Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: Dhjdt9t0/8A23jsV2M+NyOEa9xG0J3NynJtytJ0DYn0=
Subject key identifier: 0E:20:B6:F0:82:43:1A:E8:76:44:B3:35:6A:5E:D3:27:BF:31:1A:3F
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 019D37C008ACAC69CF0789EB1FFBB8489264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: 3dQvWaK+V/gk8W2oQYlPJN5BYb2pvrakYmNy3YrNY2E=)
2: omCKLPBL-sX0T1F0arfYXvQOCR0.roa (hash: Y7NRh10SXgE8EspE8su8BnYaod8821/L39MdUhs+QAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:08:ac:ac:69:cf:07:89:eb:1f:fb:b8:48:92:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=0e20b6f082431ae87644b3356a5ed327bf311a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:85:49:a9:f8:97:cf:a9:50:07:24:0a:19:
70:cc:c7:9d:e1:03:7c:9b:d5:9d:ec:02:80:75:90:
9f:e8:83:97:77:c9:c6:a8:17:d7:2b:77:64:cf:61:
60:ae:e8:a0:44:93:96:f2:db:00:b0:a8:bb:f1:23:
e2:e6:5f:3b:a6:b3:98:38:75:8f:6c:31:ac:d1:11:
19:91:fe:2a:e0:1c:9f:a4:39:7b:98:1b:af:c6:1b:
b1:90:d7:e9:3e:02:3a:9e:c2:42:52:50:e6:be:db:
27:b8:e9:55:2b:97:53:14:b3:32:56:50:33:81:08:
b3:77:43:07:5e:fd:10:f2:8e:a6:b8:40:5d:e2:3a:
b3:89:ad:06:53:e8:d3:31:e6:eb:01:b2:47:9f:e8:
db:47:7d:a3:71:ff:af:e3:83:b7:56:e6:4c:b2:0f:
53:2e:af:21:b2:dd:62:64:b5:fc:05:7c:f5:0b:16:
35:67:c0:d5:77:f1:df:bc:21:c5:14:a2:9c:5b:4d:
81:2a:68:7f:60:62:85:5f:51:20:60:87:da:e2:08:
96:0e:ea:7e:3b:0e:3f:f1:c7:ac:9d:09:a8:f0:06:
d6:79:42:f5:2c:26:4b:15:f6:48:23:7c:5b:90:ba:
92:0d:0e:54:81:b4:6c:54:6d:ca:55:fd:57:26:18:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:B6:F0:82:43:1A:E8:76:44:B3:35:6A:5E:D3:27:BF:31:1A:3F
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:aa:e3:58:85:91:37:f8:03:27:d3:3a:4c:cc:c3:5d:27:bb:
fd:81:4e:3f:4d:00:d8:5f:b5:58:6b:5c:32:2c:7d:19:20:80:
ef:94:a3:ac:29:2a:a5:e4:46:dd:e5:8f:b3:fd:1f:ef:7b:20:
d9:ae:cf:37:54:15:21:68:1a:78:b7:c0:d9:74:7d:d2:34:6b:
03:05:51:fd:60:47:ee:5d:a2:04:d2:75:3f:5d:3a:99:e5:68:
eb:15:50:a1:e8:f4:70:ee:af:c7:cb:34:5a:aa:ae:04:21:b1:
c4:73:79:96:f2:01:90:ba:93:52:9d:df:40:91:82:77:73:c2:
8e:b8:ec:11:79:1d:32:f5:dc:9d:13:40:30:37:dc:c0:1d:c7:
45:ce:d9:b6:95:b8:c9:60:c7:31:f5:fe:a0:09:5b:a1:22:e3:
4a:0e:53:03:ff:20:bf:3c:f5:ed:67:31:c1:6c:8b:89:9f:3e:
56:c8:96:09:f1:d5:4a:ab:37:77:87:4d:3c:05:1b:11:91:05:
3b:ea:55:cd:d4:b4:f0:22:0d:47:76:a3:df:b0:66:94:29:d3:
bd:cb:2f:c1:db:9c:24:dd:f1:5c:21:4a:e1:d8:8c:40:ea:0e:
f9:6b:84:31:0e:3a:e3:6d:b8:da:ab:e2:86:94:d5:79:2f:18:
01:e6:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client