Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: ZRETPps2XhcIaszGhJCIokxO26WB7nZfygynOAiaRfs=
Subject key identifier: B4:C2:4D:A4:1E:4B:4C:5B:D4:8A:EF:69:0B:E2:69:F7:73:37:E7:9A
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019D9B50A1A93B0E70AD55F64F7AFB06D703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0CEE
Signing time: Fri 17 Apr 2026 12:00:45 +0000
Manifest this update: Fri 17 Apr 2026 12:00:45 +0000
Manifest next update: Sat 18 Apr 2026 12:00:45 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: FklmmiloW/LjpvnBADSpVFu3UB5Mh9ToOLVT6LY0lcU=)
2: m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa (hash: L3jK7ngzl36wT68C1jk8TWgb+EAYAtZ/AFxjRpzTIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a1:a9:3b:0e:70:ad:55:f6:4f:7a:fb:06:d7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Apr 17 12:00:45 2026 GMT
Not After : Apr 18 12:00:45 2026 GMT
Subject: CN=b4c24da41e4b4c5bd48aef690be269f77337e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:c2:4f:9f:74:1e:f3:38:c9:be:e9:d3:84:
b4:c9:af:79:af:27:b6:be:a9:68:32:6c:35:20:39:
d9:c2:ab:09:31:bc:65:11:cf:aa:4c:5b:3e:97:ad:
0b:d6:cf:24:9d:ad:9a:e6:25:eb:b6:39:2c:0d:41:
c5:7d:f2:38:b9:27:5d:7b:05:4b:c1:33:97:49:df:
fc:da:df:27:70:05:39:ad:cf:24:b9:5b:56:5a:4c:
b9:22:56:02:79:a8:8a:93:f5:04:8e:85:c7:a7:8f:
e5:d5:c2:6a:93:40:6b:3a:8a:12:14:62:30:8c:33:
af:1f:10:46:39:92:3b:f3:07:38:0d:1b:14:41:0d:
d3:0c:2a:42:35:e0:6d:07:78:2e:7a:72:82:0e:4d:
2f:a7:a7:b6:3c:54:2c:93:5d:cf:c1:45:d1:4a:25:
22:ef:4b:83:a2:be:74:4b:d0:62:db:6f:41:20:cf:
ee:58:8e:79:ad:9e:7b:69:ae:0f:79:20:be:d8:97:
8e:82:b7:72:cd:6f:e8:51:0e:a1:ac:99:ed:b6:b3:
40:4d:2d:f3:0c:ad:ea:fb:b5:da:ae:ac:25:b2:99:
e9:91:ca:b8:39:b9:d7:52:8b:bd:b8:74:a3:4d:d0:
57:6a:b0:2b:76:23:cf:23:6b:82:4b:ec:07:91:ce:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:4D:A4:1E:4B:4C:5B:D4:8A:EF:69:0B:E2:69:F7:73:37:E7:9A
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:12:4e:77:10:f3:91:79:1c:bb:6d:8e:4c:07:11:71:cd:
f8:82:83:c7:50:ac:c9:73:ea:a5:9b:94:51:07:fe:cc:77:be:
bb:e2:1c:b1:13:58:bf:39:a9:7d:a5:68:25:a6:56:c5:58:aa:
45:b5:40:6e:06:71:7d:3e:37:28:00:27:59:dd:84:11:75:30:
bb:ff:2a:f3:de:71:63:a1:12:fa:d8:8f:30:c4:d3:a5:d1:7d:
23:6b:5f:a4:aa:e8:3b:89:31:96:8e:5a:63:b5:e2:b2:ae:f8:
a6:2e:0a:83:47:63:da:5e:70:0c:c5:01:b1:90:7e:6f:f4:1a:
67:5a:ce:7d:ad:ad:41:47:63:74:f1:04:bf:86:1d:6f:a1:ea:
68:04:95:b7:1d:de:ef:0f:0b:f9:66:dc:92:85:cc:d1:4c:e5:
05:b6:27:77:32:98:b0:19:62:b2:4a:1c:3d:54:f4:af:29:db:
97:74:8c:d7:6f:58:8b:2c:fa:a0:18:58:79:4f:38:da:c8:35:
76:35:d0:c0:db:fc:41:12:ae:9d:e2:9d:7c:2c:e1:e0:a6:38:
8e:f8:91:38:bd:47:82:9d:4f:96:aa:6f:4c:90:ae:98:0c:24:
b7:51:db:a0:57:68:44:ed:d1:8b:37:80:31:97:1a:db:d7:03:
77:b2:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:09 2026 by rpki-client