Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: ticaMpK0XlZwXQK9KbZy66wAbLH4OlBW+4o/PEUhRBo=
Subject key identifier: 20:10:04:6C:E8:39:2C:B2:BF:51:97:18:B8:F3:0E:1C:62:D8:85:A9
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 01A17C293E4497F22E4BA74DE05E3D2C14A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1AD3
Signing time: Tue 27 Oct 2026 07:00:39 +0000
Manifest this update: Tue 27 Oct 2026 07:00:39 +0000
Manifest next update: Wed 28 Oct 2026 07:00:39 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: e5MgsW4hQJNSzxidPh8H5gnbgcQk35xXU3qiF79UBA8=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:3e:44:97:f2:2e:4b:a7:4d:e0:5e:3d:2c:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Oct 27 07:00:39 2026 GMT
Not After : Oct 28 07:00:39 2026 GMT
Subject: CN=2010046ce8392cb2bf519718b8f30e1c62d885a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:42:a5:f0:d0:73:3a:77:5c:d2:5e:d7:28:
83:a4:13:88:27:8e:5d:87:eb:cd:be:71:fb:27:66:
da:50:65:e0:7a:00:df:d5:e1:47:f0:26:12:77:63:
7c:8f:75:82:fc:87:a2:8f:ff:ee:a7:cd:e2:8a:4d:
e6:84:5b:17:a5:3d:9b:7b:cd:6f:da:fd:0d:40:15:
41:a4:21:01:ea:97:a5:ce:27:e3:ea:3f:31:d0:d8:
d8:d3:f7:10:30:87:78:8a:21:51:2b:f0:89:00:cf:
d8:01:af:78:53:8f:31:2b:f0:d9:fd:99:a7:78:c9:
98:72:b4:8a:4a:95:31:36:e4:d0:3c:02:a3:50:1a:
b8:f5:6b:db:cf:aa:58:d4:00:83:f0:95:28:f1:5d:
d2:f9:20:d5:e8:87:f3:60:3e:53:ac:61:69:07:f6:
5a:b2:6f:b2:7f:d2:ad:d1:de:18:bb:95:f8:2f:3b:
67:8e:13:f6:c2:a4:bc:e5:b9:55:ac:af:ca:5d:f3:
d7:6a:cf:6d:07:35:22:cc:13:27:dd:b8:8e:8c:3f:
6b:1b:af:9e:da:5b:8f:c4:5c:8d:11:f4:4d:a1:b1:
8a:71:45:b9:63:38:a0:d8:fe:c4:2c:92:36:4d:ae:
9a:49:b6:eb:1a:dd:b0:d5:23:04:03:af:dd:52:70:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:04:6C:E8:39:2C:B2:BF:51:97:18:B8:F3:0E:1C:62:D8:85:A9
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:64:fd:f1:32:3c:1e:29:9e:3c:0a:4a:31:7f:52:91:bf:71:
13:7a:4c:0d:41:57:f0:36:d5:f7:52:07:d8:65:31:10:c6:e3:
b0:a1:69:dd:52:8c:86:d9:57:3a:a0:90:28:a1:bd:19:b2:ac:
7f:2f:a5:f8:38:3a:02:de:a1:72:9f:22:f3:99:a8:a8:42:e0:
e6:6d:0d:4b:d5:e0:1e:92:4a:59:ea:3e:62:07:7f:65:43:e4:
98:c7:ad:47:ec:71:bf:c7:83:86:d4:e8:7f:1b:35:48:9e:92:
95:53:a2:23:7f:8d:8f:4d:77:d0:e8:63:32:3a:b9:a6:07:3d:
81:56:c5:29:b9:bf:45:e8:e9:cd:61:b9:a7:f3:9c:32:10:ad:
1b:fe:38:ea:7d:7c:3a:d5:89:7e:69:1e:1b:cc:fc:67:67:d5:
35:d2:2b:dc:28:75:55:70:09:b4:ea:40:aa:84:ed:e4:ad:19:
cc:58:04:5e:06:5a:ed:93:cd:2c:a7:17:ef:ae:ce:3d:74:98:
e1:33:40:ab:62:e4:36:11:e8:25:3b:d0:ba:a6:17:93:32:27:
cb:2f:ba:38:25:e9:44:77:24:f5:20:63:cb:1e:e0:6f:ea:18:
d2:f8:f4:d9:ef:da:90:d0:78:d9:4a:81:3c:dd:f0:48:02:d3:
55:39:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:28 2026 by rpki-client