
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier: 9h4ImBlEaMtCrpBicUkXR/I1do0zJU1XsFhI3rDs8Kg=
Subject key identifier: 5B:A4:F9:9E:2A:3B:0E:3B:0F:9E:CA:9F:04:A2:70:8E:10:CC:51:17
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial: 01A0BBE6AF19C2A021B2B9E05843C8CD821E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number: 02AA
Signing time: Sat 19 Sep 2026 23:00:52 +0000
Manifest this update: Sat 19 Sep 2026 23:00:52 +0000
Manifest next update: Sun 20 Sep 2026 23:00:52 +0000
Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: XvmpdmSuOBdOSghCvXR/7So3Xb4/ZpuNxeaGKNmZYcg=)
2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:e6:af:19:c2:a0:21:b2:b9:e0:58:43:c8:cd:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Validity
Not Before: Sep 19 23:00:52 2026 GMT
Not After : Sep 20 23:00:52 2026 GMT
Subject: CN=5ba4f99e2a3b0e3b0f9eca9f04a2708e10cc5117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:51:e3:c2:41:9e:f2:f6:1d:a7:8a:6e:87:
dc:72:06:7b:d0:f4:00:9c:28:0a:4b:fc:e0:03:ae:
b5:49:39:56:4d:ef:a2:3b:b5:73:07:4f:dd:e3:88:
93:05:8b:60:5c:ae:ad:48:9d:c6:34:19:9a:49:b6:
47:df:99:18:d7:a8:0a:58:ad:65:f0:be:65:ce:91:
09:33:ed:f1:12:76:f7:6c:b0:21:d4:12:de:b4:48:
11:42:12:9a:3a:71:25:fd:83:4a:9b:ab:52:7f:57:
5e:7a:32:01:8d:a2:26:d6:cd:32:0e:e8:76:4a:29:
6b:96:39:fa:85:38:89:1b:b2:90:9e:46:7c:bb:01:
82:f9:5c:2a:9d:93:d9:35:bb:3d:d0:50:38:50:e3:
b8:16:ef:29:f3:3d:b7:ee:e9:ae:d9:75:2d:b6:67:
07:85:0e:cf:2a:fd:5e:21:80:88:ba:15:73:8c:a6:
5e:70:c2:27:72:34:ac:ec:63:48:4e:11:ef:a8:c4:
91:3a:d9:07:a7:c7:5c:12:1f:ae:3b:a3:e0:a3:ad:
8f:bf:07:e0:a6:ba:98:2e:2b:c1:de:e5:e1:df:f7:
37:94:81:ce:c4:cd:7a:39:4b:ea:93:f8:5f:79:b0:
03:a2:d4:92:0e:50:26:1c:07:70:6e:02:a5:7f:e1:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:F9:9E:2A:3B:0E:3B:0F:9E:CA:9F:04:A2:70:8E:10:CC:51:17
X509v3 Authority Key Identifier:
keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:07:e0:aa:e3:39:01:55:1a:53:ee:26:17:41:44:e5:d8:
74:44:7c:21:bd:32:e6:8c:b4:f2:78:f8:2a:c1:c4:08:df:35:
dc:09:c1:67:20:a6:b2:42:10:ad:c3:69:a3:9d:a3:38:6a:39:
fd:86:d6:f5:21:d1:fe:99:10:9d:6d:63:b6:db:ce:a3:0d:5d:
26:0f:68:15:ca:ac:df:1b:f4:26:3f:85:22:ec:58:c7:ec:34:
64:c0:2b:47:46:93:9a:16:a7:0c:38:43:0c:65:c3:3f:c4:87:
4d:48:54:8d:6c:5c:20:60:e6:f1:f2:fa:bd:cd:74:19:c9:0f:
35:94:21:b8:58:8f:31:4d:7d:0f:2f:0e:d4:9c:49:63:b2:1b:
77:93:5e:09:58:34:ae:c3:5d:0b:6f:10:0a:6c:63:c8:8b:aa:
11:18:76:e0:fc:ae:cf:6b:6d:38:8c:69:f8:eb:c3:ab:9a:41:
53:18:6a:b8:29:48:c1:bf:70:3d:17:d1:c1:59:86:90:ef:43:
79:c6:5d:22:fa:85:d5:ee:6c:9b:52:26:7c:2f:6a:4d:3d:8b:
80:c2:d1:64:f2:c0:e3:2c:9a:e8:8c:4a:93:42:9c:ea:2a:91:
5d:52:b0:09:23:ca:91:cb:cc:10:2e:b5:61:0a:7a:33:35:a7:
e0:8a:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:25:50 2026 by rpki-client