Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
File: IZah91DmPqz2d_fz533CxKLGyAk.mft (raw, json)
Hash identifier: tj6Jz8FQC/NXqaNfrWlfxTw+FHBS7tkkEStspa6v5lg=
Subject key identifier: 0C:69:9B:49:CD:89:8F:71:DA:1C:80:D4:BD:0E:B3:E0:7F:2B:B6:1B
Authority key identifier: 21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
Certificate issuer: /CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Certificate serial: 019D37531684A2A565D6CA0C1C0107E34611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
Manifest number: 017C
Signing time: Sun 29 Mar 2026 02:01:25 +0000
Manifest this update: Sun 29 Mar 2026 02:01:25 +0000
Manifest next update: Mon 30 Mar 2026 02:01:25 +0000
Files and hashes: 1: IZah91DmPqz2d_fz533CxKLGyAk.crl (hash: fRaFg5NtfAhc61Shc9EveYQk7OpCo4ARKfUrssTi2tI=)
2: M_GCNLKzStapvH2yawFcJFZLGzM.roa (hash: JXYexLLhTjJZCe/o/+zjf2hSfkYXeXtqQL3sMYrk700=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:16:84:a2:a5:65:d6:ca:0c:1c:01:07:e3:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Validity
Not Before: Mar 29 02:01:25 2026 GMT
Not After : Mar 30 02:01:25 2026 GMT
Subject: CN=0c699b49cd898f71da1c80d4bd0eb3e07f2bb61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:c2:35:45:c1:ad:ad:ca:71:e8:7b:3c:c6:
1b:fe:f6:98:f4:fb:4f:5a:3e:41:ef:93:76:d4:57:
24:45:ab:64:98:c3:ce:34:55:1c:f5:21:09:b7:ee:
8c:30:b3:6a:d7:8f:bc:f2:8a:ca:69:d9:57:6f:da:
45:c0:2c:fa:7f:54:0e:85:b0:30:c3:79:f4:d9:bd:
d8:7c:1b:62:57:e7:e3:6a:3e:51:cf:67:db:32:38:
a5:1f:ac:d3:bd:11:de:2a:17:49:fb:25:2a:ee:1a:
ad:02:5f:9e:50:fc:53:88:ca:78:2f:5b:6c:0e:53:
6c:fc:6d:03:7e:03:2c:a5:8a:07:d3:f0:3b:02:f3:
58:57:8c:ac:81:3b:ae:c4:d1:88:02:02:dd:a4:70:
34:8b:a8:f7:cf:96:21:a9:05:81:39:a3:47:25:17:
b6:cf:93:43:ac:0b:3e:0f:95:84:3f:a0:c7:c2:50:
c3:45:2d:e7:3e:fe:8a:0f:07:0a:7e:00:eb:e8:85:
3e:93:65:80:9b:65:ee:6b:b5:65:6d:22:14:64:ec:
9f:c0:3b:ad:8e:6a:11:ac:70:d8:eb:e3:ed:12:59:
32:6e:28:60:f2:12:41:8b:a4:df:14:cb:46:d8:3b:
25:54:15:0e:6a:d0:47:c8:45:e2:61:b7:91:7a:2c:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:9B:49:CD:89:8F:71:DA:1C:80:D4:BD:0E:B3:E0:7F:2B:B6:1B
X509v3 Authority Key Identifier:
keyid:21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fd:45:81:11:6e:e3:df:e2:6b:4b:ac:85:6b:ed:70:16:21:
d7:a9:14:e0:53:35:bc:5b:d9:da:ff:2b:ad:0c:5b:1c:f7:ad:
37:03:4c:e5:c1:c0:08:76:80:43:d2:98:07:db:91:1d:05:98:
03:37:0c:ed:06:ea:76:e2:e1:cd:09:f5:9f:64:4b:e7:a1:2d:
bd:c6:b8:b4:e0:a2:d5:61:ad:a7:91:b5:d3:62:f1:1a:29:e7:
f2:1f:be:5d:fd:d8:b6:3b:92:db:f6:47:56:8c:94:e0:e6:cd:
82:d0:2b:e5:f8:41:bc:4e:9f:bd:55:2e:3d:c2:13:70:99:55:
ef:0f:5d:62:78:8a:3e:60:38:a6:c5:b1:ba:0e:6b:be:44:f7:
39:7b:47:4e:35:7b:92:f5:58:a8:36:90:90:50:cf:cc:12:a9:
22:d6:c5:0b:6c:18:c7:e5:a7:12:58:e8:3d:6c:ec:0b:36:99:
1b:24:5f:ec:45:ae:47:cb:16:c2:2a:d9:ea:1a:f0:40:ec:ce:
5f:c2:8e:79:bb:a4:aa:20:73:13:ea:8c:4f:d6:09:df:48:fb:
ff:c6:8a:73:b6:11:2a:12:ac:63:b1:2c:97:8b:10:5d:2d:47:
8b:1c:b0:28:97:bf:32:be:b8:c6:4b:5e:16:fb:96:e1:f3:de:
53:9e:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client