Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: FT3W5/WWbyOnrb7ummsih++3pwrL0jfuMfAAVCDGCQc=
Subject key identifier: 23:72:CF:68:60:A6:04:23:4B:EE:45:CE:8D:43:14:BF:E5:25:DF:58
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019F39057ABB62A61B6FD2C5207333EF225D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0971
Signing time: Mon 06 Jul 2026 20:01:28 +0000
Manifest this update: Mon 06 Jul 2026 20:01:28 +0000
Manifest next update: Tue 07 Jul 2026 20:01:28 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: ZX/yzmAIMZAY2EPbZTNNI7AN2bAUobzJnavA+OFhqic=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:05:7a:bb:62:a6:1b:6f:d2:c5:20:73:33:ef:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jul 6 20:01:28 2026 GMT
Not After : Jul 7 20:01:28 2026 GMT
Subject: CN=2372cf6860a604234bee45ce8d4314bfe525df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:35:0c:52:ca:aa:e9:9e:20:c6:45:61:84:
b3:75:54:57:9e:f8:ba:34:c9:cd:c4:75:ca:b2:57:
15:4f:8a:bf:14:93:a6:bb:c7:0f:2d:13:fa:7e:97:
e3:9b:56:1c:69:9a:78:30:80:cf:5f:fe:99:0d:94:
98:f9:a6:e0:4d:25:af:19:5a:9c:7a:43:16:a9:0d:
25:a7:f7:c8:49:8e:d9:de:79:cb:22:50:9f:7f:03:
d2:68:80:6a:f7:9c:ff:8b:4f:b9:30:6e:e1:eb:43:
6c:92:6d:71:4e:12:54:f9:51:55:43:74:4b:ba:6f:
9c:8e:14:c8:78:6f:c5:9d:2e:ce:47:d7:77:ac:3f:
2a:f5:df:6f:6c:68:96:d0:a2:a1:a9:bb:f3:ed:48:
ab:5d:bd:f7:95:82:8d:af:fa:a1:af:5e:aa:39:73:
41:ef:2d:2f:7a:de:2f:31:55:59:5a:9f:67:d4:06:
58:25:84:b6:ec:3f:f6:90:ad:0c:b6:4a:ba:ff:40:
8e:90:b5:25:f0:33:91:63:14:23:74:de:5f:3f:9c:
fa:f7:58:e8:e2:1a:2f:2f:11:6a:9a:4e:64:7c:1b:
30:74:6f:40:2b:57:65:ff:73:b7:b2:e6:b4:30:72:
95:5a:1a:f6:d6:e4:c1:81:f4:50:fd:5f:9d:d2:ee:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:CF:68:60:A6:04:23:4B:EE:45:CE:8D:43:14:BF:E5:25:DF:58
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c3:68:9c:23:9f:a8:49:51:91:f9:f5:31:14:af:b5:5b:b0:
6f:8d:88:c9:90:4c:da:4b:e4:06:19:4f:c0:96:f4:39:85:b4:
2e:3b:30:b4:f0:0e:ca:f4:1a:f9:db:02:f1:5c:6d:77:75:e9:
e2:63:22:a8:24:08:49:83:86:1d:79:ce:33:d8:87:79:db:7e:
74:4d:4b:12:f0:89:9b:09:98:4b:d0:6f:d7:e1:51:4a:6e:c0:
4a:90:aa:0a:02:b2:8f:c3:be:b1:62:a9:28:45:59:a7:bc:f4:
83:dc:7e:52:fc:4d:b4:6f:ef:d2:d4:c3:26:e9:ee:b2:dd:a5:
18:f9:27:7b:7c:aa:cc:58:d9:c4:32:da:cc:70:5e:15:c6:ce:
f6:88:6f:30:d8:62:a1:05:b4:70:e0:1e:d0:88:a1:a4:b8:74:
50:06:fc:cb:7f:73:64:43:17:81:9d:d5:bf:e1:99:32:50:88:
6c:00:8b:03:49:15:01:68:6d:d5:02:02:32:ce:80:5e:92:29:
3c:e6:8a:c1:1f:1a:a3:2f:93:fd:05:43:0b:58:7f:06:7f:bc:
80:55:b3:c0:14:50:54:de:54:2f:90:8d:6d:1f:f5:e3:94:37:
d1:6b:4e:ff:b2:88:9c:0e:af:90:2d:76:2a:f9:50:d2:e6:03:
00:d3:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:20:11 2026 by rpki-client