Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: g1U8tBPzT3Ur5P8rEcbkOYZNouFKw2Lf59z/JcBfIZs=
Subject key identifier: F1:56:8F:A5:A2:47:4E:94:4C:2C:A2:D5:89:5C:9E:B1:0E:0E:CD:86
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 01A0811BE3BE1D3941BE77B6FDB9CD72EFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1A51
Signing time: Tue 08 Sep 2026 13:01:23 +0000
Manifest this update: Tue 08 Sep 2026 13:01:23 +0000
Manifest next update: Wed 09 Sep 2026 13:01:23 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: UEMggfoTz4Aeh74PXXJ/rq2ollT0vy4nwP9ryW/C5ZI=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1b:e3:be:1d:39:41:be:77:b6:fd:b9:cd:72:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Sep 8 13:01:23 2026 GMT
Not After : Sep 9 13:01:23 2026 GMT
Subject: CN=f1568fa5a2474e944c2ca2d5895c9eb10e0ecd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:27:06:9f:e7:eb:ff:d9:58:c8:61:ad:2e:
f5:7d:8d:4c:65:4a:15:b8:71:eb:f0:2f:9e:be:a0:
09:b8:85:0f:e0:d9:74:06:2b:da:92:e2:11:23:ff:
3b:dc:5b:bd:da:b2:c8:3c:a0:6f:4c:2c:36:ab:b4:
d4:9a:69:93:0a:3d:9c:11:2d:8c:4d:87:fd:17:bb:
df:3e:cb:84:89:e7:1c:7d:ca:f9:8b:05:26:d0:24:
bf:b6:06:ff:44:bc:f2:b8:12:4f:03:ef:67:79:34:
a5:d5:1f:98:cd:9c:1d:65:c7:e8:82:7f:46:f1:c1:
6e:15:bf:b3:f4:14:7a:18:3e:f5:82:4b:60:e1:4c:
94:5f:77:29:b8:20:83:74:12:84:76:4b:a4:cd:bd:
b5:97:4a:20:84:26:db:50:bb:97:c6:14:43:06:eb:
22:65:3b:d9:dd:e1:d2:00:ce:83:14:5c:3b:f1:38:
09:4e:d1:9d:77:2a:23:95:96:eb:20:87:08:4f:81:
3d:55:75:2e:c4:47:93:bf:28:d6:65:f8:e3:c2:37:
70:07:74:34:0b:b4:69:87:7a:84:6c:51:17:89:62:
26:43:71:a9:f4:95:66:67:98:2c:95:29:95:3b:00:
a6:aa:0b:0f:d1:e4:b5:24:70:6f:ff:30:ea:26:ba:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:8F:A5:A2:47:4E:94:4C:2C:A2:D5:89:5C:9E:B1:0E:0E:CD:86
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:14:31:6d:43:dd:d0:16:96:6e:99:d7:93:f5:84:75:d1:
a4:15:61:b6:08:ac:fb:2c:02:e6:c0:b9:2f:13:57:1f:a1:b4:
a2:3d:30:d6:3a:88:1b:81:0a:05:45:4f:fd:fb:6d:15:d2:92:
5f:e7:64:3b:e4:d5:11:e3:ce:b1:82:48:5f:e2:11:04:d0:48:
49:77:ad:c4:d7:54:68:02:ce:59:9e:4c:1d:7b:0a:e7:01:91:
b0:70:ac:51:8c:03:fe:7d:3d:c4:e8:92:00:b8:12:d4:03:a8:
ad:59:0f:d3:32:f0:6d:f3:50:cc:d7:d1:12:45:9d:88:bc:ff:
e6:a2:fa:9c:ca:c8:9e:41:f2:0a:9d:85:61:c0:e0:ca:49:b4:
c8:21:39:0b:50:45:92:21:b9:9d:61:f1:97:70:53:53:ec:80:
e9:b3:9e:5b:95:71:cf:88:97:f0:37:4c:0b:35:36:7a:be:7f:
f5:73:5c:69:9f:a7:25:b4:2a:01:47:c1:3f:98:bc:48:02:19:
a4:3f:30:a7:34:51:5c:2c:c8:de:a0:fa:a4:e5:55:d3:3a:10:
c6:e8:7f:50:d8:6f:17:34:4c:44:18:a1:fe:43:01:db:1c:d4:
fc:a3:fe:88:c1:8d:6a:12:cb:2b:5f:7e:1a:c7:5b:e9:e3:76:
34:32:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 23:59:34 2026 by rpki-client