Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: Isaz9+syYFWO8HN7kylr7K1fy7jXsH2Y5iJ9EQp+w+k=
Subject key identifier: F5:4B:5F:15:6A:F5:05:C5:3B:20:87:71:72:67:2A:FA:60:64:A7:40
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019CABD98F718CAF1C8E3EC36D181203C55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0C72
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: WxZpwrMNN20a+Vew8Ryx3cUxXqXQZGptoNxcZ/ykVC4=)
2: m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa (hash: L3jK7ngzl36wT68C1jk8TWgb+EAYAtZ/AFxjRpzTIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8f:71:8c:af:1c:8e:3e:c3:6d:18:12:03:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=f54b5f156af505c53b20877172672afa6064a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:87:81:e8:05:79:68:37:59:ca:85:1e:1c:
3b:d6:14:b7:07:03:64:5e:5b:99:79:69:2f:82:6a:
52:26:95:ca:2c:b0:a7:01:3d:1e:63:14:f1:46:b7:
b4:a7:02:be:1d:89:ff:53:6b:af:06:9c:a6:a5:20:
df:3b:61:a4:e3:fb:31:ae:23:b9:29:f7:9c:4c:73:
57:f8:78:d5:1b:d7:a7:ff:52:ac:81:6d:35:c3:0c:
26:3a:9f:3a:80:6e:53:d8:14:de:12:06:f9:23:d9:
b1:73:71:52:0e:61:b2:87:22:4c:16:34:7e:5e:d6:
96:27:f0:aa:aa:66:ed:4a:36:0d:18:00:3f:b4:fb:
06:1c:3d:40:5e:94:24:6c:04:2c:a4:69:5d:7d:a9:
3d:f0:32:83:a5:82:ef:51:f5:54:64:e0:1e:68:3a:
28:89:55:58:32:51:c3:58:bc:79:09:70:31:f9:4f:
3c:89:e2:e1:87:f1:73:05:c1:2c:e8:ed:f4:f4:f0:
3a:d7:4d:b6:ba:d4:a8:0f:b0:7c:ef:3c:5c:f9:f2:
fa:5c:2a:79:45:c5:35:b7:5d:75:80:24:cb:f6:d4:
63:95:60:ea:6a:06:82:51:bc:8f:70:13:25:71:6d:
d2:4a:2e:6d:a5:17:4e:70:69:b9:2b:f8:3c:5b:d0:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:5F:15:6A:F5:05:C5:3B:20:87:71:72:67:2A:FA:60:64:A7:40
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1c:d8:b1:85:16:f9:6b:80:12:10:0d:90:38:aa:c0:08:b6:
20:47:c4:49:c6:2a:26:bd:b8:c4:47:b8:42:27:a7:93:c9:05:
3d:8f:f4:a3:74:31:27:58:d7:82:e1:7b:28:3e:2c:bf:17:a4:
b3:e2:37:c7:e0:bf:ce:8c:76:1b:98:18:c3:ef:08:aa:98:0a:
e0:e2:d2:3d:f9:eb:f6:83:6a:11:79:8b:77:59:07:fd:af:2c:
69:14:15:01:45:cc:3d:db:52:07:f1:7e:67:14:0b:89:b5:cd:
a4:cb:f7:82:cb:57:15:96:b9:2b:c2:10:19:fb:0b:26:86:63:
67:f0:e6:a4:ef:28:c9:fc:cf:13:13:ed:60:22:9c:87:ab:64:
77:03:ba:12:c9:b7:2f:19:02:38:9d:7f:e3:ab:d9:a4:17:9f:
16:98:fb:1b:da:0d:55:3d:61:82:a8:90:3e:92:df:f0:37:b6:
50:a9:66:24:ed:0b:6b:dc:b8:d7:63:da:4a:e8:66:ba:6f:6c:
0c:d6:48:bb:16:83:69:32:39:41:3d:c3:07:ff:91:2a:45:30:
20:08:d5:3a:73:b5:86:48:b6:ae:dc:af:67:8f:57:d2:1a:b1:
43:5f:b1:ad:27:5a:82:6d:d1:0b:30:2b:16:2a:5c:b5:49:a5:
77:fc:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:39 2026 by rpki-client