Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: qUueTIdU9RTOsmmxYwe0OcISviiksTbjTapFOJtiE7s=
Subject key identifier: 30:0B:CF:C7:DE:6D:11:EE:8C:0A:5B:BF:EC:A7:4D:78:76:55:4B:21
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 01A12956209B835C0E7AA67FDB2285C111F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0A72
Signing time: Sun 11 Oct 2026 05:01:12 +0000
Manifest this update: Sun 11 Oct 2026 05:01:12 +0000
Manifest next update: Mon 12 Oct 2026 05:01:12 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: syGAyBinAESG6viEjsFgWAwfiz2f7km/hIF348F/hwA=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:20:9b:83:5c:0e:7a:a6:7f:db:22:85:c1:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Oct 11 05:01:12 2026 GMT
Not After : Oct 12 05:01:12 2026 GMT
Subject: CN=300bcfc7de6d11ee8c0a5bbfeca74d7876554b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:d0:e0:88:75:6e:3b:87:be:af:6e:7d:ca:
97:dc:24:b4:51:16:b2:73:db:40:61:0a:6a:f4:5b:
b1:a4:a4:83:2b:b1:88:91:88:17:48:35:3c:5a:fd:
5a:4a:45:4c:82:30:db:e3:ce:3f:3d:a1:57:2a:da:
0c:a7:51:7f:4a:ee:94:3a:49:d2:eb:be:4b:40:97:
90:ea:60:a4:84:ac:99:ed:fc:dd:5e:79:54:f1:c7:
50:92:2b:6b:01:cd:85:69:21:75:b7:56:25:79:fa:
6d:f3:37:9f:7f:a8:54:63:b8:70:b8:5f:03:51:e4:
20:cb:18:ce:cd:4e:a6:ea:fe:1a:3b:2f:a2:2f:11:
cb:15:f3:86:dd:f8:b0:4c:21:5d:66:17:fb:71:a0:
67:39:07:f3:f6:80:c2:51:bf:12:10:0d:d0:ed:50:
da:f1:03:91:63:9e:bd:33:cc:92:79:ad:86:13:e8:
5c:00:3d:e9:c3:73:31:a6:f3:ec:d4:42:ac:bf:9c:
04:24:b9:12:b0:50:4d:8f:d2:41:f6:66:58:7d:12:
54:4b:34:f7:50:ed:84:d5:8d:b0:37:c2:7c:1e:56:
65:5e:a6:23:ac:1c:d7:74:31:fc:4f:8d:a7:7b:38:
2c:f2:97:1a:cd:84:f1:d7:78:55:a8:be:9f:24:29:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:CF:C7:DE:6D:11:EE:8C:0A:5B:BF:EC:A7:4D:78:76:55:4B:21
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:7c:08:58:d9:7b:f7:15:38:19:27:c4:1a:1c:95:21:f3:
ee:ba:87:66:3d:f0:63:83:50:0b:c4:c4:c0:f4:fc:bb:ca:f4:
00:92:4f:98:ff:6f:ff:22:d8:94:35:7c:52:7f:e3:53:e4:7a:
cd:5f:ac:18:ea:e7:b8:66:57:8d:c5:b3:3e:cb:20:e3:23:3d:
59:22:ea:e3:ab:41:87:0c:73:0b:ed:3d:91:e8:9b:ab:3e:a4:
4f:08:03:c6:7e:20:9b:8f:aa:cb:c9:66:39:ca:d0:c6:66:cd:
aa:98:1e:5e:3c:cb:0a:60:7b:2c:4c:f9:56:21:4e:dd:1c:b8:
e5:46:99:7a:f3:70:cc:29:28:a9:c8:7d:d9:1d:ba:68:82:87:
0b:72:24:15:79:a1:f8:08:3b:58:4d:cf:78:dc:ac:d0:d9:fb:
e3:72:32:57:94:84:4f:a0:4c:99:a1:b1:3e:8f:02:5a:d4:ab:
75:c4:08:69:cd:86:8d:21:64:7c:f3:a6:7f:05:a8:87:1d:4b:
46:45:68:aa:5a:0a:bb:3e:2a:3c:b7:0f:ab:51:90:13:f2:71:
8f:09:6a:8c:ec:2b:b8:b9:91:5c:41:6a:f6:13:e5:c3:cf:66:
2d:e4:eb:00:e9:35:a8:05:77:ac:20:7d:7a:3c:4c:2b:21:79:
43:86:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:50 2026 by rpki-client