Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: etMozstiXEMVYUWyOR3uk1HEC+7sjHJxidFHzN8O53U=
Subject key identifier: 3C:CB:2A:93:D6:D1:82:C0:A9:FA:85:6E:F4:EC:59:B3:5A:7E:8A:16
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 019F841E9456908B0C8E45F0827058C10FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 19CE
Signing time: Tue 21 Jul 2026 10:00:24 +0000
Manifest this update: Tue 21 Jul 2026 10:00:24 +0000
Manifest next update: Wed 22 Jul 2026 10:00:24 +0000
Files and hashes: 1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: v1DeVVTSun8fsfgGHrtR9uysEKOLCfj+MK47rYf8Xhc=)
3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:94:56:90:8b:0c:8e:45:f0:82:70:58:c1:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jul 21 10:00:24 2026 GMT
Not After : Jul 22 10:00:24 2026 GMT
Subject: CN=3ccb2a93d6d182c0a9fa856ef4ec59b35a7e8a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:92:cd:c7:3c:ca:0b:dd:89:40:4f:6b:a2:
15:96:5d:d2:ab:34:77:5c:83:3e:89:6c:4b:ca:c3:
f3:5b:49:f9:67:b8:ef:1b:77:6c:ea:ec:df:b8:b5:
e1:65:89:a7:2e:e8:22:72:a3:59:b3:5f:19:a6:19:
f8:56:1c:35:8f:47:5e:be:8f:83:23:f2:e1:53:e9:
c4:88:63:ec:fb:32:b7:f3:a0:2b:87:15:0a:9b:15:
7c:7a:b3:b1:dd:3d:54:d4:88:52:a5:a3:c5:bd:62:
e4:e2:60:9c:02:75:24:74:ba:6e:a5:5c:3e:74:7a:
b9:8e:cb:4d:0b:31:87:d2:f1:e5:26:99:96:32:be:
4f:66:05:85:d4:3a:c7:01:2b:1f:8e:ad:e5:6c:99:
31:6b:b4:66:6b:52:9d:51:2b:cc:8c:bf:81:67:9b:
d5:9c:61:07:84:72:7b:4c:51:10:f9:9d:0d:22:43:
a0:66:95:5b:58:5f:e4:40:ad:57:fa:18:b7:00:3f:
22:6b:4d:38:22:6b:a7:a1:ef:7e:6e:88:0b:3c:64:
93:de:df:96:88:a8:2b:b0:c6:eb:54:e1:3e:20:78:
47:f7:e4:84:95:60:2c:8c:e5:75:f6:91:fd:68:42:
1f:c0:ea:01:b2:11:b8:07:30:b4:51:6a:b8:e5:e2:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:2A:93:D6:D1:82:C0:A9:FA:85:6E:F4:EC:59:B3:5A:7E:8A:16
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ab:a4:96:90:6a:ea:4b:e5:e9:66:2b:c2:14:04:3f:5d:ec:
f1:c0:87:5d:47:06:23:46:bf:ed:ce:62:72:e0:2f:8c:d5:73:
af:0a:34:2e:a1:e4:0d:e7:14:1b:77:ff:65:df:21:50:bf:67:
f1:2f:ed:0d:53:11:76:78:4e:3e:06:26:04:7f:95:23:af:34:
cc:22:9a:3e:28:b8:c6:3d:99:65:87:64:4d:0a:6a:25:50:e6:
80:59:11:13:55:65:34:4f:32:a9:4d:57:4c:3f:99:68:24:94:
72:81:c5:62:fb:31:b2:cb:d3:0a:f6:05:cf:3e:a3:c2:47:25:
10:e0:e9:0d:0c:b8:cf:1f:a2:fa:ab:b9:45:b1:96:b4:b2:a2:
8f:6f:c7:66:92:82:43:16:86:f5:82:46:3b:4e:fc:54:72:8c:
9f:6e:96:84:50:6d:d8:fb:28:5f:f9:29:f6:b6:7e:35:46:bf:
81:54:f4:78:1b:1a:de:5d:4a:d8:f5:15:42:33:81:de:00:94:
dd:ff:c0:98:08:b9:01:a0:9b:96:fa:7a:4f:f1:da:2a:c1:18:
7a:59:cc:62:81:23:03:32:c6:ef:e3:70:d5:16:5e:8c:f2:a6:
8a:fb:29:3e:4e:92:bf:5c:57:51:0c:45:32:12:23:60:89:7f:
c7:87:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:41:25 2026 by rpki-client