Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: vIqLmth235tmNwPUqF4E/dCLHfkTJnqrdeumoocsSFE=
Subject key identifier: AE:E1:CB:31:3F:05:6C:BD:DC:96:9A:86:67:B0:00:8B:1E:06:A7:80
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019D9B5085200006D75273893845C728D305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 15BE
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: U7+M2xxp73rJQrvHKVw+85b+5lHO6ikIfVrh1EKPRIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:85:20:00:06:d7:52:73:89:38:45:c7:28:d3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=aee1cb313f056cbddc969a8667b0008b1e06a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:22:44:82:41:06:21:5b:f9:55:47:e1:d3:
3f:10:4d:d1:aa:da:02:7b:16:a5:e9:67:06:49:82:
75:4a:2f:47:4e:27:18:9a:18:db:9c:75:d6:43:73:
1b:f1:2d:d9:be:5f:bb:97:67:b2:64:b8:82:09:2d:
3d:5c:d2:6c:b7:28:e5:44:6b:12:f5:64:59:92:8a:
85:82:ce:2b:cb:cf:f5:43:85:fc:2c:ba:ad:e3:46:
d4:6a:19:36:81:d8:d4:fd:64:fd:47:03:67:c4:f1:
ac:83:08:8b:2d:02:0d:be:b6:bc:f1:b0:63:c1:93:
e8:24:28:c2:18:05:ee:ff:68:6f:25:63:46:9d:b1:
53:14:35:fd:73:e6:2d:36:f5:a8:ad:80:05:d9:53:
4d:51:2f:d0:37:19:d6:a5:4b:98:68:cb:02:34:fa:
0f:c0:a3:ff:68:8a:77:be:23:cd:49:fb:e2:73:5f:
90:32:f8:a9:04:f5:9b:cc:cb:2e:de:24:c1:4f:da:
03:6f:23:fb:8e:dd:9a:9c:9e:93:1b:76:79:b5:98:
6c:4f:5b:64:75:47:3b:de:7c:92:3d:b6:23:aa:ea:
4b:f6:9e:b6:d1:e6:98:37:9a:3d:21:c5:ac:93:3e:
76:7d:a4:5f:f7:e3:15:9f:9b:bc:3f:9b:af:2d:f3:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:CB:31:3F:05:6C:BD:DC:96:9A:86:67:B0:00:8B:1E:06:A7:80
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:ac:ae:1d:62:95:fa:83:97:de:be:44:f1:91:52:9e:09:
6b:9e:62:07:44:e5:94:e4:cc:3f:81:fd:bb:b3:c2:07:de:54:
d6:28:e7:c8:22:2a:d7:7b:62:4d:ee:75:ce:c4:a7:39:fd:e0:
94:22:43:64:d8:6e:db:8c:e7:84:78:9e:3d:28:94:7e:17:73:
c5:8c:3b:3d:bb:54:f6:5e:64:f0:a9:fc:6b:39:0e:32:57:ed:
06:08:82:4c:b8:23:dc:3e:e7:49:d1:5b:62:4f:7c:2e:a1:15:
f0:cf:9a:8f:12:ae:fa:d0:bf:7c:a5:24:88:e1:6b:16:e0:a5:
38:55:18:f1:59:48:fd:15:04:c1:f1:4f:b8:56:b4:10:75:27:
b7:8b:68:4e:5f:d8:0e:81:31:31:b2:67:28:a7:ed:fa:63:dc:
0e:10:68:c0:ee:ab:63:40:06:c3:65:da:82:d2:27:62:2e:21:
f3:22:03:f3:02:22:50:b2:65:f0:ec:c2:d2:50:76:15:fb:fb:
07:17:5c:4f:d8:8e:50:8a:bd:dd:34:15:d6:ff:53:5a:1b:06:
13:cd:56:4d:d7:d1:2a:7a:8e:0d:e4:4c:81:0e:5e:b6:7e:15:
1a:19:45:26:1d:09:4a:bd:96:04:e9:f2:5a:61:ce:3e:86:6b:
3b:ac:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:54 2026 by rpki-client