Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: idHOUK4w/4BIeymv8uOP4pxsXSkDlaU+uQxhxDOlvMk=
Subject key identifier: 68:1D:DF:30:48:43:49:2C:EA:BD:0E:3B:E4:33:F5:14:74:B6:24:4A
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 01A0C8C60B37C88308094E098345672ADE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0A40
Signing time: Tue 22 Sep 2026 11:00:17 +0000
Manifest this update: Tue 22 Sep 2026 11:00:17 +0000
Manifest next update: Wed 23 Sep 2026 11:00:17 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: yea1g3It530z3zvI9SeJ3DVYkPvpr4Fh5xdsfddzkq8=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:0b:37:c8:83:08:09:4e:09:83:45:67:2a:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Sep 22 11:00:17 2026 GMT
Not After : Sep 23 11:00:17 2026 GMT
Subject: CN=681ddf304843492ceabd0e3be433f51474b6244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:13:d4:9c:2a:48:b1:39:86:57:eb:56:d8:a3:
7b:56:3b:40:73:e0:c3:de:ac:66:45:89:c8:c5:9c:
5c:12:11:79:fc:ab:b8:40:0f:2d:51:a0:d2:24:67:
e6:53:ec:8c:6b:2a:68:a9:7e:37:70:65:19:b0:db:
eb:95:22:bb:95:3d:0a:26:77:a3:e3:7c:75:8c:2a:
0d:81:0d:48:5b:34:62:48:44:3b:e7:ae:f8:76:3c:
cf:45:8a:2a:3a:c9:f2:51:25:f0:28:7e:7e:cb:81:
0c:cc:6a:eb:38:67:c7:ab:a8:3c:8b:a1:26:b2:13:
7f:c5:ae:b4:6c:9b:38:b7:90:46:df:99:58:84:9d:
af:0d:d0:83:47:83:cf:53:c3:03:7b:da:c4:b4:ff:
97:c4:05:3e:8d:9b:71:87:7c:6c:92:ca:42:98:21:
63:25:f5:a3:f8:2f:54:38:cb:fb:5f:e4:50:d7:85:
09:a3:21:3c:ca:19:26:94:22:0e:6d:b7:e0:0a:1d:
3a:79:5c:a7:3e:b7:5a:18:9b:fe:0f:6a:18:8d:11:
00:2b:31:e1:ca:f5:f1:0f:c1:e6:c6:f5:e3:1c:8b:
f9:00:fc:f3:89:77:04:a6:e9:37:38:a2:91:8d:d0:
d7:5e:f4:79:38:3f:35:47:29:a0:06:d3:62:0a:fb:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1D:DF:30:48:43:49:2C:EA:BD:0E:3B:E4:33:F5:14:74:B6:24:4A
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:b9:96:45:1c:49:9a:6a:05:58:d4:53:de:26:1e:cf:ba:
21:d9:82:02:86:94:a0:c5:f4:96:fa:ee:a3:f4:cc:49:70:e0:
a8:16:c9:22:11:9e:26:d5:40:a8:96:d9:0e:69:75:7f:5d:d3:
c2:82:b6:a1:dd:a3:30:4f:ee:fe:e5:9f:4d:79:ba:9f:4e:8b:
4a:47:45:56:37:82:a8:71:55:77:e8:62:b1:8b:e9:75:ea:b0:
50:88:5a:29:65:f7:a4:2c:e3:4d:5e:e8:c8:ab:d6:0e:a9:65:
3a:8d:cb:5d:c3:2c:f3:45:a1:fa:7d:f2:c1:f8:e7:e5:7d:cc:
0b:75:5f:f0:e4:4d:7f:bd:a9:c1:4d:43:a0:86:fe:7c:02:46:
b0:de:d0:a3:40:2e:ee:e0:01:8f:65:da:fc:76:59:68:d0:74:
fc:5a:f1:83:87:2b:8a:17:62:ae:9f:e7:e4:b8:d2:38:72:97:
d6:29:d7:3e:b8:13:05:aa:c8:4c:25:7c:dd:6b:68:2c:be:1d:
76:68:1d:9c:95:bf:e3:3d:37:a1:b2:41:98:e6:97:53:50:bf:
5e:12:4e:63:12:5c:fe:e6:73:36:94:7f:8d:ff:2b:31:c3:06:
be:04:f0:e6:bd:80:92:15:aa:78:46:91:cd:85:93:7c:16:a4:
6c:77:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:52 2026 by rpki-client