Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier: DBLydngofEuIQQ8AOuI3Hd0WL3CL/nXQ9AccK1SucmE=
Subject key identifier: FF:5E:E8:0A:62:CB:81:F2:AE:DA:76:EB:5D:E3:41:81:05:27:9C:EB
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial: 019D2696605034B25309ABAD24A50519A996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number: CF
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: J0kf60fmlzPH/hZ4wtCnbsnNnRNwJaWsDdPAsw3xtDk=)
2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:60:50:34:b2:53:09:ab:ad:24:a5:05:19:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=ff5ee80a62cb81f2aeda76eb5de3418105279ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:36:b4:b6:08:3d:5d:e9:ec:39:3a:1b:84:
6d:2a:fd:ee:15:5e:82:2d:73:ce:ef:a8:84:ef:5a:
05:0a:00:e9:12:b0:93:6e:4d:41:97:ac:1d:b4:da:
fa:22:d7:89:60:f1:f4:70:15:cc:80:90:ad:d9:78:
e3:19:a4:a3:f3:0b:5d:ae:a5:18:0f:09:87:db:a1:
92:b8:1e:51:cd:e0:fa:17:a7:65:8c:5e:59:6e:46:
59:49:e6:c2:d3:7e:37:3b:9d:46:03:f8:16:60:3c:
98:5b:dd:9d:d2:06:6c:9c:e9:99:7e:11:ee:d5:fc:
30:6d:cb:a6:4b:7c:e3:f2:33:a6:12:e3:46:19:7e:
2a:a2:ea:4e:b8:32:e2:d2:c8:18:99:9e:9a:ff:47:
b3:51:b7:a7:25:54:bc:23:a2:ed:39:6f:6d:cd:e9:
64:40:ec:0b:08:02:99:42:d8:f6:32:ae:5b:b6:7d:
cc:5d:c3:28:0c:2d:2a:b9:cc:4a:39:bf:64:6a:c9:
d8:b6:0c:14:1d:3d:f8:ed:3a:f0:f2:eb:cd:46:2f:
a4:5f:65:8d:42:72:7d:b8:26:3c:c8:1d:ca:ca:3c:
c9:c5:c7:3e:36:9b:84:a0:45:e3:50:d3:68:bb:0a:
e4:d6:64:a6:f1:b2:a5:82:e4:cd:43:80:e1:c6:74:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:E8:0A:62:CB:81:F2:AE:DA:76:EB:5D:E3:41:81:05:27:9C:EB
X509v3 Authority Key Identifier:
keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:76:e2:65:eb:c3:6c:ee:73:97:e8:bc:b5:72:f1:1e:3f:cf:
78:03:3a:6c:be:e6:50:ad:14:63:74:f2:1c:7a:4f:5f:93:ce:
e0:97:d5:a1:4d:79:43:73:ec:76:c8:79:03:c8:c4:e0:7e:ac:
2b:47:4e:52:55:4c:22:31:35:73:46:c6:1c:da:02:fd:c7:86:
57:d9:31:a3:e1:24:e3:9b:ba:a2:e2:89:91:b5:2f:6d:f3:76:
f3:9c:ef:2b:59:f4:f7:fd:c7:12:50:b3:8a:f0:c8:a7:82:43:
79:f2:03:3f:ad:29:e8:7a:e9:f0:3c:a9:02:6c:01:2e:13:24:
5f:b3:48:ba:be:12:f8:d6:fd:d9:74:b6:f8:cf:c2:8c:d4:ac:
c2:69:ea:ed:f4:77:52:81:9c:b8:f9:07:c8:b2:6a:49:e1:9f:
0a:c0:2b:48:92:04:3e:46:bf:d5:16:e6:1b:86:ef:be:59:54:
2b:6f:04:85:91:4d:bd:f9:bb:2b:a1:ec:d0:5f:a0:8a:95:48:
48:4a:96:ad:a0:92:a2:bf:2f:71:8b:6a:96:77:b3:4c:ec:0b:
14:61:47:87:38:67:cc:c2:12:a7:e0:fe:24:94:4e:38:07:87:
ab:8d:19:64:0a:b9:dd:c1:2d:0c:37:1c:77:b1:66:17:83:e6:
17:13:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:41 2026 by rpki-client