Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: V6H3eSl9CJXBgOUzAwMtTVLtASTR+HHdnYWcSqHz9SY=
Subject key identifier: A6:BC:0B:C8:17:27:BE:F9:19:73:84:1E:BF:E9:36:E7:EB:96:0E:3D
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019D99D01B5E7A2264ED64690310F1E5679B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0899
Signing time: Fri 17 Apr 2026 05:00:45 +0000
Manifest this update: Fri 17 Apr 2026 05:00:45 +0000
Manifest next update: Sat 18 Apr 2026 05:00:45 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: fzE4Y3vlvAmxsuuhCAI8N4Kt3REgAOzoELsYRl5mWVE=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
3: wqH1Eu0Nagz4x3ByIPaww4OjY90.roa (hash: ndCk0ZYQmCN0rN8uSUZdNlPR/tHVwKDPfY3qSmJpImo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1b:5e:7a:22:64:ed:64:69:03:10:f1:e5:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Apr 17 05:00:45 2026 GMT
Not After : Apr 18 05:00:45 2026 GMT
Subject: CN=a6bc0bc81727bef91973841ebfe936e7eb960e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:c5:1d:a0:ef:30:ea:1a:fe:15:73:4a:9c:
4c:b9:31:49:e6:4b:21:71:d1:09:07:0c:f4:8d:eb:
f9:bd:6e:5d:79:31:50:cd:19:34:93:2f:dc:e6:2d:
c9:2e:8d:cf:b9:62:b9:98:25:c8:3a:8d:39:70:ab:
bb:b3:d2:25:f2:89:8a:a1:1a:53:d6:9b:dc:7e:c1:
a2:55:13:3d:51:b1:a0:6d:31:93:bf:7a:c2:bb:e4:
73:d2:7b:e8:6d:e7:84:83:cb:3e:f1:11:fb:bd:ea:
91:c1:d9:f0:5d:48:37:dc:50:fb:9a:4e:c6:1c:d2:
da:16:e1:7b:1c:f4:96:e9:64:f8:de:71:d0:38:c5:
0a:e1:58:bf:1f:b0:79:6f:68:47:e8:25:ce:03:dc:
6c:ad:21:03:8a:19:30:75:9d:a3:c0:b9:18:cf:af:
82:8f:62:b0:a3:de:c8:18:16:7d:d2:e1:30:67:c2:
8a:66:2a:96:b6:62:aa:52:d1:41:0d:16:5a:38:7b:
49:f9:6c:3f:db:97:01:44:3f:a5:19:cc:e0:76:58:
34:33:ef:d3:fa:91:3d:69:cd:ab:ec:73:f7:32:3f:
29:49:9f:9b:c7:bc:04:66:fd:30:3f:82:21:a9:f4:
6c:5b:b6:2b:68:28:25:3b:a9:81:c1:06:7f:b6:5c:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:0B:C8:17:27:BE:F9:19:73:84:1E:BF:E9:36:E7:EB:96:0E:3D
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2c:84:43:9c:19:3c:d1:a3:3b:27:0d:a6:39:78:fe:39:fd:
73:ab:d5:f7:d8:b7:96:c0:bb:62:29:5c:5b:68:72:5e:2d:c5:
17:4d:29:db:54:d4:2e:8a:13:8e:e5:66:c8:f8:66:ee:e6:81:
ff:21:aa:20:55:27:96:3b:3e:3a:d6:c5:fc:6f:fe:c9:6a:aa:
f6:6f:ec:94:9c:8c:2d:65:69:a3:22:4c:a9:14:70:8c:02:de:
42:14:a5:9c:99:f4:07:3a:df:98:06:b8:de:cc:fa:3b:9e:16:
de:eb:40:e6:3e:28:f7:b6:7f:19:fe:5c:c4:db:39:74:a9:7d:
bf:44:9f:8e:6f:87:91:a2:6f:35:7f:c8:94:2f:23:d7:36:50:
2d:bf:83:0e:28:e7:ec:fd:64:ad:33:10:23:65:22:44:b5:e5:
af:ab:a5:74:e3:46:ea:68:72:81:64:f2:f9:bb:6e:8d:e2:99:
4e:15:9f:0a:1d:49:5b:ce:3c:37:76:58:11:6e:a4:7d:c6:10:
d4:27:37:e2:72:ee:0a:49:b1:ed:a9:f3:89:da:59:02:1d:e8:
56:91:5a:a6:44:6a:4c:05:5f:15:27:0d:8e:3d:9b:a5:59:cd:
ba:a1:e7:7b:a7:7e:74:3e:58:c9:f9:cb:e4:f5:27:f8:22:46:
84:b4:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:23 2026 by rpki-client