Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
File: IzwGR7WIf4X8n40UqN5aNp6-5k8.mft (raw, json)
Hash identifier: PUdySLt4Lct1E4+5R7R+j9Sf3dLldgR2sqnO1OiR7CY=
Subject key identifier: E7:2C:26:C6:3F:11:CE:92:25:9E:A4:30:68:0E:5E:CD:D4:98:24:F1
Authority key identifier: 23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F
Certificate issuer: /CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f
Certificate serial: 019D37F7343026E190488E7F272DA23991B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
Manifest number: 88
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: IzwGR7WIf4X8n40UqN5aNp6-5k8.crl (hash: IkNLneeod30R3hK5RMuMjirHFn2ZUuIInTOboknrJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:34:30:26:e1:90:48:8e:7f:27:2d:a2:39:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233c0647b5887f85fc9f8d14a8de5a369ebee64f
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=e72c26c63f11ce92259ea430680e5ecdd49824f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:c4:14:c1:05:3e:e0:81:b1:bb:9e:59:7d:
1f:f8:86:e1:ac:f8:41:07:a7:14:f8:2c:ff:ee:2a:
1c:8a:5d:60:54:bc:12:c1:58:36:18:a6:82:2f:1b:
c4:b6:a3:42:df:ea:44:b2:e8:58:09:a7:c7:98:df:
65:a8:6e:84:2a:fe:0f:d3:f8:e0:59:c9:aa:83:69:
b2:4b:52:e1:31:d0:85:20:15:78:f7:8d:4d:09:fc:
20:bc:36:4f:3e:d1:24:88:b9:b6:45:b2:c2:8e:99:
47:a3:10:d1:72:ea:c1:25:ae:ce:dc:a0:e5:b9:92:
17:d2:e0:fd:0f:a7:bb:48:a5:20:35:52:11:90:07:
4b:c3:03:42:bc:ec:56:90:f8:79:5f:f1:44:7f:40:
cf:42:6f:6d:65:95:0f:31:f7:d9:59:ad:8c:cc:e6:
ec:44:40:cb:94:26:30:d5:70:fa:19:32:1c:25:99:
3d:7a:ab:da:b2:19:e1:42:19:66:4a:c0:b0:82:8e:
76:e5:81:59:0b:af:4f:fe:50:94:cd:e7:c3:f2:b7:
2d:90:e5:c0:8c:b8:97:e7:f4:10:d5:99:48:02:6e:
89:73:44:fa:41:27:e3:ac:b4:e2:cb:e8:3e:63:6f:
15:18:35:f1:71:b9:71:77:82:ee:63:44:4c:82:75:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:26:C6:3F:11:CE:92:25:9E:A4:30:68:0E:5E:CD:D4:98:24:F1
X509v3 Authority Key Identifier:
keyid:23:3C:06:47:B5:88:7F:85:FC:9F:8D:14:A8:DE:5A:36:9E:BE:E6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzwGR7WIf4X8n40UqN5aNp6-5k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7e2c61-6989-414b-becf-9dacf93725d1/1/IzwGR7WIf4X8n40UqN5aNp6-5k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:39:91:8c:f8:3c:8e:12:e7:e2:91:ee:58:28:69:9d:33:2f:
dc:ca:b8:25:05:ed:7d:ba:99:f0:52:2c:eb:9c:80:d8:2e:51:
ad:c5:f1:24:16:76:20:c0:1f:94:2f:31:f4:ab:ff:25:2f:35:
a2:1f:8c:91:c8:24:4d:ae:ef:a0:a2:be:dc:e8:ac:44:48:22:
c9:9c:c0:63:a0:2f:fe:6c:f6:8e:5a:a3:6a:58:ee:20:ca:53:
e0:33:65:83:10:b6:84:2c:d7:76:4d:ed:a1:e5:32:04:36:3e:
2a:23:30:5c:0f:55:19:56:80:04:e8:03:ea:d6:a5:1d:9f:c7:
e3:e4:70:5f:cd:d6:e7:94:51:54:7e:8d:21:c4:dd:d2:95:d3:
37:1a:61:5e:bc:0f:b2:7e:49:9e:84:4d:9c:60:ca:96:db:33:
a4:2a:fc:c9:2f:52:24:8f:99:68:93:56:92:7e:48:46:3e:1d:
6f:72:ac:bb:dc:4a:91:4b:07:95:73:51:93:49:27:94:d5:59:
3f:80:ef:17:0e:2c:df:09:7e:e8:d7:52:a8:af:a4:bf:6d:29:
e9:63:86:dc:e7:7e:97:35:8a:ab:72:37:b0:19:9d:f9:a7:b9:
7c:0d:15:1d:3e:f2:c5:ce:58:ef:77:05:1e:05:7c:de:b0:50:
b4:af:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client