Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: 06PMuMKrXY5tXhgm5D7ZfkXpemoSXEnfg2RcnIm9d7s=
Subject key identifier: 8B:BA:98:7E:D6:00:FC:45:BA:43:68:1D:40:F9:53:BA:16:02:02:2C
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019D0A42B906D9B58B0185265AB36654E71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 180A
Signing time: Fri 20 Mar 2026 08:00:38 +0000
Manifest this update: Fri 20 Mar 2026 08:00:38 +0000
Manifest next update: Sat 21 Mar 2026 08:00:38 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: HfzykFlPwWgvyo8SFBZ6SXNrIX0m9Pnpkb1YH2EVU5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:42:b9:06:d9:b5:8b:01:85:26:5a:b3:66:54:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Mar 20 08:00:38 2026 GMT
Not After : Mar 21 08:00:38 2026 GMT
Subject: CN=8bba987ed600fc45ba43681d40f953ba1602022c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:66:4c:f0:64:45:ce:0c:dc:dd:48:74:03:
20:0a:35:93:9e:b6:e0:b3:53:d3:7d:d7:7c:8c:37:
b3:af:8c:cc:a6:0d:26:a6:9b:25:25:24:f4:b8:89:
ac:cf:c6:59:53:98:86:7b:54:fc:ce:6a:8d:11:c7:
46:93:6b:d9:93:1b:b8:df:16:e7:d8:4f:b3:f4:9d:
81:7a:0e:3f:7b:e2:5b:47:34:31:e6:e1:ba:b0:8f:
66:be:9b:e9:bc:80:43:2d:36:31:fd:94:c5:46:76:
3e:90:ad:e8:8e:d2:6a:8e:76:78:df:eb:64:4c:64:
af:0e:db:01:dc:56:3f:9a:04:17:0c:00:f5:0f:bb:
4c:ba:57:7e:e2:0b:39:c9:6b:e7:1a:7f:52:cb:61:
08:9a:0a:96:4a:50:13:c2:1d:f0:f2:bf:d1:3a:fc:
ce:35:1e:1f:d6:0e:d0:93:37:9e:c9:59:51:0e:1e:
12:1c:70:14:8b:e6:d0:27:0e:05:b3:85:ec:51:1c:
75:7f:f4:84:55:29:6d:3f:c1:5a:42:3c:95:58:ff:
7b:17:f7:b5:b7:49:1d:20:82:2e:f2:7d:37:db:cf:
c4:7c:62:40:05:fd:5c:5d:6f:d1:4f:cf:b7:7e:01:
2c:e7:6f:5c:79:99:9f:40:ef:11:ec:f7:0e:55:eb:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:98:7E:D6:00:FC:45:BA:43:68:1D:40:F9:53:BA:16:02:02:2C
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:d1:3b:e9:94:c0:54:6b:7c:0c:b8:5d:15:90:3c:6e:c3:
89:f9:4d:c0:18:0a:f7:05:10:1e:18:a1:20:17:8c:0b:cd:91:
0e:be:bf:d6:ac:6f:40:3b:a2:87:63:42:7c:19:77:1d:33:69:
9b:34:1e:3e:2b:eb:7a:f9:40:55:3d:df:ce:77:92:d9:05:4e:
45:43:e1:34:0c:a9:0e:2c:bb:3a:a7:1d:e0:c0:7c:12:20:ba:
dc:89:e3:c1:02:ef:ea:d4:2b:80:93:08:5d:90:2f:43:6b:b7:
d5:1f:dc:28:b0:5e:6f:85:9c:74:34:18:39:24:ca:51:a7:34:
c1:58:4d:e1:b0:e6:be:8c:24:1f:4a:55:fa:4f:38:df:81:9f:
67:a7:51:4b:11:4f:9b:61:1c:f1:9a:93:f9:b8:df:86:14:71:
37:c7:22:28:25:c8:58:5d:82:9e:c2:ab:9e:77:66:89:17:cb:
f3:35:15:53:46:95:79:ad:b4:1d:16:ab:0c:b1:43:59:1d:e2:
1e:06:93:2d:80:34:a1:b4:a0:05:cd:6b:34:db:5f:66:c0:df:
04:9c:61:d9:ac:a1:15:c1:3a:a5:1f:66:df:09:f0:76:57:8c:
00:dd:8a:12:87:e1:2b:c7:c7:f1:fe:00:70:43:b5:e0:cb:d1:
cb:63:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:03:26 2026 by rpki-client