Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File: Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier: 5hNGX578CaPwa23EQJkSe3eCoetw5BfQvZMB7iUsxag=
Subject key identifier: 0D:33:41:6D:FC:CF:67:5D:C2:9C:98:40:C8:39:93:95:B9:A0:C3:89
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer: /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial: 019D386557B8BC9339CD66D43534164BF5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number: 17AE
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: jyDT0C7WqVTDcTRTs/uZu0EeMXjSabNV0RGEX/H0jhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:57:b8:bc:93:39:cd:66:d4:35:34:16:4b:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=0d33416dfccf675dc29c9840c8399395b9a0c389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:2d:bf:72:69:4c:89:83:37:9a:2e:b4:e2:
87:76:98:60:ae:c9:ad:1f:e9:45:71:47:4b:f5:5f:
9e:30:0a:ab:80:22:8f:60:30:71:42:d5:a4:58:c7:
f8:00:af:8e:32:de:2b:a4:ba:5b:d9:98:56:ec:91:
41:d2:9f:92:b5:2d:ed:35:2e:db:ca:f4:68:6a:88:
b0:90:c7:cd:8f:8d:c4:43:f1:94:75:8b:07:13:90:
b2:88:14:29:b7:24:05:eb:c5:fe:03:4e:3a:4c:76:
56:74:98:83:da:01:be:91:7f:48:19:9c:b0:a7:82:
ac:cf:4d:31:b2:e3:3e:59:5d:31:1b:41:a1:07:10:
dd:2c:4d:71:4c:9a:19:47:75:59:d7:55:fc:00:39:
e0:56:9d:4e:db:6e:38:3c:bc:97:5d:14:ee:58:e5:
fc:ed:0b:b3:10:bd:05:81:9a:49:80:30:ae:cf:65:
6a:ab:77:00:ba:3a:13:42:b9:24:17:fd:40:58:1d:
39:b6:0c:2a:da:18:22:e9:7a:1d:cc:06:e3:9f:c0:
c6:46:19:29:db:d4:a0:2e:83:a7:69:e7:7c:15:2b:
b4:74:7d:44:65:b2:b4:94:c8:af:df:b3:06:69:f0:
44:65:f7:6e:8d:fd:78:27:15:cc:b7:21:4d:ab:a4:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:41:6D:FC:CF:67:5D:C2:9C:98:40:C8:39:93:95:B9:A0:C3:89
X509v3 Authority Key Identifier:
keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:13:11:fe:c6:60:4f:0d:b6:75:59:57:25:8a:0c:69:96:c8:
ad:85:f6:32:78:c2:9a:ac:90:5f:24:ef:a1:42:39:57:5e:71:
90:77:10:0a:94:3a:29:f4:92:37:79:e3:28:80:46:c1:2e:25:
c9:f0:9f:54:ad:08:8d:72:26:89:2d:fb:29:5f:d4:83:9d:66:
41:af:8d:39:18:12:69:fe:f6:03:28:1f:67:cb:0c:ca:94:69:
67:17:c6:55:9f:b9:f4:6e:dd:a1:3b:f9:09:14:9a:de:ba:13:
13:0d:22:2c:8a:3f:1e:c3:46:a3:49:fe:bc:bf:8b:68:c3:95:
30:d5:7c:70:4d:67:03:54:d3:b7:a9:98:c8:38:d4:0d:74:ec:
39:bf:a5:5a:2a:16:c7:00:7a:5b:f0:59:ae:20:03:32:30:5c:
37:23:e1:10:8f:d6:7c:ea:c6:d7:d4:63:c2:f3:06:27:9a:ea:
4c:ed:6a:df:53:05:a7:f0:13:53:ef:18:65:a0:7e:28:03:c2:
9a:54:c3:34:21:97:ed:9b:9d:66:b6:df:4d:8c:17:bd:b8:bb:
83:2b:3b:06:85:3d:37:93:77:2d:45:6b:3e:06:20:df:11:dd:
53:de:5b:5e:7a:2b:10:44:cd:2c:00:c8:65:c3:72:8c:51:b5:
92:9d:29:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVe4vJM5zWbUNTQWS/X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGNmOTdiYWQ4MjI3ZGYyZDZhMzljNTRmNjM4MjEwODE1
MGY2ODgwHhcNMjYwMzI5MDcwMDU4WhcNMjYwMzMwMDcwMDU4WjAzMTEwLwYDVQQD
EygwZDMzNDE2ZGZjY2Y2NzVkYzI5Yzk4NDBjODM5OTM5NWI5YTBjMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd0tv3JpTImDN5outOKHdphgrsmt
H+lFcUdL9V+eMAqrgCKPYDBxQtWkWMf4AK+OMt4rpLpb2ZhW7JFB0p+StS3tNS7b
yvRoaoiwkMfNj43EQ/GUdYsHE5CyiBQptyQF68X+A046THZWdJiD2gG+kX9IGZyw
p4Ksz00xsuM+WV0xG0GhBxDdLE1xTJoZR3VZ11X8ADngVp1O2244PLyXXRTuWOX8
7QuzEL0FgZpJgDCuz2Vqq3cAujoTQrkkF/1AWB05tgwq2hgi6XodzAbjn8DGRhkp
29SgLoOnaed8FSu0dH1EZbK0lMiv37MGafBEZfdujf14JxXMtyFNq6S/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0zQW38z2ddwpyYQMg5k5W5oMOJMB8GA1UdIwQY
MBaAFCMM+XutgiffLWo5xU9jghCBUPaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjct
MDRlY2Q3YTQ0NTdlLzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjctMDRlY2Q3YTQ0NTdl
LzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhMR/sZg
Tw22dVlXJYoMaZbIrYX2MnjCmqyQXyTvoUI5V15xkHcQCpQ6KfSSN3njKIBGwS4l
yfCfVK0IjXImiS37KV/Ug51mQa+NORgSaf72AygfZ8sMypRpZxfGVZ+59G7doTv5
CRSa3roTEw0iLIo/HsNGo0n+vL+LaMOVMNV8cE1nA1TTt6mYyDjUDXTsOb+lWioW
xwB6W/BZriADMjBcNyPhEI/WfOrG19RjwvMGJ5rqTO1q31MFp/ATU+8YZaB+KAPC
mlTDNCGX7ZudZrbfTYwXvbi7gys7BoU9N5N3LUVrPgYg3xHdU95bXnorEETNLADI
ZcNyjFG1kp0pLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:10 2026 by rpki-client