Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
File: izwijjENBbA9CxZH6YYboLjUdsI.mft (raw, json)
Hash identifier: MQG3Y0HiTO/mg+YKL28rVv4BggbSzfxS7CqgnVTG9/U=
Subject key identifier: 84:5C:5C:CD:14:95:95:68:EA:35:7E:A1:70:C4:3B:2F:3D:61:60:82
Authority key identifier: 8B:3C:22:8E:31:0D:05:B0:3D:0B:16:47:E9:86:1B:A0:B8:D4:76:C2
Certificate issuer: /CN=8b3c228e310d05b03d0b1647e9861ba0b8d476c2
Certificate serial: 019D3788FF8C0A763ABDC4D4D7D6C166875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
Manifest number: 78
Signing time: Sun 29 Mar 2026 03:00:18 +0000
Manifest this update: Sun 29 Mar 2026 03:00:18 +0000
Manifest next update: Mon 30 Mar 2026 03:00:18 +0000
Files and hashes: 1: izwijjENBbA9CxZH6YYboLjUdsI.crl (hash: JAjHhLDszd6ac5wHKdlCoeV0ZzbTdUvsWuNBGRU0Zfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:88:ff:8c:0a:76:3a:bd:c4:d4:d7:d6:c1:66:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b3c228e310d05b03d0b1647e9861ba0b8d476c2
Validity
Not Before: Mar 29 03:00:18 2026 GMT
Not After : Mar 30 03:00:18 2026 GMT
Subject: CN=845c5ccd14959568ea357ea170c43b2f3d616082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:a4:24:55:fd:09:55:55:fa:36:7e:e4:d4:
c3:9c:aa:b4:51:31:4f:6f:82:03:f8:74:eb:57:7b:
7e:eb:0e:70:90:a0:7a:84:0d:c4:de:9d:98:9f:36:
4d:54:5a:bd:d7:bf:1c:a0:53:69:63:29:1f:f7:90:
95:d5:00:aa:19:3a:91:15:e6:10:58:19:ff:34:1e:
db:58:bb:85:0b:0c:31:1a:8f:3d:63:66:5a:7d:7c:
d4:95:24:61:58:68:53:5b:0d:bf:8a:35:80:4f:6a:
41:ff:5b:a9:42:dc:0f:33:dc:d9:94:a5:bf:76:21:
6a:ce:41:07:8f:2c:37:e4:3c:a6:27:c2:c1:eb:ea:
e3:39:1f:33:df:aa:bb:42:94:ac:55:19:ad:5a:97:
e4:a8:55:0f:5d:00:dd:36:6e:37:a6:de:8e:31:67:
b4:cb:c3:f1:f1:57:b0:ca:e0:58:38:28:52:a9:6f:
e3:91:a9:55:5c:4e:0f:72:43:ec:52:15:c4:45:49:
0c:ae:24:3e:1c:90:e3:9b:10:12:82:0c:56:1b:9f:
a4:29:a9:38:79:d2:a8:e9:11:dc:2d:4d:65:1a:52:
bd:02:3b:d2:2c:81:99:a0:c4:a9:59:9a:cd:8f:39:
d5:70:3c:19:cb:33:6f:89:12:e5:b7:f4:a9:d4:f6:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:5C:CD:14:95:95:68:EA:35:7E:A1:70:C4:3B:2F:3D:61:60:82
X509v3 Authority Key Identifier:
keyid:8B:3C:22:8E:31:0D:05:B0:3D:0B:16:47:E9:86:1B:A0:B8:D4:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izwijjENBbA9CxZH6YYboLjUdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/56c91d-fd7d-4078-9266-38a5e8ca7a93/1/izwijjENBbA9CxZH6YYboLjUdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:7b:7c:db:97:55:c9:c5:64:9e:7b:db:a6:1f:14:fe:6b:
8b:71:91:a6:70:d6:7a:eb:22:9b:1a:77:e9:74:8a:e3:f9:a1:
51:51:07:ac:0b:94:aa:0d:72:c4:ff:2d:cb:10:fa:7f:74:ff:
70:0c:30:e9:ad:8d:82:88:cc:ba:66:24:35:88:73:55:7b:6d:
69:ea:15:eb:fe:26:b9:08:98:e3:4d:50:68:58:a0:7f:38:04:
29:8c:26:21:dc:d4:7e:01:4b:4f:c9:df:87:56:00:60:5a:43:
dd:f7:84:09:e5:1c:2e:0f:77:1c:b9:91:a4:2c:bc:3b:7b:4b:
94:40:90:2f:5b:2f:33:8b:82:d2:bf:f9:03:1e:4b:43:db:2f:
71:66:e9:d7:90:7c:97:fe:6a:00:50:28:81:6f:aa:a8:63:0a:
45:ed:bf:58:37:50:61:48:5d:b2:71:d4:a7:df:87:1e:c2:c2:
f8:e0:f2:d4:92:42:37:85:44:9e:2a:cf:7d:9a:f9:02:a6:0b:
6f:74:cc:d9:7c:1b:48:93:18:f2:13:c8:fe:c1:36:4a:c1:4e:
68:06:65:71:01:d3:78:61:2a:44:7d:68:d4:59:37:40:59:ec:
b3:bd:76:dc:b9:ab:66:a3:75:60:0c:c1:f0:22:17:e5:ec:15:
fd:da:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:06 2026 by rpki-client