Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: CLu2cg1EEnArvFSImtXNdAoLyHO6ifwCGB+EpTnINJ4=
Subject key identifier: 47:55:51:B7:CD:55:00:C5:2A:27:21:65:0A:EC:97:DA:16:E6:BE:FF
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019CADC84FCC3A104011B39E8035C277F212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1543
Signing time: Mon 02 Mar 2026 09:01:51 +0000
Manifest this update: Mon 02 Mar 2026 09:01:51 +0000
Manifest next update: Tue 03 Mar 2026 09:01:51 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: g8L76v8Ixjr4wW3j+SyYZUy5K2ZMBdq0MigLKO8I2r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:4f:cc:3a:10:40:11:b3:9e:80:35:c2:77:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Mar 2 09:01:51 2026 GMT
Not After : Mar 3 09:01:51 2026 GMT
Subject: CN=475551b7cd5500c52a2721650aec97da16e6beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:2a:a0:ee:27:0d:98:7e:1c:22:35:89:4d:
68:0b:bd:29:4f:7b:56:00:cc:77:c0:b3:b8:cb:c7:
15:5d:00:12:2e:46:ea:18:05:41:a9:6f:4b:d9:c8:
b0:31:e1:08:ed:2e:8d:e3:04:31:ee:c8:3f:c5:d0:
99:b5:9b:7d:4e:bd:d4:d7:ea:1d:4c:1c:11:d1:35:
7d:43:e1:50:26:75:f9:bf:0b:5a:68:bf:0f:e2:13:
20:82:5e:19:ac:c3:ac:b4:3a:9e:50:e2:01:0c:24:
b4:57:e9:aa:e2:26:be:8c:2a:77:9c:d6:ea:5f:33:
4d:45:fe:26:b7:0b:0b:09:d4:d6:42:c2:1b:df:3f:
63:cb:dd:a6:95:bc:ba:61:b2:02:c3:08:f3:ef:3e:
5f:5a:03:29:8b:37:cb:ab:2f:73:fb:fa:0a:f4:6a:
a0:05:c9:cd:60:ea:3c:5c:1f:66:51:fc:5c:08:19:
84:03:a0:d9:dd:ef:67:34:5b:58:f7:f8:24:86:5b:
20:e7:2a:5b:a8:18:4f:43:bb:b9:b2:bf:9e:e7:b1:
26:69:39:20:51:2a:34:ff:2c:3e:88:82:a3:4a:98:
6b:a4:74:18:40:ba:9e:4a:b7:4d:60:a5:ea:dd:9a:
e4:a1:e7:2d:a9:41:00:da:c9:ab:5e:73:58:32:6e:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:51:B7:CD:55:00:C5:2A:27:21:65:0A:EC:97:DA:16:E6:BE:FF
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fc:93:15:c3:4a:eb:46:54:6d:59:0e:62:87:77:79:b7:b0:
07:fd:7e:60:56:ce:17:b1:c1:77:38:5e:99:69:b2:e9:0d:f6:
d5:46:78:1d:e8:aa:83:3a:5a:52:35:89:92:7a:2a:1f:fe:11:
6d:1f:c9:c4:72:c4:20:d1:f9:55:af:b1:ac:cd:02:17:6b:26:
09:f9:ba:00:f6:da:03:c5:f6:de:df:2d:47:e1:fe:55:b4:89:
e4:b2:64:93:93:4c:e1:08:65:97:5e:60:ff:18:a1:00:0a:bb:
4c:c7:17:cb:b0:65:c7:30:dc:32:bf:d1:26:0a:92:4e:74:14:
dd:3f:7a:49:77:c0:f8:21:91:24:1a:ac:8c:4b:46:35:62:33:
0f:fa:25:e8:3c:3f:5c:42:2b:ee:0a:c6:42:71:24:d8:b1:87:
94:5c:80:92:d9:a5:9c:5c:1b:00:d6:9d:1f:87:ba:fe:72:15:
b3:c6:81:62:97:fc:6d:98:1f:de:f0:e2:2e:92:94:eb:03:c8:
51:41:4c:1f:83:d7:86:93:37:0d:c7:50:20:cb:8c:8a:4f:72:
6f:cf:b0:6b:00:b1:54:24:2e:f6:28:76:ed:55:d5:55:36:bd:
ae:7d:df:fd:86:ab:6e:55:5c:b0:01:c2:b4:4a:1c:f5:78:a7:
33:f5:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:44 2026 by rpki-client