Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier: qsSNnXO+CA23R8qzikslQi2HJ6LT+RS0i0ScKAYBzU0=
Subject key identifier: D5:6E:4A:9A:26:95:69:F3:4F:6B:89:43:E3:18:0E:8F:15:09:D9:80
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial: 019FA7BDF29C95961D4910DCD257E4CDDB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number: 021B
Signing time: Tue 28 Jul 2026 08:01:11 +0000
Manifest this update: Tue 28 Jul 2026 08:01:11 +0000
Manifest next update: Wed 29 Jul 2026 08:01:11 +0000
Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: ycd6FMBO//JNXIbJZ8pMSXpqQurTwu/rMKU67V/QeAw=)
2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:f2:9c:95:96:1d:49:10:dc:d2:57:e4:cd:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Validity
Not Before: Jul 28 08:01:11 2026 GMT
Not After : Jul 29 08:01:11 2026 GMT
Subject: CN=d56e4a9a269569f34f6b8943e3180e8f1509d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:c7:5d:cd:47:3d:9f:47:5f:50:32:52:fe:
92:41:d7:a0:1b:28:09:f8:0e:65:7b:f8:1d:50:34:
44:4f:f9:cc:7b:b1:2a:4e:7a:bb:b2:8a:74:eb:d0:
33:b9:ae:c8:cd:dd:a1:36:58:ba:17:cc:ca:f6:e5:
ad:75:1a:fc:bd:45:15:af:f9:67:e2:44:8b:6e:7f:
25:f2:a9:aa:73:ca:13:e0:5d:63:f0:d7:c1:d9:13:
8a:cd:55:54:ba:4a:66:e0:1c:2a:b1:bb:57:da:31:
f4:85:02:3c:76:96:43:1d:3e:24:59:d9:ce:b0:f9:
4a:f3:e3:73:7c:89:73:66:a8:ee:f9:7c:d8:25:ce:
35:a0:1f:82:0a:b3:3f:09:7f:7c:3b:4e:ea:5a:90:
87:11:20:f6:c1:b9:f3:03:97:bc:f5:6f:2a:84:0b:
60:6a:3b:67:a5:85:57:27:8b:1f:56:87:51:ac:9d:
2e:61:cf:37:39:01:e3:c8:a5:f7:81:dc:79:4b:b7:
7a:c6:2c:af:20:02:30:69:2d:cd:7a:7f:4d:58:c4:
1b:73:d0:32:62:91:21:cb:c1:35:ce:5a:af:6c:64:
3a:1f:d1:ad:92:36:c7:e7:c4:28:cd:0f:11:0b:4d:
c0:4c:c1:6d:11:80:7c:b1:df:bb:3a:39:42:0f:d8:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:4A:9A:26:95:69:F3:4F:6B:89:43:E3:18:0E:8F:15:09:D9:80
X509v3 Authority Key Identifier:
keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b3:73:ac:51:95:f9:28:f7:df:86:4f:8b:f4:45:7c:7c:67:
09:bc:bb:e4:a1:d7:bd:42:07:0f:36:e7:63:49:ac:0a:06:58:
40:cd:18:13:6f:ed:a5:6f:ee:6e:89:01:9b:81:28:7e:17:d1:
7e:8b:b3:da:8c:b0:8b:a8:1c:0c:3b:0d:ba:42:99:9c:80:64:
34:ac:ef:15:dd:e5:41:d4:a7:8c:68:d4:e3:6a:56:38:fa:38:
aa:28:39:2c:cb:f2:56:c9:de:88:cb:26:81:ee:15:53:60:06:
9a:1f:b8:a4:a0:58:e9:51:ee:49:d2:bb:52:7d:46:a9:9d:69:
40:7e:37:27:6c:f8:40:a6:28:49:2f:32:4f:f4:b3:60:3e:04:
c0:fe:f6:fe:1a:a5:88:d0:d0:20:5a:54:da:94:d3:4b:47:f0:
d4:33:d0:e4:4b:7e:05:6d:ab:e6:0d:45:76:84:e0:3c:0f:cd:
03:be:fa:f1:80:5b:7d:e4:c4:7e:12:d0:39:3c:95:c1:6f:42:
e4:68:d5:fe:84:c4:bf:bb:f3:fa:d9:f9:8f:83:05:65:46:d5:
39:c9:e3:30:70:66:8f:27:2a:12:b8:0e:15:97:06:12:03:8f:
bf:1c:16:b3:2d:04:51:78:e6:c5:bc:50:71:94:07:7c:e2:68:
a1:25:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:29:24 2026 by rpki-client