Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: SVCvtXbzGFXCd4Nx7x/u/UVJBdFC84/T8bREtPlnlgE=
Subject key identifier: 4E:DB:C7:EC:9A:4C:04:22:10:BE:9B:24:97:32:0A:A5:EB:1A:84:83
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019E2AA7372E6F20D5F18CAF282FBEEBFFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 08E4
Signing time: Fri 15 May 2026 08:01:02 +0000
Manifest this update: Fri 15 May 2026 08:01:02 +0000
Manifest next update: Sat 16 May 2026 08:01:02 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: PphaaNzLDDzN6dQ1vJPKkK6KNb57PgsohqLG5DXT880=)
2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
3: wqH1Eu0Nagz4x3ByIPaww4OjY90.roa (hash: ndCk0ZYQmCN0rN8uSUZdNlPR/tHVwKDPfY3qSmJpImo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:37:2e:6f:20:d5:f1:8c:af:28:2f:be:eb:ff:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: May 15 08:01:02 2026 GMT
Not After : May 16 08:01:02 2026 GMT
Subject: CN=4edbc7ec9a4c042210be9b2497320aa5eb1a8483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:04:ba:54:40:e6:c2:4a:8c:64:08:83:1c:
09:9f:56:aa:28:ae:06:10:f1:40:8f:03:9d:d1:8b:
07:42:88:79:2e:6e:10:a9:c6:4f:63:fc:8c:68:8f:
62:81:b2:cf:8d:44:67:be:e3:a6:8d:e8:3d:47:6e:
44:1d:ee:e8:86:ad:35:68:eb:26:21:f3:c7:37:5c:
bc:a8:48:f0:f2:c1:fa:9d:35:10:5e:cb:3b:74:0d:
4f:ab:29:c2:44:2c:0b:bf:c6:f4:32:7f:d0:e7:c8:
3e:04:23:4f:f8:55:31:03:6e:cf:6b:19:11:2e:4a:
b1:5b:9e:60:09:84:90:7e:bf:ac:79:09:3d:38:d2:
ac:94:5b:16:1e:40:89:ef:14:44:f0:67:12:ca:a4:
8e:0a:65:a5:cf:c7:6d:cd:e3:54:e8:09:f6:e9:e4:
54:85:e5:70:65:2f:70:cb:a7:1b:49:46:0e:2d:6e:
bd:18:1b:f8:2e:c0:ae:33:f1:d5:1c:0a:b7:d6:cd:
bb:63:71:66:80:22:77:14:ae:8d:84:b2:18:ee:0b:
da:d2:9b:81:aa:98:13:01:6e:58:89:44:00:4c:b2:
c4:d4:fc:99:0c:c5:c0:d0:bc:4e:c5:32:ac:84:d6:
31:65:ed:2b:14:9f:70:76:86:91:4f:07:43:71:f9:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:C7:EC:9A:4C:04:22:10:BE:9B:24:97:32:0A:A5:EB:1A:84:83
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:85:08:46:c0:c1:4b:e8:0b:c3:51:6f:be:bd:3d:f8:e2:c5:
aa:54:e5:e5:2c:f4:0c:61:fc:4f:eb:bc:a2:23:61:c1:b6:2b:
0f:5b:bf:88:af:5c:75:ca:15:97:bc:e7:e1:00:eb:41:25:29:
65:e5:4f:37:d6:f3:41:0c:26:c9:2c:71:68:64:f6:b2:1e:18:
c4:19:48:6b:78:c3:63:91:09:54:d3:54:76:38:f3:ab:eb:62:
76:1d:79:46:56:e6:45:2a:1b:37:d9:44:4f:c7:e6:f6:59:2c:
15:97:18:8c:a5:c9:19:3d:91:90:6b:f4:dc:ab:e2:db:e5:26:
8f:8a:eb:78:07:f8:97:f9:7b:fc:7d:b9:0f:e4:bd:db:9f:2b:
4f:ed:79:ba:41:b5:a4:9a:42:e7:e2:db:1b:c8:05:f3:16:f6:
35:26:b8:b2:17:ae:9e:85:32:42:45:26:b5:b9:97:44:71:a4:
fa:ed:e2:cf:70:ca:9c:38:06:72:f2:09:2a:4d:7e:03:15:18:
13:bd:79:88:59:07:41:38:4b:04:9f:8a:bc:af:07:41:cb:dd:
ee:a1:d8:32:54:0d:d0:f0:bb:0d:6c:87:a5:2e:37:28:dd:9d:
06:44:b0:37:17:34:15:eb:ef:ff:80:d6:72:5a:c4:f3:03:da:
71:d3:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:58:08 2026 by rpki-client