Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: KeFSwhKtcPJefUJEMkglKnt1xnWFeq3ljkAA4rCXYrY=
Subject key identifier: C3:69:78:B2:A7:34:82:42:D6:6E:DD:76:4E:CE:87:AD:42:12:81:06
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 019D333E7F249FDC184C217BE11394C1C7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 13BD
Signing time: Sat 28 Mar 2026 07:00:26 +0000
Manifest this update: Sat 28 Mar 2026 07:00:26 +0000
Manifest next update: Sun 29 Mar 2026 07:00:26 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: w96UXmdvNV6LBd1gUetomlTTZWiI5VLbUOt1SIxIlag=)
2: kt-dzWz4ump9exEN1VN1o9bh0sQ.roa (hash: 3EXp+7ZKktgIDQ1+hPu50wusQGozvYQkFp906943fvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:7f:24:9f:dc:18:4c:21:7b:e1:13:94:c1:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Mar 28 07:00:26 2026 GMT
Not After : Mar 29 07:00:26 2026 GMT
Subject: CN=c36978b2a7348242d66edd764ece87ad42128106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:87:d9:2c:92:f3:67:40:b9:9e:0c:49:cc:
ff:8f:ff:b0:55:7e:ba:10:1e:56:b4:86:27:f6:af:
59:9b:90:66:1d:eb:13:c3:f5:1e:d8:ae:74:51:8d:
50:ea:b9:c3:9b:8a:58:c8:da:17:0f:f8:1e:ed:19:
03:df:ac:01:77:b4:77:31:f4:cb:d8:52:56:ca:c2:
82:22:ce:c7:c3:d9:6e:c6:21:e2:96:e8:64:ac:fc:
d9:59:52:55:51:a8:82:95:0d:eb:a6:f7:9f:6b:01:
c5:ba:6e:db:c3:bc:aa:77:9c:71:b9:e0:d7:77:46:
00:d5:0c:85:b6:fa:35:1c:e3:71:75:b8:67:4d:df:
c4:76:80:10:3f:e9:c4:65:45:ae:df:d6:78:e1:29:
b3:8b:56:d2:65:b4:2d:82:10:3e:72:06:e1:6b:ad:
28:37:09:b2:a7:e2:6c:1e:11:c2:0c:12:5d:f8:a4:
b5:21:77:24:52:e0:2b:40:7c:c9:7b:96:ce:c0:d9:
e2:d8:17:a2:7c:a4:d0:12:0d:28:f2:c2:ed:25:0f:
f6:96:30:26:c6:9b:b3:e6:c2:6e:6c:5c:3f:66:68:
95:b0:56:1e:5c:ba:6f:fc:bc:dd:28:f5:e8:56:bc:
61:ce:f1:18:a5:ea:2d:ec:56:bc:c7:b0:43:f1:b7:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:78:B2:A7:34:82:42:D6:6E:DD:76:4E:CE:87:AD:42:12:81:06
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:20:6e:91:ee:31:6d:ff:d2:5e:ea:6b:07:8f:1a:98:59:
72:18:90:96:ff:60:32:93:6f:72:a6:34:d7:31:14:f4:a6:69:
9b:41:c2:b5:77:11:ba:32:a1:81:64:7d:85:4e:16:5a:ca:bb:
f7:d6:14:ba:ab:1e:cf:4d:0a:62:53:8b:66:c4:ee:31:44:ca:
4d:c3:04:26:d7:9a:cb:20:d3:74:54:e2:47:78:12:ef:c3:53:
49:9c:d6:c7:95:b6:cf:d5:95:af:a7:30:22:09:68:09:d8:6e:
f2:72:76:6f:9e:00:2a:e6:7b:75:bb:c1:be:4b:3b:b1:12:02:
fd:91:4a:0b:32:8e:a2:89:6e:1e:eb:32:9c:4b:c6:69:c4:4f:
07:95:f4:81:1c:4d:00:a9:e7:35:bc:9c:17:83:f6:0d:7a:c6:
10:b1:70:d2:6b:bb:88:ef:35:d5:bb:34:c0:99:e6:83:b9:9e:
20:aa:9c:76:7f:84:cf:82:a3:4a:fa:9d:33:1d:f5:2d:57:96:
11:b3:de:8e:83:91:ef:89:f7:c5:37:fc:52:f0:e6:11:5e:78:
85:5b:da:ef:2d:07:71:24:c9:d0:07:9d:c0:40:b5:26:f8:70:
27:1b:62:ea:89:19:da:e0:39:64:87:1a:0b:89:49:58:75:1e:
2b:b4:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:56:56 2026 by rpki-client