Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: T/8GwHWM6auep0Gqweec1oVcMzltXRtDUAVT/w/mFnU=
Subject key identifier: 0B:06:6B:4E:29:35:2F:AD:F4:80:0B:36:F8:58:26:B6:39:2C:A4:21
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 019D25839B1A96A06194E1CA8295166B33FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0CF2
Signing time: Wed 25 Mar 2026 15:01:15 +0000
Manifest this update: Wed 25 Mar 2026 15:01:15 +0000
Manifest next update: Thu 26 Mar 2026 15:01:15 +0000
Files and hashes: 1: 1dTA6KlWl5sF4kQalZTPxUegVZE.roa (hash: rDk2rl5yPqtGgX9/dF9fWYCOXDGqIUWxZCuI1rSvVok=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: ghk5edTmgEHqOR8rrufhPARqBToKtl0ckPdlVd9nLYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9b:1a:96:a0:61:94:e1:ca:82:95:16:6b:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Mar 25 15:01:15 2026 GMT
Not After : Mar 26 15:01:15 2026 GMT
Subject: CN=0b066b4e29352fadf4800b36f85826b6392ca421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:bd:82:de:0c:bc:fc:d2:26:ba:87:0d:f1:
39:0e:d8:64:d6:5a:18:f1:b7:b4:ec:7d:74:d9:1e:
35:09:b9:9e:af:d7:d1:2e:64:58:44:30:ad:e4:7d:
9b:1b:db:44:e0:cb:65:e2:36:4f:46:94:86:e4:41:
95:01:0b:02:3c:27:fd:62:78:a7:6d:65:da:9e:cb:
f7:d5:e1:73:e9:c0:11:bb:42:59:a9:2e:2c:da:50:
5a:c1:1a:eb:28:89:36:e0:d7:43:8e:e8:57:39:b3:
4f:0a:91:19:c8:f2:8b:cf:2a:11:85:39:a6:ac:86:
a0:e6:ae:16:d3:d6:64:ee:b7:47:a0:bc:76:09:3f:
d3:e2:87:8a:b7:73:06:5b:dd:ef:8d:52:c0:3b:f1:
37:3a:15:4c:6c:10:47:7d:68:3d:15:fb:cd:0d:93:
46:69:be:a8:89:4e:25:a6:0d:59:f0:9b:e1:85:a7:
a4:6e:f1:d7:c8:93:1b:7f:4a:97:f3:e6:3f:df:8c:
f0:22:e3:48:7d:c7:b9:cc:eb:b3:f3:52:de:ca:e1:
12:8c:1b:b8:8d:1c:7a:8d:fb:9f:01:ff:76:0a:ca:
37:a1:a1:31:c0:24:7d:b8:67:29:6d:a7:ff:4e:f3:
34:23:7c:30:f3:5e:6f:91:04:82:eb:57:92:33:55:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:6B:4E:29:35:2F:AD:F4:80:0B:36:F8:58:26:B6:39:2C:A4:21
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:17:4d:16:e1:50:aa:14:b8:52:49:20:2c:10:b1:0b:ae:25:
be:93:0d:20:a5:48:0a:6d:b3:e2:0c:2b:02:3b:2c:6a:31:a6:
10:49:19:89:be:92:e6:46:7f:a2:f5:d7:5d:b1:25:86:6b:3e:
c2:8c:21:b5:92:53:ea:1c:ea:64:3d:8b:cf:33:01:9b:55:ed:
2e:7d:15:b1:7b:35:7d:f7:ba:88:3d:44:23:c6:e3:de:3c:ad:
7d:65:99:62:1f:67:9d:bb:1e:ee:f5:21:83:36:44:48:f2:ae:
4d:96:f9:96:28:99:6b:09:9e:c3:2e:58:11:9f:19:75:9a:36:
64:8d:ac:d8:a9:a9:b3:b1:d6:b1:be:fe:27:41:3c:0d:00:4d:
e4:92:0a:cc:3d:ca:02:b9:76:96:f7:79:a2:72:ee:d0:34:6d:
73:11:55:c0:2f:97:44:61:aa:47:f2:b5:d9:db:a4:52:7f:52:
20:f1:7c:d2:20:8e:59:66:e4:c5:d5:c5:70:c4:60:67:67:03:
3c:5a:3f:80:4c:f8:89:10:f2:ea:60:ff:1f:65:3a:76:49:66:
c1:95:a3:b4:de:e0:9e:de:9d:99:e0:2d:ce:a2:36:36:70:36:
ec:d2:b3:06:4e:c2:2b:40:ca:e7:a0:15:50:6e:9e:15:1f:d8:
aa:27:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:14 2026 by rpki-client