Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: bAp2AaUi464qpUcHCtJRkzEVUl+YKGxUo7GMCIdvT4Y=
Subject key identifier: 2D:11:52:51:3A:17:88:04:67:46:5E:B1:57:0F:16:79:CE:5E:28:D8
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019D37C0A1BAE309887573FD1B913B7D2571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 09D3
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: HzYdeDp+4WwP9Fw16IWtLAhQbnDWrNH5Q6psQeGBQBI=)
2: kMOSZWtiewXuTyw15Rj0qERqvDU.roa (hash: 0sRuOEf/juDtnk/XmtOYHhmqAObydjSuiq84TabvvMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a1:ba:e3:09:88:75:73:fd:1b:91:3b:7d:25:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=2d1152513a17880467465eb1570f1679ce5e28d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:e9:7f:26:41:e8:ea:69:09:4f:30:48:6b:
4b:d3:ac:ef:5b:38:83:f0:70:80:3a:b5:51:5f:c7:
0d:6c:6a:d8:60:87:87:b7:b8:35:d1:3d:f1:cd:5b:
5b:0f:40:3e:fb:1b:63:94:e1:3a:07:24:9a:0b:e4:
75:51:b4:b3:92:92:88:5a:97:37:e1:68:62:ac:12:
ac:01:ec:d0:f7:9f:9e:30:41:b1:82:06:33:2b:49:
e0:11:ef:49:1a:9a:d0:95:12:57:e1:8a:26:16:92:
4c:08:65:d9:60:2f:4a:16:88:2a:3f:8c:4c:f6:5d:
c1:02:36:63:51:a9:9e:eb:04:dc:68:8e:f7:e8:b4:
34:9d:2c:a0:aa:6f:6f:04:f3:a0:8a:cf:56:6d:b3:
01:7c:62:18:e0:fa:80:eb:65:cc:6d:0b:de:cc:2d:
56:d8:f0:cf:2d:ec:a4:42:ae:30:e4:dd:63:ed:a2:
5b:e3:55:d6:21:5b:b4:e0:6a:b9:79:ed:ec:0b:e0:
93:d0:df:0a:d9:08:9e:bc:77:71:ba:e1:0c:f5:24:
15:16:c5:99:61:93:8a:54:e4:59:e2:9f:a6:5c:3a:
5c:32:c0:32:68:83:26:48:9b:7c:29:f7:06:80:ed:
00:ac:de:e4:26:c7:30:a4:ce:6d:f8:e3:8d:82:9a:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:52:51:3A:17:88:04:67:46:5E:B1:57:0F:16:79:CE:5E:28:D8
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:cc:e9:b7:96:19:ff:92:74:28:8a:b2:9c:96:59:c9:63:
dd:5b:92:01:00:2d:75:4e:61:1f:06:4c:42:08:58:1c:c9:2e:
eb:95:27:fd:80:b0:ce:27:b8:19:30:e7:12:23:59:9c:55:42:
aa:15:5b:e1:9e:18:89:7f:a0:3e:fe:93:51:22:2f:54:be:d6:
8d:71:1e:6b:53:0d:dc:c7:7a:d8:7f:8b:4b:f1:9f:c2:29:f7:
3b:8f:a6:05:34:fa:67:e8:d5:a5:76:1b:11:b3:b5:04:fc:93:
35:c6:81:dc:81:23:81:5a:07:14:6e:a2:b4:64:1e:5d:c9:ef:
ef:5f:2a:8b:e2:3f:b7:09:35:59:9a:96:49:d1:34:fd:40:d0:
1a:e4:f7:0a:13:50:17:d6:81:cb:e3:b5:3a:42:47:f2:3d:48:
e2:02:77:6c:fe:2a:09:ba:63:6b:6f:a1:3c:51:bc:9a:4e:9d:
a7:fd:69:39:f7:9f:33:de:57:dc:50:98:c1:d8:79:be:a0:d6:
79:35:6b:3f:c5:52:0e:b0:91:12:20:0c:7a:a1:82:cd:c2:d9:
6a:40:d0:a6:a5:ac:e6:81:1a:44:4f:99:45:89:07:2a:82:de:
71:4c:7a:d4:d4:70:df:51:28:42:02:9d:51:df:58:28:7a:ce:
58:1f:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:24 2026 by rpki-client