Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: rBT/MsI6nNK2ReZspYc937rY1xaRvSIWGpHIY2EKxt4=
Subject key identifier: A1:BA:08:79:E4:13:32:A3:8B:08:A2:DB:63:37:DC:56:F2:6C:AD:39
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 019D292946C03C1E26798FA03F584D3EA952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: 043A
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: prx6Gg0N1X+nbk+hAUeUvOrPE/cbouk9elZzGK2MknM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:46:c0:3c:1e:26:79:8f:a0:3f:58:4d:3e:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=a1ba0879e41332a38b08a2db6337dc56f26cad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:95:28:7c:2d:88:96:ea:ba:8e:fa:aa:0b:
48:2f:e6:49:2d:43:6e:3f:8c:da:77:4d:91:e6:51:
c7:57:6a:e6:87:5f:40:d8:cc:3f:b0:d5:d5:e3:ff:
18:45:53:a1:9e:39:5a:4f:e8:d3:28:47:2b:d2:02:
db:1b:50:76:e3:bf:e6:f8:8a:eb:49:c0:7d:14:bd:
52:77:cc:1c:6c:8f:41:2c:37:b1:4b:1b:94:9b:91:
fa:88:48:a1:11:3a:2c:71:6e:6d:f5:08:a9:8c:07:
34:55:dc:a9:49:6f:ff:d4:a8:f0:21:3d:18:f1:c5:
3a:44:29:7b:69:f2:eb:68:6d:4d:60:ff:1b:57:fb:
49:a8:80:09:b1:dd:a1:5e:5f:e8:f8:4b:81:3e:4d:
b9:59:55:e2:30:47:a1:4d:75:a1:c1:5a:ef:8b:38:
87:57:df:f8:8b:47:70:c0:f5:6a:2c:34:d7:a5:66:
4b:27:0d:4a:fd:9b:06:84:23:8c:0d:d4:55:cd:a1:
32:a9:02:fe:e3:09:a6:21:d7:23:0f:bb:13:2f:88:
2b:8f:c8:61:85:40:54:f9:2f:eb:31:bc:e2:8f:eb:
b5:37:e9:a6:3a:ee:e6:32:a4:51:01:55:f9:2d:ef:
3b:e4:4e:8a:30:ed:85:c4:63:18:88:93:cb:bd:1b:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:08:79:E4:13:32:A3:8B:08:A2:DB:63:37:DC:56:F2:6C:AD:39
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:b4:c4:76:18:a4:2c:e1:9c:bf:8c:f5:48:96:7b:ef:88:
d7:70:50:48:24:f9:80:6d:54:82:f2:25:06:7b:73:4a:0f:2d:
b5:e5:61:d7:4c:7f:b4:e0:ae:e4:5e:a6:d6:77:65:b3:35:2c:
80:10:5f:b8:f9:6a:75:56:5d:eb:2e:bd:04:cc:22:6c:e7:7e:
0b:d9:cf:37:d0:fb:fd:74:95:60:b5:90:ec:c7:c4:66:73:77:
14:0a:3e:fb:ad:1a:c1:30:3e:86:ba:0b:5d:c5:b2:66:32:bb:
83:70:ea:4b:31:9d:69:06:8e:65:6c:51:7e:9e:d8:ef:24:7c:
8c:c3:21:9a:0f:ae:aa:9a:1e:99:ef:69:ad:f6:38:f9:9f:79:
76:b5:57:cd:b6:25:19:72:2f:eb:3a:91:7e:e0:fd:db:14:48:
e4:46:36:96:d2:c6:f5:f7:d9:b6:38:d2:75:a6:d3:33:96:7c:
67:05:1f:ef:73:13:c0:1e:1e:53:cb:2a:48:74:71:8d:bd:f7:
4c:7b:a5:50:dd:8c:e9:59:6d:6d:c0:90:e7:8d:2f:20:1e:e8:
a1:64:8f:a6:06:df:79:d6:b4:73:ce:da:99:8a:72:40:2d:49:
22:5e:88:46:cf:6c:23:ae:8c:22:af:37:fc:2f:66:ed:4c:1d:
82:68:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:08 2026 by rpki-client