Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: +rd9oy22HDhGXtgjRQ9aFVwvXPxJ0M1+C9scBxHEEZE=
Subject key identifier: 96:63:60:43:F2:21:E5:B6:FD:84:EA:C9:DD:E6:89:84:24:56:14:A3
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 01A0EB537664E8E5208769927FE19B8F4340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1A88
Signing time: Tue 29 Sep 2026 04:01:50 +0000
Manifest this update: Tue 29 Sep 2026 04:01:50 +0000
Manifest next update: Wed 30 Sep 2026 04:01:50 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: IjX2Hf2yhYOLJOnuUCxuWTuRahMjCv+fec3Uj+xHfMY=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:76:64:e8:e5:20:87:69:92:7f:e1:9b:8f:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Sep 29 04:01:50 2026 GMT
Not After : Sep 30 04:01:50 2026 GMT
Subject: CN=96636043f221e5b6fd84eac9dde68984245614a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:77:74:1c:64:fd:a0:f6:99:66:97:9f:aa:
fc:17:34:73:52:4c:9d:59:17:7c:f1:fe:14:9c:da:
b0:d0:6d:a2:07:27:f0:ab:a3:0e:49:a8:82:09:e7:
07:ad:d0:8b:9a:46:7d:3d:48:5f:3a:c9:1a:fc:75:
f4:d3:78:d6:64:68:29:5e:cb:1e:c9:50:a9:8f:aa:
ee:4f:7a:18:81:be:c6:14:28:8b:4e:31:8c:08:43:
76:f8:61:c2:86:32:a2:e0:30:2c:bc:e4:54:ba:6d:
11:fa:fb:14:03:19:06:4a:52:09:bb:f8:b3:8b:91:
c1:3e:97:9e:09:fc:d5:91:84:dd:fd:62:a8:49:ff:
b9:03:bb:5f:60:5a:e0:f5:5c:96:d7:6a:2d:4a:d8:
38:7b:d1:91:4d:18:8a:c8:ca:b9:13:d4:53:84:b4:
90:09:8f:63:09:8c:9d:d6:68:64:85:cb:e8:1f:f9:
ba:6a:33:98:be:6c:87:58:30:a9:3a:e3:f3:5e:95:
d3:b0:05:38:98:bf:de:06:21:20:0f:b6:27:9e:16:
3d:a3:d0:97:c2:14:7f:57:54:2d:85:3e:77:3f:37:
3c:f3:7c:c9:89:f9:a1:1c:ff:b6:b0:5b:05:82:91:
ce:8d:d6:87:3d:c0:f1:9a:1a:bc:83:25:04:73:9a:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:60:43:F2:21:E5:B6:FD:84:EA:C9:DD:E6:89:84:24:56:14:A3
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:02:de:a9:0d:46:b1:6d:25:06:52:c9:67:68:08:03:49:7c:
70:0e:2b:88:c4:36:8e:3d:69:ec:b1:a1:7d:86:eb:06:c2:2a:
88:22:20:5d:d9:45:17:30:14:16:af:b4:18:78:93:7d:5b:e9:
72:4e:f8:8f:81:45:05:59:e7:02:5d:71:65:a4:8a:ed:2a:39:
2c:26:5d:93:2d:b4:bf:39:f8:72:30:5b:6d:66:83:d5:32:18:
66:b9:c8:df:1b:04:d6:3a:d9:b1:a5:e0:25:ee:83:98:3a:b0:
ee:af:2f:68:7e:68:78:fc:6f:82:7a:2e:62:3e:d1:d9:91:22:
9e:30:e1:dd:6a:2a:b0:83:5b:ff:21:a9:7d:17:c2:64:a4:f1:
b5:6e:e1:b1:c6:e9:79:d1:51:88:f8:df:b3:e8:49:79:db:78:
12:d3:0d:14:a6:68:af:6e:0b:32:b7:e4:7e:f3:39:7d:54:80:
a7:30:ec:98:e1:d1:17:a7:55:f7:e9:e0:3e:42:d9:2a:b1:8f:
b0:a9:33:2c:26:f1:4b:bf:a8:fa:9c:8c:a9:5a:a9:bb:f8:94:
e8:65:62:92:93:c5:e6:67:20:b7:24:e7:f7:b1:d0:6b:66:36:
42:16:90:70:7f:73:6e:fb:e4:96:1f:75:1a:c4:88:fc:89:fe:
db:aa:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:02 2026 by rpki-client