Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
File: irxd5yn5l1idW-dpw3gkL3VFu4o.mft (raw, json)
Hash identifier: hx4QibaFRPjIIuS1kVOUh3q/lEDSc3iQsiJXyqdXMLY=
Subject key identifier: 7A:4D:F9:27:E0:6A:B9:F0:74:87:DF:FE:3A:E3:57:06:8D:66:56:D4
Authority key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
Certificate issuer: /CN=8abc5de729f997589d5be769c378242f7545bb8a
Certificate serial: 019D3865C9392B21B151C1BB6FA540CBC4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
Manifest number: 01CD
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: irxd5yn5l1idW-dpw3gkL3VFu4o.crl (hash: fD+C4+jAOCtydh6FKK6hGQlN4bgP2xHwPaz9UuFQ/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c9:39:2b:21:b1:51:c1:bb:6f:a5:40:cb:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc5de729f997589d5be769c378242f7545bb8a
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=7a4df927e06ab9f07487dffe3ae357068d6656d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:d8:51:1c:96:96:0f:b7:88:3c:1e:b3:16:
56:41:43:94:0e:7f:1d:3e:68:0b:b2:88:76:d2:d9:
e6:bc:89:42:e2:98:60:c8:c6:f2:37:9e:e2:0c:af:
dd:79:7b:ff:66:00:63:d2:61:5b:90:a8:89:ea:05:
1e:09:fc:8a:46:cb:b6:05:e1:fa:33:09:b8:45:84:
5e:71:4e:5d:c5:b7:89:86:62:f3:a2:2b:90:38:ad:
59:a0:58:a7:73:ef:7c:8f:81:c0:20:45:59:12:65:
23:af:d6:2a:ff:ff:da:82:c9:bb:d8:c6:37:3a:1f:
7a:6b:7e:ca:59:32:99:1c:cd:fe:a8:65:0f:a7:31:
90:ad:0b:1c:3c:85:76:e2:d3:1b:b7:b5:4b:14:a0:
95:db:c8:f9:dd:a7:03:c3:c4:ef:ce:82:9e:66:b2:
27:53:b1:55:71:c0:2c:6b:f0:33:d5:aa:5b:24:f1:
2c:e2:7f:1a:ad:8a:9c:f6:df:b3:cf:29:0e:22:c4:
02:35:02:b6:8e:4a:7c:8e:1c:93:69:50:aa:76:ab:
c0:8a:80:d9:68:78:11:dc:25:19:4e:99:e1:b2:b4:
1d:ae:1a:bd:75:9c:93:70:cf:f0:bb:6d:12:19:4e:
98:c3:af:42:17:a1:f2:8b:df:7f:82:aa:8b:37:84:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:F9:27:E0:6A:B9:F0:74:87:DF:FE:3A:E3:57:06:8D:66:56:D4
X509v3 Authority Key Identifier:
keyid:8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:d4:17:e9:66:16:22:4b:5e:d3:52:6a:8b:c5:b8:33:34:
e6:04:46:da:3f:10:9d:db:89:2a:50:e2:4e:5a:ed:73:9a:0e:
6c:51:81:b9:f1:3b:1f:a3:7b:ae:ff:0b:05:43:f3:62:07:6f:
9f:1c:df:b1:39:fd:08:b0:7e:dc:5f:af:c5:fe:2d:d1:01:99:
12:e6:78:74:98:66:54:31:e5:8b:0f:94:73:b7:a2:ac:6e:0d:
e6:4a:23:2f:c5:f5:58:22:dc:16:f2:07:ce:fa:76:10:e6:b4:
5d:ba:bc:3b:05:6c:b4:aa:59:8b:f0:2b:ea:20:ab:8a:68:d3:
00:43:f7:f9:ca:d1:27:7e:96:3d:ea:7b:e0:d3:57:02:d4:ff:
f6:e9:ab:7b:7c:10:03:d1:5f:60:ad:31:84:c5:de:b4:44:ce:
cf:15:58:91:03:94:c1:9b:31:c8:40:de:d4:e7:5d:d8:a4:bc:
ec:47:da:a2:47:50:9b:2a:da:67:3b:5b:4f:6f:4f:80:56:17:
0d:59:5a:6f:5a:68:5d:be:9b:90:47:02:06:a8:fd:b7:55:4d:
9a:ea:60:9d:ea:af:92:65:61:d6:95:44:c5:47:56:3b:0e:a2:
24:f9:eb:d2:b9:d3:d1:02:5e:f8:48:d6:61:86:b7:78:a9:23:
1d:69:35:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zck5KyGxUcG7b6VAy8TYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmM1ZGU3MjlmOTk3NTg5ZDViZTc2OWMzNzgyNDJmNzU0
NWJiOGEwHhcNMjYwMzI5MDcwMTI3WhcNMjYwMzMwMDcwMTI3WjAzMTEwLwYDVQQD
Eyg3YTRkZjkyN2UwNmFiOWYwNzQ4N2RmZmUzYWUzNTcwNjhkNjY1NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq13YURyWlg+3iDwesxZWQUOUDn8d
PmgLsoh20tnmvIlC4phgyMbyN57iDK/deXv/ZgBj0mFbkKiJ6gUeCfyKRsu2BeH6
Mwm4RYRecU5dxbeJhmLzoiuQOK1ZoFinc+98j4HAIEVZEmUjr9Yq///agsm72MY3
Oh96a37KWTKZHM3+qGUPpzGQrQscPIV24tMbt7VLFKCV28j53acDw8TvzoKeZrIn
U7FVccAsa/Az1apbJPEs4n8arYqc9t+zzykOIsQCNQK2jkp8jhyTaVCqdqvAioDZ
aHgR3CUZTpnhsrQdrhq9dZyTcM/wu20SGU6Yw69CF6Hyi99/gqqLN4Qn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpN+SfgarnwdIff/jrjVwaNZlbUMB8GA1UdIwQY
MBaAFIq8Xecp+ZdYnVvnacN4JC91RbuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDct
N2VkM2I5MTg1OTkwLzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDctN2VkM2I5MTg1OTkw
LzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKXUF+lm
FiJLXtNSaovFuDM05gRG2j8QnduJKlDiTlrtc5oObFGBufE7H6N7rv8LBUPzYgdv
nxzfsTn9CLB+3F+vxf4t0QGZEuZ4dJhmVDHliw+Uc7eirG4N5kojL8X1WCLcFvIH
zvp2EOa0Xbq8OwVstKpZi/Ar6iCrimjTAEP3+crRJ36WPep74NNXAtT/9umre3wQ
A9FfYK0xhMXetETOzxVYkQOUwZsxyEDe1Odd2KS87EfaokdQmyraZztbT29PgFYX
DVlab1poXb6bkEcCBqj9t1VNmupgneqvkmVh1pVExUdWOw6iJPnr0rnT0QJe+EjW
YYa3eKkjHWk15Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:22 2026 by rpki-client