Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: 4BgzstGGuy7nsfF+q2inhPLGu0z4jo+WnwZ6TeZ86Mk=
Subject key identifier: 72:6A:1A:04:C1:DD:F9:16:C5:58:B6:9A:F8:74:68:AE:49:BD:E8:72
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 01A0DE051181BA775FA126B27A74582235E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0A4B
Signing time: Sat 26 Sep 2026 14:01:09 +0000
Manifest this update: Sat 26 Sep 2026 14:01:09 +0000
Manifest next update: Sun 27 Sep 2026 14:01:09 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: un6FLkBBgIcXn0ZRp9iJ3uTNAlV25gl91Or8WiEIGvA=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:11:81:ba:77:5f:a1:26:b2:7a:74:58:22:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Sep 26 14:01:09 2026 GMT
Not After : Sep 27 14:01:09 2026 GMT
Subject: CN=726a1a04c1ddf916c558b69af87468ae49bde872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8b:6f:63:9f:60:a2:2e:73:65:23:0a:22:bd:
80:99:57:68:66:8b:04:9c:49:96:71:5b:41:c3:f3:
a1:a2:30:9d:1b:40:ed:ef:5e:65:68:10:d1:87:9d:
78:96:17:0b:03:79:48:2d:fb:b9:52:59:c4:74:11:
dd:b1:2e:0f:22:a1:8d:c2:7b:ff:64:d1:a7:c6:16:
1b:a9:4e:10:ec:be:9a:0f:5e:c1:73:85:42:15:50:
2a:b7:50:33:cc:05:73:c6:8f:08:8d:ba:45:d9:8a:
00:53:73:f4:ab:60:26:96:15:68:de:d6:c8:d7:ea:
5b:cd:bd:90:63:f5:b8:c9:bd:94:e1:6a:0a:a5:8a:
b7:2a:59:6f:95:74:9b:3d:ca:8f:0e:04:dc:0c:d8:
81:81:fc:eb:6c:36:53:8e:c5:51:26:fb:5a:99:bd:
f7:f4:6a:b4:34:12:db:ea:09:f6:cd:11:a1:f9:18:
f2:5a:d3:7e:c0:c5:04:b7:e6:eb:1d:38:90:5a:f2:
83:be:f2:c2:ea:92:45:72:81:27:53:ff:1e:c1:5e:
cf:fe:5d:2a:a5:e5:12:b4:2c:a0:24:fc:41:88:38:
05:eb:7c:4b:48:e7:9f:d2:c0:ec:12:17:63:e0:ae:
32:a8:4d:6f:49:81:82:a2:46:80:c2:2d:8e:9e:c5:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6A:1A:04:C1:DD:F9:16:C5:58:B6:9A:F8:74:68:AE:49:BD:E8:72
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c6:74:fc:84:d6:76:3c:d2:60:db:e7:36:85:5f:86:97:18:
6e:62:57:dc:49:16:cc:0d:9a:85:fa:8c:bb:9b:88:80:bd:8d:
53:00:a0:65:66:5d:15:3d:ee:d4:dd:91:9d:93:4f:e0:e7:14:
83:f5:9a:22:81:ec:88:03:58:67:aa:63:5c:91:58:a7:c3:90:
b5:6a:2f:5a:00:98:8e:3f:f8:8b:cb:53:c3:0f:a6:e5:82:56:
66:66:4e:6b:05:78:91:4f:3b:19:e6:2d:b7:c5:3e:4b:4c:eb:
df:d7:64:c3:96:fc:a5:3b:6f:79:b9:56:fb:a3:d3:68:f1:98:
c5:53:a2:1b:f5:8b:7d:41:f0:83:96:83:4e:ed:b2:a9:70:c4:
f0:8c:fd:86:cf:25:61:d6:d5:6b:20:4c:a8:b0:7a:03:37:7c:
36:17:ec:7a:9b:9f:c9:7b:ac:ed:c1:21:1a:86:00:b7:2e:49:
9d:0c:c1:00:63:cf:e3:ef:0f:c5:94:9b:94:ed:d7:fd:a6:b4:
10:af:93:38:17:e5:26:3b:54:67:ba:4f:61:c0:c0:a1:4a:fa:
a3:c3:e2:5d:0a:73:cd:0d:75:eb:e1:32:1a:37:26:1f:56:f2:
1b:87:a8:c1:f9:16:e9:79:2e:30:66:88:ab:87:21:b9:71:b5:
85:e1:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:26:51 2026 by rpki-client