Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier: ANwbaK766gB8hC6eDeapj+iQFQUbo5OC77PatLcUNUw=
Subject key identifier: CE:2A:04:2A:1B:69:23:EC:8E:45:1C:8F:14:A8:27:2D:03:79:2B:7F
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial: 01A133A2E8EF8EEA6129BE7495904034A0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number: 02E8
Signing time: Tue 13 Oct 2026 05:01:16 +0000
Manifest this update: Tue 13 Oct 2026 05:01:16 +0000
Manifest next update: Wed 14 Oct 2026 05:01:16 +0000
Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: COFO0sovvp2yYWl+flHmnxOjzqqKDgkDR9ekBolE/lE=)
2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:e8:ef:8e:ea:61:29:be:74:95:90:40:34:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Validity
Not Before: Oct 13 05:01:16 2026 GMT
Not After : Oct 14 05:01:16 2026 GMT
Subject: CN=ce2a042a1b6923ec8e451c8f14a8272d03792b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:60:09:38:57:e7:77:69:b6:14:13:9f:59:
e1:2f:72:13:cd:6d:ca:ba:28:fe:e8:b5:a1:50:62:
c8:77:6f:a0:9f:ea:f0:7a:5f:1e:f1:95:86:85:9f:
50:6d:12:15:5c:0e:21:e1:8e:ee:70:90:af:d9:8c:
70:c8:e4:6e:ff:b4:c8:12:90:76:c4:88:99:b5:35:
5d:bd:52:3c:01:40:09:4b:52:bc:e9:cc:60:e9:7c:
0e:73:ac:2e:e4:3a:9b:06:ff:70:bb:ba:e0:c5:0f:
63:46:9f:8c:a4:a4:33:4f:c1:64:74:ed:ef:ca:1a:
97:a4:a7:50:11:9f:68:c5:40:ed:d2:d5:bf:f8:4b:
7a:5c:b6:c6:84:5c:ff:26:9e:96:50:54:44:7d:c5:
66:2b:cc:7d:08:dd:ae:5b:58:0c:6c:d4:f4:cd:9a:
93:ae:bd:ff:c6:4e:94:d3:c8:32:3f:5d:bd:20:2c:
0d:26:67:2d:ae:50:a3:68:6d:b7:1a:97:e0:a1:b4:
f8:0b:fe:1f:2a:bc:c3:0b:50:91:51:85:8e:2f:e9:
f4:23:89:60:d8:16:25:7d:d1:f4:88:e6:3e:c5:9c:
23:45:54:32:2b:a9:02:87:b8:a3:af:11:2d:1f:0f:
99:af:89:e0:67:b3:6f:d2:0a:1b:ef:54:5f:6d:53:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:04:2A:1B:69:23:EC:8E:45:1C:8F:14:A8:27:2D:03:79:2B:7F
X509v3 Authority Key Identifier:
keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:76:ee:17:38:2c:8d:d4:a8:f5:12:0a:bc:83:8d:58:d2:
8e:d2:a8:a2:82:fd:9c:16:71:00:f9:52:e3:f1:33:59:50:3a:
10:00:ba:d3:98:05:25:83:53:a8:ce:f5:46:79:2f:25:f5:48:
8a:08:98:5d:35:67:38:e5:88:57:b6:e8:a1:18:4e:31:5d:df:
c7:0b:a5:0e:97:fb:7a:7f:4e:00:a7:a1:aa:b9:ac:1c:78:de:
02:06:d5:68:82:2a:a2:92:32:0b:92:4a:34:d7:74:41:67:9f:
bf:43:4e:4d:75:93:96:8d:27:db:a2:6b:2f:d9:05:71:d8:1e:
51:16:1f:4c:8e:2c:82:8f:25:4e:c6:50:e1:1e:3a:c4:bf:58:
33:62:d0:2e:f3:45:be:0e:54:0d:e2:55:a7:ad:1c:9c:75:06:
18:4c:36:90:0e:46:0a:5d:0f:62:49:81:fc:04:20:d0:a4:b0:
a4:e5:eb:0a:fe:12:3b:b2:ec:90:00:8c:ac:d5:ef:d8:c0:d7:
10:cc:e3:b8:7c:6f:10:14:1b:13:5c:37:f0:76:63:2b:60:83:
de:57:dd:b6:d4:ea:1d:08:23:47:6b:a1:40:34:6e:33:a0:67:
e2:1c:7b:08:d4:86:94:36:f9:3c:d3:7e:60:b5:06:e4:4b:64:
87:8c:32:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzoujvjuphKb50lZBANKDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj
ZGE4N2QwHhcNMjYxMDEzMDUwMTE2WhcNMjYxMDE0MDUwMTE2WjAzMTEwLwYDVQQD
EyhjZTJhMDQyYTFiNjkyM2VjOGU0NTFjOGYxNGE4MjcyZDAzNzkyYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNtgCThX53dpthQTn1nhL3ITzW3K
uij+6LWhUGLId2+gn+rwel8e8ZWGhZ9QbRIVXA4h4Y7ucJCv2YxwyORu/7TIEpB2
xIiZtTVdvVI8AUAJS1K86cxg6XwOc6wu5DqbBv9wu7rgxQ9jRp+MpKQzT8FkdO3v
yhqXpKdQEZ9oxUDt0tW/+Et6XLbGhFz/Jp6WUFREfcVmK8x9CN2uW1gMbNT0zZqT
rr3/xk6U08gyP129ICwNJmctrlCjaG23GpfgobT4C/4fKrzDC1CRUYWOL+n0I4lg
2BYlfdH0iOY+xZwjRVQyK6kCh7ijrxEtHw+Zr4ngZ7Nv0gob71RfbVPZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4qBCobaSPsjkUcjxSoJy0DeSt/MB8GA1UdIwQY
MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et
MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk
LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASJ27hc4
LI3UqPUSCryDjVjSjtKoooL9nBZxAPlS4/EzWVA6EAC605gFJYNTqM71RnkvJfVI
igiYXTVnOOWIV7booRhOMV3fxwulDpf7en9OAKehqrmsHHjeAgbVaIIqopIyC5JK
NNd0QWefv0NOTXWTlo0n26JrL9kFcdgeURYfTI4sgo8lTsZQ4R46xL9YM2LQLvNF
vg5UDeJVp60cnHUGGEw2kA5GCl0PYkmB/AQg0KSwpOXrCv4SO7LskACMrNXv2MDX
EMzjuHxvEBQbE1w38HZjK2CD3lfdttTqHQgjR2uhQDRuM6Bn4hx7CNSGlDb5PNN+
YLUG5Etkh4wy5w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 15:03:29 2026 by rpki-client