Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: WbgM6/oBiEtZ0q4U87TaX1Caj6JnRBWG2GTHUxGRl1Y=
Subject key identifier: CF:29:EC:CB:03:A9:E3:8C:67:AC:00:11:2D:C2:36:00:61:4C:AB:C2
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019D25838644AE48599E56F14C8B5D6BB4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0CB1
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: gTy6O+s9VQjwfEilj5SY6YSJBd93w11iGt6/d8fRF9U=)
2: m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa (hash: L3jK7ngzl36wT68C1jk8TWgb+EAYAtZ/AFxjRpzTIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:86:44:ae:48:59:9e:56:f1:4c:8b:5d:6b:b4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=cf29eccb03a9e38c67ac00112dc23600614cabc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:85:e6:b7:3d:0e:88:94:98:cf:86:fb:94:
53:82:98:92:9b:ef:ff:e3:bd:03:05:e1:c1:51:7a:
f4:a2:eb:ff:18:42:f1:b0:78:11:8d:99:4b:15:b4:
f1:10:93:81:ef:bc:d2:0c:ca:cd:29:90:cd:3e:be:
86:9e:27:bf:e3:3f:6c:eb:73:89:5f:fe:24:c1:bc:
6a:ec:49:f8:a3:2a:8d:5a:6c:91:95:31:8d:f7:f6:
4a:0f:43:40:98:1e:2b:95:52:44:31:f2:70:8b:1e:
94:18:f0:f8:ba:fe:f3:06:d0:e1:cf:eb:7d:2c:07:
dc:9d:81:6f:80:cb:3e:92:24:78:19:75:1d:c0:af:
2b:10:af:c6:c1:e7:49:68:d1:24:f4:80:96:64:38:
33:9c:86:0d:12:16:52:19:f3:b5:76:d7:56:a4:db:
b7:2e:48:6c:52:c0:63:5a:e9:ce:b5:7a:01:b2:cd:
76:ea:cc:ef:c0:42:8d:45:ab:12:4b:06:3f:ea:b2:
26:c4:00:35:78:44:e1:a4:9d:4d:98:4e:90:78:8a:
d3:19:61:5f:62:de:bc:ab:ed:21:8e:cd:69:3a:41:
e1:0c:4c:fc:7d:1a:ea:92:be:db:0c:cc:ef:9b:60:
f1:94:16:21:24:fb:c1:d3:fb:e5:9d:9b:d6:c6:0c:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:EC:CB:03:A9:E3:8C:67:AC:00:11:2D:C2:36:00:61:4C:AB:C2
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fe:99:46:f6:24:01:e0:a5:ad:4c:17:59:3b:a9:0d:58:83:
e6:a8:ff:9f:fb:86:c3:8d:9c:45:0a:1e:51:0e:65:8e:31:9d:
80:c3:7b:84:f9:80:12:6d:63:cc:6b:00:8f:ef:b4:e4:18:78:
14:d3:d5:6b:0e:1e:ec:18:3e:a4:e7:07:29:84:77:62:e6:ff:
af:8b:29:63:74:45:38:9b:d7:41:1d:e3:34:eb:6c:d5:98:2c:
00:e4:2d:68:4c:e0:0f:dc:36:4a:cd:ee:66:43:9b:e0:52:70:
f6:8a:b2:b3:31:e6:55:d5:72:56:29:ba:fc:70:a1:8e:c4:f6:
e1:56:aa:0e:39:02:fb:11:ec:1a:b4:80:c2:16:89:8d:16:ac:
3f:4f:a0:9e:04:9d:49:8d:fc:45:7c:c0:09:9b:fc:20:86:7d:
b4:82:53:35:83:b2:3a:72:67:71:8a:ef:07:0d:74:36:12:cd:
45:3a:b9:04:75:a5:b0:1c:4c:99:40:e5:7e:7d:8e:52:5f:70:
34:17:1d:df:78:62:32:fb:51:57:3c:fd:b7:25:fc:1b:90:cd:
57:9b:fb:c7:0f:5d:99:15:b4:d3:4e:25:0d:8d:c6:00:81:b5:
e3:fe:25:51:6f:01:02:7f:79:67:63:2a:7d:0c:e0:18:a5:b0:
80:33:d0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg4ZErkhZnlbxTItda7SgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2FkYzk3Zjk4MjYyNjIwMDdmNDYyODY1OTE4MzBkZjU4
ZmM1NWUwHhcNMjYwMzI1MTUwMTA5WhcNMjYwMzI2MTUwMTA5WjAzMTEwLwYDVQQD
EyhjZjI5ZWNjYjAzYTllMzhjNjdhYzAwMTEyZGMyMzYwMDYxNGNhYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktGF5rc9DoiUmM+G+5RTgpiSm+//
470DBeHBUXr0ouv/GELxsHgRjZlLFbTxEJOB77zSDMrNKZDNPr6Gnie/4z9s63OJ
X/4kwbxq7En4oyqNWmyRlTGN9/ZKD0NAmB4rlVJEMfJwix6UGPD4uv7zBtDhz+t9
LAfcnYFvgMs+kiR4GXUdwK8rEK/GwedJaNEk9ICWZDgznIYNEhZSGfO1dtdWpNu3
LkhsUsBjWunOtXoBss126szvwEKNRasSSwY/6rImxAA1eEThpJ1NmE6QeIrTGWFf
Yt68q+0hjs1pOkHhDEz8fRrqkr7bDMzvm2DxlBYhJPvB0/vlnZvWxgyIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8p7MsDqeOMZ6wAES3CNgBhTKvCMB8GA1UdIwQY
MBaAFCM63Jf5gmJiAH9GKGWRgw31j8VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWIt
NDU1YTEyYmM4MzAyLzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWItNDU1YTEyYmM4MzAy
LzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnv6ZRvYk
AeClrUwXWTupDViD5qj/n/uGw42cRQoeUQ5ljjGdgMN7hPmAEm1jzGsAj++05Bh4
FNPVaw4e7Bg+pOcHKYR3Yub/r4spY3RFOJvXQR3jNOts1ZgsAOQtaEzgD9w2Ss3u
ZkOb4FJw9oqyszHmVdVyVim6/HChjsT24VaqDjkC+xHsGrSAwhaJjRasP0+gngSd
SY38RXzACZv8IIZ9tIJTNYOyOnJncYrvBw10NhLNRTq5BHWlsBxMmUDlfn2OUl9w
NBcd33hiMvtRVzz9tyX8G5DNV5v7xw9dmRW0004lDY3GAIG14/4lUW8BAn95Z2Mq
fQzgGKWwgDPQkA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:31 2026 by rpki-client