
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
File: IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json)
Hash identifier: 2RTaAPz+cHI35eOSxoHWHSp4G7TQjEGg5Ul0iQe7PiM=
Subject key identifier: 34:7A:B6:DC:D1:DB:7F:56:6A:16:2B:24:36:A5:33:6A:AA:80:81:B1
Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
Certificate issuer: /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Certificate serial: 019D39418FB1DFBFE39DB0AFF494A6391594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
Manifest number: 01CC
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: FFX+NtRsY++L3dlKAizsnq3YD4eDikoKyYbpsxkILUs=)
2: __gU18kn96xEQP-dgqv4pCY4F3M.roa (hash: iyyh1hfdSStH6dbQTlmWYSXkFzAYSbU1VEOsURfS4Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:b1:df:bf:e3:9d:b0:af:f4:94:a6:39:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=347ab6dcd1db7f566a162b2436a5336aaa8081b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:e7:ec:38:cb:7d:4b:81:c7:dc:89:2b:8e:
70:87:45:d7:6d:d5:93:c9:51:2e:ae:f2:7a:2f:e8:
10:5a:3e:e5:09:41:e2:42:b4:1e:17:78:6b:d4:9a:
7a:25:1a:bd:5c:ed:03:69:f5:5b:d2:dc:58:a4:40:
b8:c7:4d:77:50:3c:cc:16:a4:29:d3:e5:06:42:bc:
e7:74:6a:85:0b:87:75:28:72:d2:f6:77:ac:a6:ae:
7a:71:ca:67:74:de:d0:26:5a:96:ac:46:37:30:eb:
60:8f:05:01:05:b2:95:4c:1e:ce:01:e9:16:90:ab:
29:a7:e8:75:72:09:7f:d0:b3:9a:53:ed:83:7a:d4:
3d:b8:fc:39:8b:ff:82:1d:bf:94:ae:3b:5c:68:1f:
73:82:f1:9a:7a:9e:50:7a:03:47:7c:4b:5e:8a:8a:
60:c1:e6:5d:91:69:7b:11:23:68:99:40:c3:f4:d4:
97:67:d2:ea:14:e4:3d:93:c1:95:c8:27:95:80:8c:
20:ee:93:83:b1:e3:9f:40:22:7e:10:9c:71:fd:2d:
d9:fe:33:60:ef:38:8a:42:32:3f:b2:10:f6:5d:6f:
ec:ff:d7:da:85:22:34:d4:c5:45:5e:5f:35:50:b4:
8f:99:5f:98:67:17:47:e8:b6:38:16:d1:04:4f:7b:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:B6:DC:D1:DB:7F:56:6A:16:2B:24:36:A5:33:6A:AA:80:81:B1
X509v3 Authority Key Identifier:
keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:8b:74:8d:bf:65:f4:bb:b3:23:5c:f8:33:f2:3e:0d:99:
4e:12:d0:0b:22:1b:cc:1b:74:8b:d7:e6:21:bf:97:01:a1:71:
c9:1c:e0:26:5b:02:08:76:9c:3b:3f:2d:03:02:48:95:b8:5b:
f9:e4:43:0d:d6:bb:0c:ea:09:3a:45:b3:6b:07:0a:cb:7e:fa:
63:8d:d6:88:13:19:30:30:c2:db:02:f6:95:3f:9e:9e:3b:bb:
fa:8e:a4:69:d7:07:51:f7:73:b0:69:70:4c:76:f9:57:af:07:
60:17:79:e3:4d:98:c3:16:dd:a2:03:8d:a6:63:e8:fb:c4:b9:
ba:3c:45:eb:a7:6a:68:cb:75:2b:a5:b1:ba:ba:b7:68:24:38:
ae:29:ee:00:03:09:11:4e:db:05:bf:8a:05:5e:58:28:9d:69:
24:b0:43:22:2f:9f:5c:15:10:e2:bb:ba:0f:65:ff:30:74:52:
e8:a1:21:17:4e:48:5e:50:f3:fc:71:8f:d8:97:10:7e:e4:21:
8a:39:1a:18:7a:e8:7a:38:3a:9e:bf:5a:ff:1e:94:29:54:e8:
e0:14:16:d8:28:f9:d5:4e:ea:4e:66:71:6b:81:01:e7:f4:24:
8a:2f:0e:6a:80:1a:66:23:48:06:a0:67:72:cf:35:b9:cc:c2:
20:41:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:30 2026 by rpki-client