
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: SjxM5otGjjcut/Cb32KPObIiUN7K3GyfCbYTJO+OQtI=
Subject key identifier: 35:C6:F3:9B:78:C7:8D:45:01:66:C0:4C:6D:BB:52:C1:76:28:89:31
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 01A17AA88E57F6950F4BF8E2855E3DF13CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 1042
Signing time: Tue 27 Oct 2026 00:00:29 +0000
Manifest this update: Tue 27 Oct 2026 00:00:29 +0000
Manifest next update: Wed 28 Oct 2026 00:00:29 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: pwEBc5VsqvjZYrGcWuwrGt5WA8aSpMIXbPB5sb9hqNU=)
2: hve1g89vqIvma0mEJM2c9FaOAR4.roa (hash: HbqakuOkdoxtcbllvOJXcVdhzYdrz2GQYaxEe8AoMDY=)
3: viTS2vSEXyeqZB76Pw9I_-D3ags.roa (hash: qbDefb8T1pktEql1YHYnA/oWSC1dlY1F7XizmBxKWF8=)
4: yyWfsmvh8Jt4JXufZsjnXpoUQ3k.roa (hash: N3wiJ0eaYZUQRz5A0bfAdbir/LiyJpdrbnxqvsu++rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:8e:57:f6:95:0f:4b:f8:e2:85:5e:3d:f1:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Oct 27 00:00:29 2026 GMT
Not After : Oct 28 00:00:29 2026 GMT
Subject: CN=35c6f39b78c78d450166c04c6dbb52c176288931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:5e:cb:16:5c:21:12:c5:ac:02:ea:0a:0d:
1d:e8:21:7e:60:85:a4:b6:ab:00:a8:ab:9a:10:25:
90:05:f9:62:d0:e8:0d:de:c6:6b:77:5c:5c:52:bd:
96:ca:10:3f:68:b5:0b:b2:71:77:12:a5:2f:57:be:
3e:f4:d6:2b:ea:a8:83:4f:31:27:16:61:d0:43:33:
83:7b:ad:09:7d:61:e0:2b:21:37:74:63:7c:16:dc:
8f:a8:a5:d0:9f:61:c9:0d:91:27:09:92:9e:02:a5:
7a:d8:aa:8b:c3:c4:39:71:af:ba:20:08:7b:88:fc:
8a:58:e5:61:5b:7f:2a:75:1e:d1:71:13:00:7f:a2:
42:ef:d2:2a:06:2c:db:8e:18:59:fd:fe:07:3f:11:
15:c8:1f:a6:33:69:5c:e2:66:a8:5e:b0:82:34:62:
a9:cb:4e:65:39:e2:42:96:22:3f:eb:91:9c:0d:a3:
01:17:c2:e2:de:a2:5a:57:ac:be:8d:6d:fd:55:3c:
25:6b:90:e3:90:a6:8a:2d:ee:bc:77:da:91:16:c4:
6c:ce:bd:e7:ef:cc:da:21:50:6c:92:93:ad:2b:b5:
69:99:c1:df:bc:3b:5c:c3:0d:b8:a0:b0:c0:40:23:
8c:1b:e6:ec:fe:36:9c:97:ca:a8:2e:3b:d5:99:0f:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C6:F3:9B:78:C7:8D:45:01:66:C0:4C:6D:BB:52:C1:76:28:89:31
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:1a:01:12:8d:3e:9d:10:b1:8b:56:53:9f:3a:b0:a6:01:
9e:fa:e0:46:12:16:9f:24:ff:15:50:11:d2:df:1d:8e:2c:36:
a0:4d:da:2e:b4:be:61:43:f4:21:f6:66:b7:32:1b:82:ec:20:
6f:24:cc:37:06:b8:65:5b:ef:fc:9d:c6:7d:f0:c4:92:a6:fd:
04:04:dc:7e:4b:54:18:88:33:06:29:71:42:0d:ca:6a:0b:e6:
7d:67:64:cb:52:7e:ce:91:06:ab:19:b1:ba:9a:17:d1:60:aa:
ca:24:e1:3a:01:21:83:78:93:36:88:b7:7a:03:b9:75:fa:b4:
8d:aa:67:91:b6:0a:d8:c8:4a:4f:d3:ca:5f:d6:a5:cf:25:1a:
15:b5:a5:ae:d9:be:f1:57:b3:6b:68:9f:80:75:6a:e5:5c:b4:
c4:cc:fc:4d:83:9d:14:d9:87:6d:de:f8:a6:36:a4:fc:58:80:
0a:2e:92:91:95:d1:1f:7b:b5:e4:5c:8b:38:e4:16:2e:cb:e6:
e9:68:e6:10:27:07:31:1f:70:95:3b:e7:fa:16:ce:f3:ff:e1:
9e:85:c3:21:e2:8c:31:dd:22:ec:32:53:ce:1b:43:24:f5:da:
5c:be:f5:c0:23:93:76:c7:f8:c0:c9:60:5b:56:f2:bc:91:a7:
77:28:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:11:47 2026 by rpki-client