Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: jIiPcuiGWxlijhDga7EJBcv9A7IBUVoYLv0yns3Y0VE=
Subject key identifier: 1F:AD:70:CC:71:93:9B:8C:45:E0:BA:F6:C3:1A:40:ED:2D:31:B6:27
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019D38D33568687C3CEABBAD5E4C1B08249F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0CBB
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: VS/PsPHoNbgHgvnP4aTl01g+InFzaDF9JI0+EMUqcug=)
2: m2F3AdAnYNyBxXYR-09hd0CgJ-c.roa (hash: L3jK7ngzl36wT68C1jk8TWgb+EAYAtZ/AFxjRpzTIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:35:68:68:7c:3c:ea:bb:ad:5e:4c:1b:08:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=1fad70cc71939b8c45e0baf6c31a40ed2d31b627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:2d:18:53:0e:f6:fe:c8:bf:6c:86:11:2a:
f4:88:36:37:38:c1:dd:2c:53:a4:df:2f:7f:cb:7b:
ef:38:9d:f9:73:91:1d:ca:db:bd:58:e6:66:77:a6:
5d:8a:a5:c6:b4:81:41:40:fd:d1:31:eb:c1:68:4a:
92:9f:09:f7:ee:eb:44:ff:8d:c4:2d:ab:c8:76:ea:
57:1c:62:9e:fe:a1:bc:99:e5:45:21:51:bc:5e:6e:
ae:a9:6d:74:44:4d:ea:07:20:ce:93:4c:fc:e9:6b:
b6:77:c2:c2:0b:04:e4:49:6f:ab:07:be:fc:c1:d8:
03:da:7e:af:9c:ba:2e:01:df:13:7d:29:1c:eb:49:
82:93:0f:5d:71:66:b0:b1:5b:0d:c1:34:4a:3c:a5:
34:c0:b6:47:89:2a:cc:b1:d3:8c:e1:37:4b:fe:4c:
5b:1f:d9:c1:d5:c3:d7:e2:9b:8b:ae:23:36:a3:75:
3b:97:5f:61:9f:2b:10:a5:ea:0c:51:e8:07:17:16:
37:8f:2c:ce:a2:27:38:09:fa:4b:00:79:d3:6a:b8:
f1:b4:6f:42:dc:d3:d2:0c:f7:8e:ce:cd:d4:f9:5c:
12:d9:e8:9b:9c:62:db:5f:80:b4:7f:0a:39:32:13:
db:19:ae:fc:24:76:4f:2b:77:29:64:70:2b:e5:1c:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:70:CC:71:93:9B:8C:45:E0:BA:F6:C3:1A:40:ED:2D:31:B6:27
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1d:23:bc:07:3c:e4:6d:00:5a:f4:ad:a1:70:3e:67:a8:92:
63:45:bd:1e:1a:40:aa:92:c8:8c:11:86:d7:e4:85:e6:ca:fa:
dc:30:75:f8:95:d6:37:1a:e2:a7:a4:86:9c:1e:83:7c:87:bd:
15:9b:a1:06:90:58:c8:b9:26:ca:94:9d:67:22:e2:40:21:ea:
bc:c3:54:c2:f1:41:5e:17:e4:86:78:35:c7:12:cc:bd:41:3d:
dc:89:9b:05:9e:49:4e:ba:5b:4e:5f:cd:7d:57:fd:1d:2c:ac:
cc:c5:6a:0d:b1:be:31:2e:69:e2:50:94:c3:3d:38:c3:65:95:
63:65:31:05:ab:55:ab:b2:c5:46:11:8a:51:15:a8:bb:54:cf:
47:25:f4:97:07:d6:ff:23:88:3c:f9:5f:79:e1:90:18:bb:c1:
12:c9:fc:4b:b3:f0:45:e4:5d:4f:ee:9b:1d:76:1a:2e:4b:57:
be:dd:12:c2:00:59:88:e2:0d:81:58:76:ed:90:f3:10:7c:b0:
97:fc:04:67:61:bc:e9:aa:df:d1:e6:c6:2f:a2:77:e7:7e:8c:
40:5b:62:e1:00:dc:bc:08:df:1f:2e:36:ac:03:9a:78:3c:19:
ca:33:12:99:c8:a6:bc:29:13:9c:12:44:23:da:59:9b:fa:fb:
26:2b:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:59 2026 by rpki-client