Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: wc2s+Mp7updQ7f2dME4JB0xN7qBwCbRXZnMG650hki8=
Subject key identifier: A6:62:12:02:BB:02:78:DC:D5:1E:3F:DF:A8:14:53:28:63:96:A6:F6
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019CAC475DB9389FA78434F5E40812843BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 081B
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: xq/fdihKdQJouRwd0wEaEfIn1cIIW1zNmARfgpRSk4c=)
2: QEMDPwJ2cNS9ewt5zX-nDeHB4lc.roa (hash: ZAZFuVLV8kzOv/LeKj7q3UVNfSHjw6/4Wpf1tRlJMEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5d:b9:38:9f:a7:84:34:f5:e4:08:12:84:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=a6621202bb0278dcd51e3fdfa81453286396a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:f9:3a:93:75:dc:0b:29:fb:38:f3:60:c7:
8b:29:8f:ec:10:90:3d:70:52:3a:43:03:18:da:b3:
ae:37:2f:d9:6d:91:4c:b9:09:f8:d7:9c:4c:f2:d9:
d6:85:ba:93:8a:47:bf:e2:8d:88:64:78:51:b8:f7:
63:7d:9c:d4:01:bc:37:38:30:ad:ed:53:46:a3:59:
08:99:2e:3a:f3:d5:5e:3b:b7:07:33:da:29:0c:a9:
b4:9f:7e:67:d9:79:e9:34:b3:40:64:7c:dd:ef:3c:
d2:7b:ad:21:18:b3:29:6b:5e:72:4c:20:f5:d4:bb:
8a:cb:7b:23:61:81:a2:7a:71:68:67:6f:8b:d3:ce:
59:59:25:9a:04:b0:93:25:88:f1:cb:f0:c1:f5:b7:
91:5a:c1:f4:8b:e8:48:04:59:82:7e:e7:c9:5a:b5:
41:77:a5:7d:52:1c:71:2b:3b:64:52:b6:33:a1:f8:
6a:94:19:5b:1e:15:8d:11:bb:fd:66:bc:ae:8d:dd:
9f:34:e4:b4:92:f1:10:29:8b:2a:83:33:ac:55:86:
62:bc:2e:dc:cc:e6:41:4e:a6:77:ef:25:6d:37:a5:
c8:1f:10:a8:e7:3b:8e:aa:e7:d7:be:6e:4c:95:e9:
65:17:a4:54:6c:cc:72:00:7b:86:89:a6:a6:9f:dc:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:12:02:BB:02:78:DC:D5:1E:3F:DF:A8:14:53:28:63:96:A6:F6
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:24:65:e7:ef:64:27:37:61:6d:79:bc:71:3d:0d:50:bc:c6:
e5:d7:8d:5c:bc:10:33:46:88:0b:81:67:8c:8c:51:e3:ed:4d:
ca:b5:5f:77:63:1b:b1:4d:ff:14:7a:47:4e:0c:90:00:c5:d2:
0a:e9:82:39:87:b6:5c:53:fb:2d:4e:8f:35:1e:e5:84:b7:ea:
ea:df:0e:f8:eb:5c:ad:86:01:d1:21:02:69:d6:b2:41:db:dd:
09:08:4f:35:e4:6f:60:4f:5c:fc:09:6a:c5:b8:30:69:eb:f6:
be:0a:2f:d5:70:b4:c9:95:96:b6:5c:02:29:6e:a6:5e:b1:07:
88:23:6a:8e:8f:e4:72:2e:6d:5d:90:08:1d:44:59:29:20:eb:
89:b8:7f:2f:0f:c9:d9:81:6d:b8:12:31:4e:1d:68:34:6a:fd:
47:ce:70:c1:e1:32:ed:9a:9a:dc:53:41:91:e5:e4:e5:96:87:
d0:67:4c:29:da:17:05:7c:9d:7e:58:9e:11:30:43:04:cb:46:
06:e1:9c:a2:42:41:14:e5:32:dc:87:ea:b1:ec:65:2b:a9:df:
7b:a6:8a:45:4f:a8:ee:c8:33:09:81:56:e1:7d:fd:91:32:9f:
b1:cb:16:4c:7c:55:df:21:b2:ce:8a:2e:d1:58:50:b6:16:2b:
61:c5:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:58 2026 by rpki-client