Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: Nagsp9ufF03TI8NY4HD5z01TDSm2gsYg5ntnLvbBS2o=
Subject key identifier: 27:BB:84:C7:D2:07:BA:94:A7:6B:FB:C2:87:BA:DF:83:4D:0E:C4:A1
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019E1F10D9A06999750D855CA461A3CEC2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 08DE
Signing time: Wed 13 May 2026 02:00:58 +0000
Manifest this update: Wed 13 May 2026 02:00:58 +0000
Manifest next update: Thu 14 May 2026 02:00:58 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: 70uknFItFG7+s6itDB6Tomt83ZaAeIKl34/K6OymT9g=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
3: wqH1Eu0Nagz4x3ByIPaww4OjY90.roa (hash: ndCk0ZYQmCN0rN8uSUZdNlPR/tHVwKDPfY3qSmJpImo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d9:a0:69:99:75:0d:85:5c:a4:61:a3:ce:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: May 13 02:00:58 2026 GMT
Not After : May 14 02:00:58 2026 GMT
Subject: CN=27bb84c7d207ba94a76bfbc287badf834d0ec4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:f8:34:1f:cc:f4:89:44:34:72:84:f6:ba:
a5:3f:04:dc:0e:f9:bf:50:c1:18:dd:3f:b9:01:37:
33:61:4d:10:e9:d9:73:a6:29:41:d1:4c:fb:1e:55:
14:63:c2:5f:07:1e:63:04:ef:72:25:3f:f2:ab:7d:
03:2b:85:2a:e9:df:50:a6:c7:1c:23:09:e5:76:d4:
f5:9d:8c:ba:87:25:ce:e2:04:39:a1:d4:34:82:d8:
33:09:2d:ce:d0:af:81:2b:29:cd:66:ed:fb:84:39:
99:b7:8e:9c:04:2f:a1:17:21:cc:35:b9:f7:6f:6c:
30:8e:28:a5:47:95:b1:22:02:dc:42:cc:72:73:0b:
b1:95:8e:ab:5c:51:a9:03:96:fd:15:53:26:33:54:
73:be:87:3b:d2:fd:3a:df:7a:b5:a5:88:1c:25:b8:
45:c6:65:f3:82:af:f6:3d:23:57:1f:26:12:96:4c:
96:53:7d:4e:3a:0d:cb:17:23:24:28:c5:b7:cd:00:
b8:0b:7f:5f:56:2f:ef:4a:f1:0f:a2:51:5e:45:9e:
01:af:6f:cc:6d:2e:ba:f0:51:b0:ab:49:f9:c4:63:
d6:58:3f:85:a3:97:3d:e0:ef:d9:04:c3:03:26:2e:
b2:b4:6b:62:01:98:f7:d6:2e:c3:2f:d9:7d:fb:cd:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:84:C7:D2:07:BA:94:A7:6B:FB:C2:87:BA:DF:83:4D:0E:C4:A1
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:28:37:c3:22:36:d8:2a:78:8f:c7:f1:de:35:dd:8a:e5:fa:
42:21:32:ce:eb:94:fa:05:98:ae:60:b4:1b:20:6f:41:09:e8:
08:cd:0a:43:6a:6d:4b:fc:6d:c8:dd:e8:4d:49:ec:9c:be:42:
02:fb:6e:64:40:a3:9f:b4:8c:a0:c0:48:a6:6f:b3:8d:93:99:
88:e0:43:e5:03:a8:a6:33:b4:d2:fc:4f:65:7d:3f:30:52:61:
b6:2e:9e:90:70:92:57:51:46:0e:59:90:d3:38:25:83:9f:57:
7a:f1:39:88:fc:49:b1:84:8e:e8:dc:63:96:1e:03:8e:16:af:
af:40:8e:ad:2a:53:b9:9d:cb:88:ed:b9:5b:f3:ae:f6:3c:0e:
b2:68:ff:a2:86:8f:30:15:9b:a1:35:c0:46:63:cd:b8:bf:6a:
dd:64:bc:c5:21:26:a9:2d:a2:9b:60:a0:8b:e0:9f:34:f4:11:
05:33:a7:6e:09:2e:c3:d1:34:a1:54:bc:f9:e5:c9:35:36:39:
8b:75:bf:c9:27:cd:69:18:db:9b:92:c8:38:c9:c3:94:43:8d:
d5:fd:a9:6b:82:ab:72:bb:0f:f4:a7:d8:76:59:38:c6:68:c0:
5b:0f:93:6f:b3:92:2d:48:de:9c:5d:20:80:60:ff:41:24:15:
f9:4c:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:11 2026 by rpki-client