Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: CqlW/22UDtS4LJkssDDwgM/44zMEhO9L0vy5NeWYJA0=
Subject key identifier: 72:76:18:DE:F6:E5:55:86:C6:C7:6E:56:DC:AD:64:E4:E4:31:72:AB
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019F91DB1B93566B7DEA1F51076EC5903310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 099F
Signing time: Fri 24 Jul 2026 02:01:23 +0000
Manifest this update: Fri 24 Jul 2026 02:01:23 +0000
Manifest next update: Sat 25 Jul 2026 02:01:23 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: Yi8z1BNzh3IusX0Ve8/ntZ7u4jnwafC3WdVDc0ENZfE=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:1b:93:56:6b:7d:ea:1f:51:07:6e:c5:90:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jul 24 02:01:23 2026 GMT
Not After : Jul 25 02:01:23 2026 GMT
Subject: CN=727618def6e55586c6c76e56dcad64e4e43172ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:72:9e:04:f5:2b:48:83:8a:f1:b8:60:62:
87:46:7f:de:6d:5c:e3:1f:6b:19:f5:b7:98:9b:61:
90:1b:cb:73:14:2f:18:d0:e6:a6:48:d8:44:06:be:
c1:55:1a:17:6f:ef:7f:29:4c:22:a7:a3:24:81:eb:
26:ac:2f:4a:3e:5b:2c:a5:8c:4e:96:58:01:de:d0:
b7:aa:44:65:80:9f:05:ef:e2:e2:e5:34:8b:6b:4c:
2e:02:a3:18:ae:df:f6:38:cd:97:43:6b:c0:c4:a0:
1e:ca:30:b2:22:61:bf:a8:5e:2c:45:46:75:79:c1:
a8:b1:87:2c:b3:99:49:e8:bd:a2:94:2d:22:cf:28:
68:24:df:11:df:cc:f4:f9:2c:87:1e:44:3c:ab:11:
4d:6e:16:76:e2:92:26:1e:4b:08:85:c6:c4:9d:24:
66:b7:55:65:2b:fb:f2:91:88:c9:c3:0b:91:09:bd:
bb:dd:9a:46:92:0b:10:75:f8:f3:ce:c6:1f:87:00:
52:1b:a1:67:da:14:ef:94:ff:fe:1c:76:5d:a9:f1:
ac:b7:bd:49:fc:70:b2:d5:85:95:34:35:d0:49:dc:
55:39:89:ec:d6:55:e2:34:ba:e9:cd:16:fe:ca:c4:
db:81:1e:01:36:57:96:23:51:82:d6:3d:bd:87:0e:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:18:DE:F6:E5:55:86:C6:C7:6E:56:DC:AD:64:E4:E4:31:72:AB
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:96:45:ca:7e:39:6a:dd:50:74:ed:d0:30:e5:7d:5b:ca:
50:1d:8f:3e:bd:1d:69:46:b4:64:3a:6f:25:8e:2c:17:99:e3:
2f:03:df:8b:d0:cf:8b:94:ff:e4:83:7d:61:1f:bb:71:01:27:
21:08:f3:43:d3:90:3e:96:a2:ee:77:d5:89:ad:19:f3:78:ed:
a2:30:6d:a4:9d:6d:46:ad:d5:d6:6b:88:e7:59:25:1b:42:f4:
02:4f:d0:90:ff:53:40:43:7d:25:6a:d3:83:1a:a2:de:41:ce:
a6:51:8f:a7:10:3a:b5:48:36:64:44:60:79:d7:40:d6:97:cc:
bc:4b:37:42:34:cc:98:bb:79:33:5f:02:69:df:b1:58:15:11:
6b:13:bb:61:49:40:2e:89:44:2a:7c:10:68:2a:ec:fb:9e:bc:
9b:59:79:74:7a:aa:86:d3:3f:19:cd:9f:fd:73:b4:23:89:72:
d4:61:a2:76:56:45:ea:1e:f5:39:e7:3a:9b:6b:52:fe:68:9d:
bf:ea:10:21:d8:c4:39:6b:1f:ad:42:08:6c:43:b3:f0:f0:99:
9b:fa:0b:ea:9d:50:f0:56:78:f3:b9:31:67:41:79:61:64:17:
f2:06:c1:c7:6e:16:0d:dd:ba:f4:33:98:af:5f:8c:d5:61:27:
54:ac:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:56 2026 by rpki-client