Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier: 7/1t1oPfyg5UzJhdi9h8unFr/+mWiZCv1X18rc/jDD0=
Subject key identifier: 9F:6A:7E:1D:D1:9C:25:D0:3B:4C:DE:BF:EF:43:AD:CB:86:CF:6B:2B
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial: 019CACEB85993ABDE95A1BB49F34320C39B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number: 90
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: s9rFfVFceWEakT1wXZ38BalclnuvYmCe29Wf/rP9pyQ=)
2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:85:99:3a:bd:e9:5a:1b:b4:9f:34:32:0c:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=9f6a7e1dd19c25d03b4cdebfef43adcb86cf6b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:f7:90:b2:0c:e8:2f:9b:22:8e:80:ac:ed:
55:c4:77:41:10:90:42:48:84:89:de:a9:9a:1b:7b:
54:98:69:0e:40:ea:f1:e2:78:ce:56:c4:c7:d9:f0:
a0:ba:e1:7a:eb:9d:d6:e2:af:7b:e0:75:b4:de:9d:
98:36:e2:f4:d1:14:55:2a:65:c6:2f:9a:8b:b0:e5:
10:e2:8f:bb:96:ea:26:c8:20:c9:44:c4:ef:47:c6:
92:b7:e0:36:f2:e4:2c:d2:1e:6c:4e:3e:68:dc:7f:
00:2e:d8:b3:89:4e:8a:0e:31:3a:0d:83:b5:4a:10:
d9:f5:3a:7b:c9:d7:32:12:8e:2d:c8:a4:46:28:24:
7b:5d:76:39:e6:71:f1:58:2e:1c:d9:44:21:48:01:
e0:01:10:c9:af:a9:85:2a:e0:6d:c7:51:0b:5f:12:
a7:7d:7b:6f:63:2d:5f:a0:db:82:d5:0f:4d:22:5c:
40:67:b0:55:a7:05:12:f8:b9:c1:4a:0a:52:f9:db:
1e:bf:e5:0e:ff:e2:67:40:60:1c:23:5d:ad:82:c7:
59:67:0a:02:79:79:5d:34:a3:68:4a:af:e1:95:d7:
79:25:60:1e:5b:a8:27:26:d9:f4:09:f6:9f:f9:c3:
dc:98:6c:53:02:4d:9a:4a:32:54:e2:7c:3f:3b:e7:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:7E:1D:D1:9C:25:D0:3B:4C:DE:BF:EF:43:AD:CB:86:CF:6B:2B
X509v3 Authority Key Identifier:
keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:86:5b:d5:c2:a3:f9:3a:b6:12:62:15:b7:d4:da:f7:aa:49:
6c:3a:38:e8:22:65:2f:0d:a6:a5:6d:92:01:e2:46:68:8a:63:
06:3b:1b:25:b3:7c:75:07:c0:08:a0:33:62:5a:40:69:86:75:
ee:bf:9f:7a:3a:fd:2f:f2:36:56:c4:8d:bd:e3:e5:1f:dc:08:
6a:25:6d:95:39:54:f0:51:7e:ab:ff:0c:8c:43:5f:1d:5f:d5:
23:5e:13:94:ee:89:d3:91:7e:bd:59:5d:e8:b9:3c:ab:84:cf:
66:be:01:62:13:95:23:e0:47:2e:b8:18:3d:56:5e:1d:68:d0:
a7:c1:14:f9:39:6e:67:47:22:2a:21:14:ae:0a:fb:2d:f5:0b:
9a:f3:db:f6:cb:33:e8:ce:d6:ca:e8:18:e5:2a:4f:4b:83:c9:
e1:52:b1:63:06:3f:a4:f3:ed:89:c6:33:69:24:4e:a8:02:27:
f0:6d:e4:ef:d4:87:c5:c4:a0:e6:05:0f:26:a4:a8:7a:cb:8c:
a4:a7:eb:f6:8b:d7:81:3c:f5:7e:af:cd:0e:4b:e9:2b:29:cc:
74:f1:12:1a:1c:9a:b1:c9:85:3f:95:0b:dc:93:d8:07:cf:86:
63:14:35:1b:4b:f7:e2:53:d0:0b:4e:4e:b7:5b:5d:6e:a1:c4:
c4:f0:4e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys64WZOr3pWhu0nzQyDDm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj
ZGE4N2QwHhcNMjYwMzAyMDUwMDQyWhcNMjYwMzAzMDUwMDQyWjAzMTEwLwYDVQQD
Eyg5ZjZhN2UxZGQxOWMyNWQwM2I0Y2RlYmZlZjQzYWRjYjg2Y2Y2YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltr3kLIM6C+bIo6ArO1VxHdBEJBC
SISJ3qmaG3tUmGkOQOrx4njOVsTH2fCguuF6653W4q974HW03p2YNuL00RRVKmXG
L5qLsOUQ4o+7luomyCDJRMTvR8aSt+A28uQs0h5sTj5o3H8ALtiziU6KDjE6DYO1
ShDZ9Tp7ydcyEo4tyKRGKCR7XXY55nHxWC4c2UQhSAHgARDJr6mFKuBtx1ELXxKn
fXtvYy1foNuC1Q9NIlxAZ7BVpwUS+LnBSgpS+dsev+UO/+JnQGAcI12tgsdZZwoC
eXldNKNoSq/hldd5JWAeW6gnJtn0Cfaf+cPcmGxTAk2aSjJU4nw/O+ebmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9qfh3RnCXQO0zev+9DrcuGz2srMB8GA1UdIwQY
MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et
MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk
LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIZb1cKj
+Tq2EmIVt9Ta96pJbDo46CJlLw2mpW2SAeJGaIpjBjsbJbN8dQfACKAzYlpAaYZ1
7r+fejr9L/I2VsSNvePlH9wIaiVtlTlU8FF+q/8MjENfHV/VI14TlO6J05F+vVld
6Lk8q4TPZr4BYhOVI+BHLrgYPVZeHWjQp8EU+TluZ0ciKiEUrgr7LfULmvPb9ssz
6M7WyugY5SpPS4PJ4VKxYwY/pPPticYzaSROqAIn8G3k79SHxcSg5gUPJqSoesuM
pKfr9ovXgTz1fq/NDkvpKynMdPESGhyascmFP5UL3JPYB8+GYxQ1G0v34lPQC05O
t1tdbqHExPBOug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:35 2026 by rpki-client