Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: oZ/0RNy7xcub0lUHQhhWjnGgP3+MTcIrnKROdHvXUoo=
Subject key identifier: 46:40:8D:0B:DA:B9:0B:FC:BF:BC:C6:64:C9:97:50:5F:4D:8A:AC:E8
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019D284DC524FA5CF1C88B371A8AA1A2DF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 085E
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: vhcCvky19mqmKIR08NjZgF1uc2eDISbREJSfcZ6bC+I=)
2: wqH1Eu0Nagz4x3ByIPaww4OjY90.roa (hash: ndCk0ZYQmCN0rN8uSUZdNlPR/tHVwKDPfY3qSmJpImo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c5:24:fa:5c:f1:c8:8b:37:1a:8a:a1:a2:df:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=46408d0bdab90bfcbfbcc664c997505f4d8aace8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:34:f5:67:49:ff:8e:4a:d2:9b:36:3d:11:
eb:4f:56:ac:44:f4:df:10:6d:b3:51:92:a0:2e:75:
ec:17:aa:00:12:c4:ef:c4:c5:7f:cf:52:fb:40:5b:
80:89:5e:92:25:7e:06:3c:e0:cd:8e:c0:55:70:53:
ec:20:8f:29:7c:23:8b:85:a2:7a:a5:6f:54:f4:d0:
25:43:10:d0:1b:34:2b:56:68:94:53:3e:11:b6:f0:
63:58:89:57:1f:9b:5e:7a:71:b4:34:e8:f6:c9:cc:
4c:8d:73:8e:3e:25:23:01:f6:a0:9c:8e:ed:5f:41:
0f:74:3a:f9:60:b9:72:75:e3:22:ad:8e:84:5b:f2:
9a:3c:5b:7f:c9:d2:5d:35:08:3c:0b:71:86:f0:55:
be:88:20:1e:8c:ea:52:f8:8d:fb:a2:6b:34:4a:c0:
d5:0b:64:0d:32:42:e9:4d:17:46:09:c9:3a:4c:bb:
39:05:ba:59:6a:fa:7e:fd:b3:53:66:1b:7a:81:e2:
ef:2b:31:25:32:50:16:02:b3:84:81:b4:81:7a:33:
80:53:eb:5c:ae:ad:c9:38:0b:9d:34:8f:9c:39:98:
58:64:51:07:e4:29:ac:35:b3:8a:c6:a4:2d:76:3d:
f7:e9:e1:f9:cd:5a:b7:f2:7e:82:f9:e3:0e:7f:23:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:8D:0B:DA:B9:0B:FC:BF:BC:C6:64:C9:97:50:5F:4D:8A:AC:E8
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:cd:65:5d:f7:f8:37:68:0e:be:25:67:06:76:f4:e0:40:
94:bd:20:18:f7:f9:ce:68:96:0e:20:44:d3:a1:3d:45:a0:77:
34:5b:e6:44:57:9f:c7:79:fe:d4:4a:d9:20:c8:f3:79:f9:0b:
96:2a:96:c8:1b:fd:36:2f:20:25:fe:dd:3f:7e:16:38:f1:86:
5a:d5:80:11:e7:4f:d6:72:2d:17:2d:f3:f7:4d:f6:bd:44:86:
91:86:05:17:e8:80:92:b6:2c:dc:61:12:4f:9e:f0:92:81:8c:
5e:14:be:de:b1:92:fb:df:f0:97:11:55:79:a4:57:d1:26:54:
d3:85:1d:14:ed:e4:80:e2:c9:df:eb:a5:07:92:bf:dc:66:0e:
e2:9f:3e:92:d5:a0:6b:e3:a8:a2:13:25:e1:b0:a0:24:f0:be:
57:1e:66:fb:0a:a9:76:cf:ff:d2:42:a7:17:d2:c7:1e:15:e8:
8d:57:41:eb:4c:96:ec:bc:d9:44:1d:fd:d4:b4:06:84:37:38:
cf:49:f8:cb:b0:3d:d2:94:07:47:e2:a3:59:a5:f6:79:6f:29:
04:18:60:41:60:61:b2:01:4b:35:45:2a:92:07:22:c8:77:d8:
e7:ad:94:48:a8:32:01:3a:82:0f:75:f8:bd:17:3b:43:58:dd:
66:24:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:52 2026 by rpki-client