Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: YyOZ9GzkDvWz0gITBieudJsxaf4RCm7ashut+CwpjMM=
Subject key identifier: AB:BE:74:6E:12:67:EB:F8:E2:1C:31:F6:B6:11:0D:42:07:31:5E:12
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019FACE3D4516E22B166CD573D135A1F966B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 09AD
Signing time: Wed 29 Jul 2026 08:00:39 +0000
Manifest this update: Wed 29 Jul 2026 08:00:39 +0000
Manifest next update: Thu 30 Jul 2026 08:00:39 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: HJr6hH7vdmfFrjnMcAyAeGWqK1hhKVVQcGucJZ9qgqM=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:d4:51:6e:22:b1:66:cd:57:3d:13:5a:1f:96:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jul 29 08:00:39 2026 GMT
Not After : Jul 30 08:00:39 2026 GMT
Subject: CN=abbe746e1267ebf8e21c31f6b6110d4207315e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:ab:55:ef:c2:e8:26:f5:71:c4:df:92:c8:
08:46:09:9c:1f:2f:4c:b3:96:b4:c2:f2:9a:06:9a:
d8:3a:85:da:34:c4:4b:3a:ca:fd:ec:8c:d4:da:a3:
cf:17:43:a3:00:de:fc:78:62:3b:d5:e7:20:67:94:
3d:42:18:38:6b:98:94:c6:62:bd:a1:9b:79:0f:23:
ef:22:a2:75:0a:6e:26:cd:b3:b7:53:3a:b9:c8:6a:
d2:14:77:e9:d0:ee:ea:c1:d8:8c:23:06:2d:ed:6f:
f6:4f:91:23:d5:ab:8e:82:1a:be:2c:4a:36:b6:a1:
2a:7a:ec:4f:1b:ae:8a:27:75:97:48:07:89:ab:43:
53:7a:ee:70:0f:78:01:5a:1e:5d:03:8a:36:59:ac:
b7:f3:fd:50:ca:f4:18:a2:d1:df:b7:38:50:6c:65:
58:f8:b8:8e:29:58:a6:3e:35:d2:fa:75:c3:30:2a:
8e:43:38:e9:8a:57:fb:aa:0d:a7:a7:c9:27:7c:dd:
c2:9c:81:5b:93:2a:be:f5:ad:ef:5f:2d:10:77:e1:
76:2a:74:c0:12:07:d4:48:65:ef:a5:d7:f8:88:ea:
28:5d:01:a1:8c:ab:32:82:b8:49:99:6e:83:0f:72:
d0:5f:05:e1:c8:5a:17:df:d8:c6:32:9f:48:11:16:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:74:6E:12:67:EB:F8:E2:1C:31:F6:B6:11:0D:42:07:31:5E:12
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:91:7b:1a:df:37:be:b4:ff:5c:26:da:0b:4d:0e:6c:3c:6b:
ed:b6:6c:e9:80:80:d8:b4:a7:88:58:d3:b5:6f:2b:71:a7:77:
ab:e4:8d:07:27:60:c2:a6:6f:9f:ad:dd:a9:f4:ec:47:6e:fc:
27:56:fd:45:7c:20:9c:5c:aa:b4:f2:61:cd:4a:b2:b7:a3:7a:
af:4f:0d:41:39:21:4f:2a:76:16:b7:04:c5:44:84:44:aa:ca:
c6:df:50:9a:c0:00:a3:64:3e:aa:9e:fd:08:61:4d:be:b1:02:
98:e9:b4:71:6f:c6:bb:be:5b:da:42:4c:2b:30:86:c6:16:99:
36:b6:22:b0:6d:b6:22:da:c1:74:d3:ba:db:fc:cd:1f:de:99:
a3:e1:17:2d:ce:5f:d2:ae:09:19:1c:d3:dc:ac:79:08:10:a7:
6b:5c:86:33:63:e7:44:78:65:5d:a1:a5:e1:7d:70:53:3d:f7:
72:a7:47:83:00:d2:21:d2:70:5c:15:73:21:d9:93:3d:29:56:
e9:2f:34:ec:37:40:b8:74:e7:29:15:0e:13:88:92:78:16:10:
8b:c2:fe:01:eb:ce:b1:6c:35:99:53:7a:42:c7:33:d5:26:e3:
6c:ef:bb:8c:5c:65:ba:95:5f:3a:85:4b:f9:46:ad:30:b4:6b:
10:28:0c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s49RRbiKxZs1XPRNaH5ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj
MjgzMjkwHhcNMjYwNzI5MDgwMDM5WhcNMjYwNzMwMDgwMDM5WjAzMTEwLwYDVQQD
EyhhYmJlNzQ2ZTEyNjdlYmY4ZTIxYzMxZjZiNjExMGQ0MjA3MzE1ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yKrVe/C6Cb1ccTfksgIRgmcHy9M
s5a0wvKaBprYOoXaNMRLOsr97IzU2qPPF0OjAN78eGI71ecgZ5Q9Qhg4a5iUxmK9
oZt5DyPvIqJ1Cm4mzbO3Uzq5yGrSFHfp0O7qwdiMIwYt7W/2T5Ej1auOghq+LEo2
tqEqeuxPG66KJ3WXSAeJq0NTeu5wD3gBWh5dA4o2Way38/1QyvQYotHftzhQbGVY
+LiOKVimPjXS+nXDMCqOQzjpilf7qg2np8knfN3CnIFbkyq+9a3vXy0Qd+F2KnTA
EgfUSGXvpdf4iOooXQGhjKsygrhJmW6DD3LQXwXhyFoX39jGMp9IERYzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu+dG4SZ+v44hwx9rYRDUIHMV4SMB8GA1UdIwQY
MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt
NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi
LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupF7Gt83
vrT/XCbaC00ObDxr7bZs6YCA2LSniFjTtW8rcad3q+SNBydgwqZvn63dqfTsR278
J1b9RXwgnFyqtPJhzUqyt6N6r08NQTkhTyp2FrcExUSERKrKxt9QmsAAo2Q+qp79
CGFNvrECmOm0cW/Gu75b2kJMKzCGxhaZNrYisG22ItrBdNO62/zNH96Zo+EXLc5f
0q4JGRzT3Kx5CBCna1yGM2PnRHhlXaGl4X1wUz33cqdHgwDSIdJwXBVzIdmTPSlW
6S807DdAuHTnKRUOE4iSeBYQi8L+AevOsWw1mVN6Qscz1SbjbO+7jFxlupVfOoVL
+UatMLRrECgMHw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:47 2026 by rpki-client