Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
File: IzwGR7WIf4X8n40UqN5aNp6-5k8.mft (raw, json)
Hash identifier: YKyOv1Wns1+SOkRc3iPMfu40Jg9hQLsPbOv3Z3Lgqd4=
Subject key identifier: F0:8D:6A:36:12:0E:24:FC:8E:F9:98:4A:23:41:1C:E2:9B:9E:AE:84
Authority key identifier: 23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F
Certificate issuer: /CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f
Certificate serial: 019D2695D84D136A465475B4A03E1B02DF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
Manifest number: 7F
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: IzwGR7WIf4X8n40UqN5aNp6-5k8.crl (hash: Thggy4rHHiWUQTRb9ZNX6RX2v1Hkl/+Oq8dzHhP+CyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d8:4d:13:6a:46:54:75:b4:a0:3e:1b:02:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=f08d6a36120e24fc8ef9984a23411ce29b9eae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:2f:41:5d:f9:58:3c:e4:cb:0c:a7:c4:51:
8c:d5:b7:2c:50:c0:af:32:54:de:94:0b:a9:42:03:
42:55:f4:b0:8d:15:fb:2a:37:e6:96:0f:50:77:35:
f2:96:33:c3:35:07:e9:4d:fe:4d:28:ab:9b:22:27:
fe:d1:e5:e0:c3:24:5f:0f:27:e3:49:b2:b9:50:a6:
eb:10:6d:46:d3:f9:9c:3f:5b:fe:c3:5f:4f:39:8b:
61:bc:26:e3:b0:ff:50:a0:a6:b9:33:f5:79:c6:8c:
d3:da:c6:d4:e5:7a:20:f7:82:31:47:3f:be:bf:1f:
a5:a9:b6:a6:41:b6:67:12:b7:7e:7e:bb:b4:9a:e7:
47:02:a2:1c:ae:07:91:f1:db:33:f4:c5:e9:97:b9:
9d:da:a6:08:cd:e2:98:fa:54:47:53:d6:1f:1a:0f:
06:54:4a:df:41:b8:dd:43:c7:8a:3b:52:5f:58:8c:
c7:6b:47:d2:e2:bb:2f:1a:5d:96:24:e3:fe:6c:1b:
3d:ef:e6:2b:a2:63:fb:22:91:5f:04:47:45:d0:56:
b1:16:31:9f:ab:a8:23:a7:13:6a:9f:0c:48:6b:e4:
e7:a8:af:e2:89:ae:85:60:60:ec:c7:7e:1b:8b:b5:
06:0f:b8:b8:35:87:d6:6f:0f:31:ec:47:dd:f8:97:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:6A:36:12:0E:24:FC:8E:F9:98:4A:23:41:1C:E2:9B:9E:AE:84
X509v3 Authority Key Identifier:
keyid:23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:e5:45:73:48:5a:95:c0:b7:1b:c1:78:60:0a:7e:bb:46:
13:50:69:4c:ea:7c:b7:16:94:46:2b:22:fe:f3:fa:f3:d6:2d:
18:6b:2b:8b:c8:8b:4d:e6:1c:cc:c0:7b:da:18:dd:35:45:8d:
e5:53:3f:71:81:62:8e:4f:e6:34:42:73:3c:73:da:ec:38:e4:
0a:d1:5b:5a:03:c2:5b:92:75:fb:df:d2:92:16:eb:30:89:0d:
97:8a:49:c7:db:2e:9d:a2:02:d2:24:cf:b5:9c:f5:2f:21:00:
48:af:ab:56:df:18:5b:27:e8:fc:da:b0:b9:47:a8:20:4c:1c:
28:52:de:3d:eb:f3:9d:a6:05:dd:2f:ec:27:7f:24:13:eb:49:
49:1b:58:e5:7d:da:c1:df:e4:f4:43:08:6d:b1:79:51:33:9f:
36:e7:68:d5:38:b4:3b:ae:0b:01:86:84:98:1f:a9:79:02:c7:
85:5c:7f:b7:87:ae:a1:73:37:a1:be:e3:f8:21:f7:8b:7f:dd:
3e:44:40:1d:e2:7a:d8:34:e1:fd:f5:48:14:5f:ce:a6:5e:d4:
10:40:46:95:79:bd:78:1e:2c:31:97:a7:a1:d0:31:46:45:ab:
94:a5:37:ec:79:18:e1:4a:e7:1b:ba:2c:2d:e4:12:c2:2b:bd:
71:1a:54:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldhNE2pGVHW0oD4bAt8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2MwNjQ3YjU4ODdmODVmYzlmOGQxNGE4ZGU1YTM2OWVi
ZWU2NGYwHhcNMjYwMzI1MjAwMDQ3WhcNMjYwMzI2MjAwMDQ3WjAzMTEwLwYDVQQD
EyhmMDhkNmEzNjEyMGUyNGZjOGVmOTk4NGEyMzQxMWNlMjliOWVhZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikUvQV35WDzkywynxFGM1bcsUMCv
MlTelAupQgNCVfSwjRX7Kjfmlg9QdzXyljPDNQfpTf5NKKubIif+0eXgwyRfDyfj
SbK5UKbrEG1G0/mcP1v+w19POYthvCbjsP9QoKa5M/V5xozT2sbU5Xog94IxRz++
vx+lqbamQbZnErd+fru0mudHAqIcrgeR8dsz9MXpl7md2qYIzeKY+lRHU9YfGg8G
VErfQbjdQ8eKO1JfWIzHa0fS4rsvGl2WJOP+bBs97+YromP7IpFfBEdF0FaxFjGf
q6gjpxNqnwxIa+TnqK/iia6FYGDsx34bi7UGD7i4NYfWbw8x7Efd+Jcs4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCNajYSDiT8jvmYSiNBHOKbnq6EMB8GA1UdIwQY
MBaAFCM8Bke1iH+F/J+NFKjeWjaevuZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83ZTJjNjEtNjk4OS00MTRiLWJlY2Yt
OWRhY2Y5MzcyNWQxLzEvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83ZTJjNjEtNjk4OS00MTRiLWJlY2YtOWRhY2Y5MzcyNWQx
LzEvSXp3R1I3V0lmNFg4bjQwVXFONWFOcDYtNWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtLlRXNI
WpXAtxvBeGAKfrtGE1BpTOp8txaURisi/vP689YtGGsri8iLTeYczMB72hjdNUWN
5VM/cYFijk/mNEJzPHPa7DjkCtFbWgPCW5J1+9/SkhbrMIkNl4pJx9sunaIC0iTP
tZz1LyEASK+rVt8YWyfo/NqwuUeoIEwcKFLePevznaYF3S/sJ38kE+tJSRtY5X3a
wd/k9EMIbbF5UTOfNudo1Ti0O64LAYaEmB+peQLHhVx/t4euoXM3ob7j+CH3i3/d
PkRAHeJ62DTh/fVIFF/Opl7UEEBGlXm9eB4sMZenodAxRkWrlKU37HkY4UrnG7os
LeQSwiu9cRpU/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:48 2026 by rpki-client