Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: uTUshuPxSC/ihZXW4ms0wGEK3MU5EN6JFUjWzSp4oyI=
Subject key identifier: 58:FA:B7:5D:79:07:F0:CD:B3:86:67:10:DC:3B:AE:F1:67:F9:97:AA
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01A17DE10AE8075D0E68756CF2E959226AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 17C1
Signing time: Tue 27 Oct 2026 15:01:02 +0000
Manifest this update: Tue 27 Oct 2026 15:01:02 +0000
Manifest next update: Wed 28 Oct 2026 15:01:02 +0000
Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=)
2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: eMBRNcd2gNpVSi0JwlDXo0ErRZt3rtsrKCY1bX3YAHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:0a:e8:07:5d:0e:68:75:6c:f2:e9:59:22:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Oct 27 15:01:02 2026 GMT
Not After : Oct 28 15:01:02 2026 GMT
Subject: CN=58fab75d7907f0cdb3866710dc3baef167f997aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:0b:7a:a8:43:a4:42:87:f2:ee:f6:d9:d9:
e7:f2:26:42:49:89:3d:63:66:a2:41:8b:3d:37:47:
cf:fc:40:0f:ba:28:fe:a3:1f:f2:b8:3e:77:ac:20:
1d:24:5d:e9:17:d6:9b:8c:aa:3e:4b:61:4f:dd:82:
88:8f:54:50:2c:2e:b8:e4:1a:19:3c:09:02:f3:25:
2e:52:da:aa:a0:8c:a3:82:75:d5:d5:97:50:8f:b9:
1e:e5:d7:20:02:f7:7f:03:12:79:ca:1d:7f:ac:03:
02:46:01:10:f8:df:cf:34:6c:ef:05:ee:b7:60:fd:
16:eb:05:96:01:60:f5:5e:a8:ad:2e:45:8c:82:e0:
1d:45:db:a9:51:0e:e2:eb:f3:74:29:89:21:26:12:
ef:3b:8c:8b:d6:6e:38:26:84:fb:71:5c:2b:6f:72:
b9:19:f6:2e:1d:12:62:a7:b6:ed:e8:a0:5e:75:b9:
e2:7b:8d:72:f5:2d:51:85:ca:9c:b1:bf:56:7a:95:
97:f6:30:84:cb:f0:1f:e6:87:37:fa:29:49:1f:00:
9c:19:ce:21:c6:63:ac:f0:2c:9d:43:86:1c:2f:82:
4f:2e:42:06:cb:72:43:df:aa:3c:c8:64:a7:2f:6a:
e1:bd:e1:5f:72:bf:15:03:e1:12:10:cd:84:13:42:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:B7:5D:79:07:F0:CD:B3:86:67:10:DC:3B:AE:F1:67:F9:97:AA
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7b:84:c1:d2:63:89:c4:d5:5a:37:79:eb:67:d9:29:99:73:
47:75:4a:b7:e5:a5:5b:c4:a4:dc:17:24:90:88:8d:56:fd:58:
83:db:44:76:7c:52:55:bd:5f:4a:60:13:ed:2e:eb:51:c8:f2:
a9:f0:a2:a1:a7:ed:b7:09:7d:df:03:88:b8:b7:9b:51:92:c7:
38:53:e9:34:30:7c:6c:c3:48:f8:ac:44:f5:ad:76:e2:04:9a:
32:f2:97:97:6d:9a:9e:5c:88:4d:ed:bf:84:34:94:49:55:f6:
fd:63:71:97:9c:b8:54:22:b1:17:cc:b0:b3:ed:0f:ce:74:64:
b1:d4:cf:fc:b5:57:da:d1:91:a6:29:c0:86:98:7b:7c:96:1a:
52:88:44:56:4c:eb:9e:97:ea:f9:1a:1f:46:fb:e3:3c:e0:a5:
8f:3d:16:89:31:86:2e:e0:95:0f:a9:f5:2a:ff:d2:54:94:de:
5f:b6:66:a0:02:6a:e9:a9:e1:3d:8e:bb:d0:8f:fe:73:bb:d0:
e7:25:11:65:33:c6:b3:78:1d:ae:91:c7:f9:47:30:03:68:8f:
b5:45:74:23:a1:bf:b6:13:38:21:89:f9:47:d4:30:98:e6:8f:
84:aa:04:48:ba:7d:65:0b:65:73:db:0d:45:62:3a:29:30:2a:
29:98:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:10:04 2026 by rpki-client