:31:23:58:b5:c1:6e:5d:9c:8e:da:
fe:92:f7:50:65:de:62:3b:96:08:3e:47:b5:62:5d:
d7:b1:25:05:f9:e3:5c:6e:b6:6b:6c:71:ab:41:80:
f1:55:67:1a:93:45:6a:d8:a7:09:d9:e8:8f:2c:2d:
60:3d:e2:6b:b7:91:7d:4d:61:97:21:2c:c9:90:f1:
9f:3e:a7:8f:6c:40:e9:a5:45:d2:f4:c0:fa:a9:f0:
af:05:9b:73:f0:c4:e2:cd:a8:4f:cc:2e:4e:6b:29:
86:57:29:74:b8:11:65:aa:27:2f:d5:11:26:57:e2:
02:1c:31:ad:b3:24:ee:42:64:71:5a:56:19:4e:b4:
97:f5:5d:c2:93:00:6c:2f:5b:f6:91:c0:30:7a:fd:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:F5:F3:40:8E:D2:C2:EA:85:E1:8A:A9:B9:03:9D:A7:7A:FA:04
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:7b:db:1c:67:21:45:43:2e:80:a0:14:bb:84:ca:4a:0a:
e5:b9:cf:0d:d5:8c:9b:c1:d3:65:7a:96:b9:7b:7d:83:0a:12:
cb:9f:12:12:d2:2a:ff:b3:69:fb:4e:37:00:5b:50:77:9c:f4:
b6:a7:e3:49:1a:a1:a6:22:c5:66:a1:d6:0a:6b:a7:f3:0e:16:
4b:bc:64:5a:49:57:d7:72:b3:22:24:09:f8:8f:5a:a5:f6:d2:
2b:de:25:c9:5f:26:17:a9:31:8a:b4:9f:b9:8d:c0:bc:f6:15:
94:14:1f:10:92:7a:55:c8:a5:d8:df:f9:22:f2:ab:33:f5:92:
05:ae:02:40:7d:44:e2:1c:d4:d6:fb:0e:fc:69:be:01:dc:1f:
4f:cc:27:93:81:9a:77:2b:33:48:08:d2:f3:71:0b:cf:a2:1a:
9b:73:0d:71:a6:52:a9:39:28:f1:46:b8:6c:45:9b:d7:d5:1d:
0a:9c:08:f7:af:1a:a6:10:ef:5c:bd:3a:b6:19:9b:78:dd:e1:
04:7b:ec:0b:ec:f4:ed:a7:39:e8:1b:f1:34:6c:f1:68:55:b6:
64:6b:ab:5a:f3:fb:8a:0f:b5:e4:67:19:20:c1:13:1f:47:c2:
17:ea:5e:a6:9c:3b:61:70:18:5b:f6:ec:6e:82:3e:ce:51:7e:
46:af:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:17 2026 by rpki-client