Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: Rrrm22H8no5LdzfCKVDgdllB6WPhXHjD8EyMNm31g7Q=
Subject key identifier: EA:E4:3F:E9:51:14:42:CE:BD:0A:E6:60:1A:A8:B6:D2:EF:72:38:8C
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 019D0A7A5BF896AC7C9F1CEF9495A6C8F5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0CE4
Signing time: Fri 20 Mar 2026 09:01:24 +0000
Manifest this update: Fri 20 Mar 2026 09:01:24 +0000
Manifest next update: Sat 21 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1dTA6KlWl5sF4kQalZTPxUegVZE.roa (hash: rDk2rl5yPqtGgX9/dF9fWYCOXDGqIUWxZCuI1rSvVok=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: FwiguoH+HE+gh3SCb6CKiKg/hAdwNU4VwVMhAEZpshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:7a:5b:f8:96:ac:7c:9f:1c:ef:94:95:a6:c8:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Mar 20 09:01:24 2026 GMT
Not After : Mar 21 09:01:24 2026 GMT
Subject: CN=eae43fe9511442cebd0ae6601aa8b6d2ef72388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:ba:69:04:db:d4:58:35:22:d2:71:ef:67:
f3:9d:34:cc:4f:99:41:df:cc:6c:86:a0:c1:01:98:
59:d7:21:75:ee:6e:cf:5b:80:ac:96:bb:16:0a:17:
21:99:ff:35:75:aa:16:b9:45:b7:21:2b:8c:bb:8b:
77:06:f0:82:5d:16:44:47:5c:46:00:5b:3c:d3:c8:
40:13:30:99:f3:f1:02:76:f6:d5:81:de:bb:40:6e:
ae:3e:54:7a:06:9e:2b:ef:0f:11:f0:66:be:2f:8f:
72:bf:73:e4:41:23:9e:75:39:aa:d9:f2:d5:fa:c7:
cf:47:21:a0:63:29:2b:62:13:43:8d:1c:be:c3:6a:
ad:2d:8a:cb:1d:75:51:c6:70:65:24:7a:f2:2f:99:
35:54:b5:ae:0e:30:8b:51:b3:0c:08:39:13:d7:29:
bf:37:07:45:2d:f4:5a:c0:2a:ef:46:8a:f8:d5:d2:
4d:8b:7f:be:74:3c:3e:19:66:fb:12:76:73:09:84:
ab:af:c0:29:6c:aa:98:a7:dd:51:f5:e3:78:0c:ef:
15:e0:6b:a2:24:82:72:bb:5f:9e:b0:ea:92:8b:64:
84:49:67:48:fb:5b:83:37:eb:a1:e0:b0:8b:31:96:
3c:82:39:5b:4d:94:36:15:16:16:47:5a:a7:1d:0e:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:3F:E9:51:14:42:CE:BD:0A:E6:60:1A:A8:B6:D2:EF:72:38:8C
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:8d:f7:30:8c:8a:af:fe:22:88:e9:33:6b:7a:ff:c3:a3:
62:2b:c8:16:f4:73:48:75:7b:69:11:78:6d:21:7c:05:ba:b6:
65:0f:a7:c6:dd:7d:13:f6:e7:36:19:7c:40:ec:2c:1a:da:12:
0b:51:eb:72:6c:70:4e:bb:80:9a:a7:49:85:57:69:4c:4e:6b:
01:27:07:57:61:de:5d:bc:ac:29:23:af:68:c6:94:72:e1:06:
a0:39:25:a2:71:32:24:d9:b5:fa:f8:a7:a5:02:d5:b6:e3:a8:
e8:0c:de:ec:58:e8:78:41:fa:48:cd:75:20:41:b7:45:59:de:
38:a1:87:91:22:6a:d1:76:3a:26:f6:77:ec:cc:47:2b:b9:2b:
43:74:5d:6f:a7:84:c6:5e:ad:9c:ea:82:60:2e:dc:9e:21:32:
4f:c1:52:93:68:cb:2b:20:43:37:50:12:4b:65:75:27:bf:bb:
90:5a:5c:48:7c:2e:73:de:07:1b:9d:e7:23:a3:c9:8d:8f:de:
22:ba:95:1e:41:4d:08:9a:f5:bd:cd:f5:98:43:74:ce:56:58:
0a:1f:fc:48:5d:0e:0e:f3:61:58:e6:bd:1c:96:dc:bb:a3:a6:
45:80:21:63:15:fa:9f:35:75:67:03:d9:f4:64:45:46:d2:73:
c3:1e:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 16:47:13 2026 by rpki-client