Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: vehfPqc2uJ7+iMIjUHYq3a5SvJb0kuHB5uZkTiPUFE4=
Subject key identifier: 5B:A7:EA:73:C2:B7:8F:5B:3D:7F:E9:FF:1A:CA:DF:0B:CD:A8:23:79
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 019E1EDA87B736E8AF7B3DF353923C134B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1915
Signing time: Wed 13 May 2026 01:01:38 +0000
Manifest this update: Wed 13 May 2026 01:01:38 +0000
Manifest next update: Thu 14 May 2026 01:01:38 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: fvuFVDG7nlIETNaJYfyh3ggTbNx8rv12kj4ZSFBQNAo=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:87:b7:36:e8:af:7b:3d:f3:53:92:3c:13:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: May 13 01:01:38 2026 GMT
Not After : May 14 01:01:38 2026 GMT
Subject: CN=5ba7ea73c2b78f5b3d7fe9ff1acadf0bcda82379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:56:ea:6f:03:20:ba:8c:4e:a4:ce:96:44:
40:6f:30:0a:c4:92:e6:62:1f:f4:d4:55:a3:1b:2c:
4e:33:0d:85:1a:40:7f:d2:db:0f:b1:3c:07:8f:00:
1c:ea:ee:6a:be:aa:35:16:a2:13:72:b1:b9:22:68:
6a:de:e2:86:a4:b0:f9:16:10:f7:15:4c:c5:b3:d3:
5b:37:24:bc:5e:39:89:19:ab:dc:86:73:72:e8:ed:
3c:af:c1:49:c0:0e:a2:4c:e0:3a:7f:68:88:cd:99:
5d:ee:ac:15:4f:56:bc:3e:8e:85:09:ff:f5:00:ef:
25:a1:f8:aa:08:cf:f0:6b:fb:3b:10:d4:1e:ba:29:
23:07:43:6b:95:35:cd:2a:93:dc:24:ab:5b:e1:40:
a8:2d:47:e7:1e:ea:55:99:9a:8a:da:62:3a:b0:14:
07:77:67:fc:d0:ab:77:2c:33:0c:52:b0:d5:5c:d3:
6f:76:ed:1a:75:db:ec:ca:8f:8c:fe:7e:af:e1:dd:
96:a3:76:6b:97:ce:f8:a6:7e:b8:a1:fa:49:8e:e8:
de:8f:f6:64:9d:7a:63:79:96:88:a7:ef:01:ee:f7:
65:31:4a:19:cd:72:2f:7c:5b:01:b5:93:fe:d8:e6:
0a:a9:cf:42:24:47:ec:3a:c4:89:58:d9:b0:cb:ae:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:EA:73:C2:B7:8F:5B:3D:7F:E9:FF:1A:CA:DF:0B:CD:A8:23:79
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:a2:fd:47:ac:6f:74:87:06:cd:5d:7c:4e:c4:c0:5b:e2:
e0:84:cf:e7:82:49:bd:af:71:83:22:9d:89:b2:52:a0:d2:cb:
a5:ea:fb:65:fe:85:1d:43:b1:9a:05:bf:56:e3:60:31:9d:54:
0d:93:2f:27:27:9e:26:27:5e:79:a1:51:d9:30:36:54:79:24:
f5:21:d6:6a:60:4a:46:43:25:3d:e2:41:74:95:95:dc:f8:f6:
d6:76:f9:f1:65:96:07:59:4c:a1:4a:81:ea:bc:c0:b8:5a:77:
d0:af:8a:81:ab:1a:09:ab:08:cf:8c:5d:02:83:68:40:cd:44:
06:ef:77:4a:b8:79:8e:c2:8a:83:dc:e4:4a:e8:ba:19:34:a4:
33:53:a0:ed:9a:62:71:d4:35:b4:dc:2e:13:11:fa:e6:30:8b:
57:1c:52:64:eb:a8:ae:6e:89:16:51:ed:d2:8e:87:a1:08:54:
9e:0f:e1:27:a0:4c:37:5b:50:7e:74:0b:a6:52:cc:1f:78:32:
a1:57:db:25:21:fc:3b:0c:92:20:92:90:b8:cf:a7:0e:ce:3e:
f0:50:a6:51:c3:85:99:57:0b:c2:81:5f:1c:63:7e:68:f3:4c:
ff:76:8b:e9:cf:aa:fe:0f:b4:12:8f:7a:3f:c4:ce:d5:eb:d8:
59:ba:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:09 2026 by rpki-client