
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
File: izwijjENBbA9CxZH6YYboLjUdsI.mft (raw, json)
Hash identifier: EVbKYVyB9tNk8GeXzD1njTA7rBCLmrRZELZD7khzTes=
Subject key identifier: 77:40:AE:82:3A:21:64:AC:FF:58:28:B0:6F:BE:E3:E8:10:2E:4C:BA
Authority key identifier: 8B:3C:22:8E:31:0D:05:B0:3D:0B:16:47:E9:86:1B:A0:B8:D4:76:C2
Certificate issuer: /CN=8b3c228e310d05b03d0b1647e9861ba0b8d476c2
Certificate serial: 019D2628021FB419D7CF480463892FF5C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
Manifest number: 6F
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: izwijjENBbA9CxZH6YYboLjUdsI.crl (hash: p+IZHXex4thvYMJtRyRlKWqw1jLeDTPWGEoGAAvTKH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:02:1f:b4:19:d7:cf:48:04:63:89:2f:f5:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b3c228e310d05b03d0b1647e9861ba0b8d476c2
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=7740ae823a2164acff5828b06fbee3e8102e4cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:09:e3:b0:52:3e:cd:55:00:1b:34:3f:d2:
b5:5c:5c:28:7e:cc:15:27:92:28:3c:e3:c5:85:f2:
d9:7e:89:62:81:34:40:ab:87:f6:3e:87:d7:4e:37:
dd:c7:c3:f2:58:95:a2:c0:e6:ae:1c:b7:96:3b:15:
84:75:ac:94:6b:b5:0e:3a:23:75:32:c6:eb:e9:cf:
c3:e9:b2:4a:78:3f:20:3a:3d:e0:f9:37:9e:61:fe:
3e:7c:35:7c:c0:6d:35:f2:61:d1:e6:e2:71:9d:32:
fa:0a:2a:07:e9:2c:3c:b5:da:05:04:16:3a:15:7e:
54:62:e9:28:54:21:14:3b:8c:8d:20:87:ce:80:5d:
0c:96:72:24:c6:3e:73:aa:0a:25:1c:6e:9f:d3:c2:
9f:e8:19:64:c7:7f:fe:0a:e2:a0:74:4b:cf:e4:45:
77:b8:b2:43:34:43:01:a5:f5:11:70:33:c2:38:25:
af:df:b7:08:54:46:f1:56:ff:07:17:e0:e1:ce:8e:
68:7e:5b:2f:7c:63:c3:9b:2f:2a:ee:cb:fa:ab:a1:
1e:95:c3:e8:65:6e:42:f2:fc:bd:2f:62:8a:c6:da:
df:ad:07:d5:49:0e:0b:8f:5d:4f:d1:5c:97:39:30:
40:37:2f:df:8f:1d:72:84:81:39:16:f1:fd:b6:1e:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:AE:82:3A:21:64:AC:FF:58:28:B0:6F:BE:E3:E8:10:2E:4C:BA
X509v3 Authority Key Identifier:
keyid:8B:3C:22:8E:31:0D:05:B0:3D:0B:16:47:E9:86:1B:A0:B8:D4:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:fd:06:e7:2a:3b:c7:0d:f1:f1:fb:f1:34:ae:e3:c4:65:
da:6a:e1:bd:21:37:f1:6e:76:78:fc:df:fc:8f:d6:02:43:12:
c5:5a:09:1f:2e:ac:9d:4c:fa:ae:85:54:72:b8:55:1f:2a:e6:
f2:cc:57:5b:17:f9:11:b6:d3:b4:6f:6a:5f:e1:b4:b7:54:35:
0a:86:0f:59:92:39:a1:43:ba:02:1b:5b:e9:da:6a:ff:25:4d:
db:22:1d:bc:1e:c4:cc:e9:fd:2c:cf:3a:16:0a:d0:bc:43:5c:
20:1a:1b:02:8a:d7:be:6f:44:3e:28:3b:5c:f9:2d:c0:84:ff:
09:b0:df:cd:9b:d0:77:bd:95:9d:36:14:18:a2:1c:84:4a:4d:
ed:95:6d:b3:92:28:84:f6:32:4a:37:9e:3f:95:5c:d9:7d:a5:
7b:d9:93:9f:be:90:e4:5c:97:7d:b4:eb:e3:ba:85:bd:26:ce:
63:ea:68:09:26:5a:d6:f8:e2:7a:c5:c1:8a:dc:eb:40:33:17:
7a:3f:4b:fb:f7:c4:52:11:b2:17:7d:4a:21:f0:60:ec:32:ee:
84:55:37:39:ef:a3:93:1d:84:3d:4b:f5:7a:f3:b8:23:20:64:
e5:ca:c3:d3:8f:d7:84:23:57:73:97:3f:ef:7f:58:93:27:69:
2d:bf:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:26 2026 by rpki-client