Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: 4c+9pWxb5zmioXy8m/zmuak+63bffPS2ZYrzue/7iEw=
Subject key identifier: E1:58:4E:9C:A8:49:78:D0:5E:08:4B:5B:7A:D0:D3:B8:F4:A6:FA:CC
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019E209259D4D0343EB20849752091EE146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1603
Signing time: Wed 13 May 2026 09:02:02 +0000
Manifest this update: Wed 13 May 2026 09:02:02 +0000
Manifest next update: Thu 14 May 2026 09:02:02 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: 1/FO0HLXwyZlR9HADw4oBu6k8NNTPOSAmGCEVODKgZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:59:d4:d0:34:3e:b2:08:49:75:20:91:ee:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: May 13 09:02:02 2026 GMT
Not After : May 14 09:02:02 2026 GMT
Subject: CN=e1584e9ca84978d05e084b5b7ad0d3b8f4a6facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:03:ac:4e:23:23:04:b9:51:e9:b9:93:28:
5f:f5:b7:a6:bd:3a:11:fa:40:b7:73:9a:4d:25:d2:
8c:b0:b6:d6:7a:c0:8c:0c:26:78:7d:ec:55:19:7c:
b9:05:3b:79:c4:8d:75:db:7f:9f:4c:14:7a:18:b0:
dd:28:cc:20:7a:16:5b:08:2f:6d:5e:57:fd:03:c5:
01:a3:1c:29:c0:e6:67:b9:74:80:d7:d6:77:91:58:
ab:ec:e6:53:ae:ff:66:7f:7c:9e:54:b2:90:e4:79:
4e:75:a7:eb:56:40:1a:8c:88:e0:5c:23:59:e9:6e:
31:c7:26:eb:b1:7a:5e:dd:78:6b:73:76:de:fa:93:
b4:ce:55:6f:49:31:c8:1e:da:13:94:1c:4e:b0:67:
90:bb:fa:63:58:8e:93:3e:59:5d:ed:03:8c:52:78:
9b:fb:4f:b0:9e:84:f1:ed:cf:70:ca:5d:7d:47:45:
98:b5:b3:be:e5:52:28:a4:c2:72:e0:45:60:f7:b0:
b6:75:62:67:89:fc:ef:76:82:5b:c2:e6:7d:59:8a:
1a:bd:d5:55:53:9e:83:b6:e5:e5:c8:80:b3:85:cd:
30:af:c5:d9:15:bd:c1:40:92:7f:13:0f:1f:b9:a3:
e9:ac:a6:ca:0a:a6:ba:ac:30:2e:f6:24:f2:c4:de:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:4E:9C:A8:49:78:D0:5E:08:4B:5B:7A:D0:D3:B8:F4:A6:FA:CC
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:64:48:eb:c6:01:12:75:c9:b1:9a:95:04:6e:68:99:fe:
a9:75:fa:04:d4:40:3e:fe:11:88:15:c9:2d:f5:5a:b7:b1:f0:
9c:26:cd:e2:64:40:06:ed:b7:70:6e:ea:f1:4c:aa:36:b3:c6:
5b:b0:bb:21:d7:d2:95:ed:73:37:7d:08:ce:28:4d:4d:fd:e8:
f4:7a:94:1b:13:95:a9:a5:3f:3f:5f:46:de:13:5e:e0:cf:27:
7a:75:92:be:7a:83:12:3a:0e:c8:5e:75:30:8a:f4:45:5f:0f:
c2:93:ec:5f:f8:a5:61:c6:1b:8b:8c:2d:64:e2:3a:99:62:4c:
99:c9:9f:c5:5d:b6:00:0f:95:a1:9d:9a:ae:fa:b5:5d:cc:8c:
e4:a0:20:e4:fb:15:d4:1c:5c:ea:69:32:3b:ff:00:e2:0c:34:
98:38:93:b3:1d:17:bf:82:8d:b1:19:50:05:07:42:a9:78:5f:
21:ac:cb:07:f1:a1:22:25:46:46:b5:bb:7e:6f:fc:64:49:27:
7b:eb:3b:d0:70:ac:89:aa:07:ea:2a:68:56:a0:3a:98:fa:49:
41:c5:07:89:8c:b4:5e:8a:3c:67:32:3a:5a:20:cc:a6:8b:74:
6d:4f:24:86:1f:55:23:d6:18:0e:6e:e2:94:4d:a6:c7:62:98:
94:b0:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:42 2026 by rpki-client