Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: DeozUwF5mIonzeVRVqyU8C4eAybz+6VhqnCx+Jxkb4s=
Subject key identifier: 7A:B7:87:07:5C:13:68:64:26:9C:59:19:C0:BC:F6:F1:B6:92:6F:C7
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 019E909339B3B0227DBDCFAD003575E7E84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0AC5
Signing time: Thu 04 Jun 2026 03:00:28 +0000
Manifest this update: Thu 04 Jun 2026 03:00:28 +0000
Manifest next update: Fri 05 Jun 2026 03:00:28 +0000
Files and hashes: 1: 1iXcw_VtwzC503OBHl7UPQ9wk40.roa (hash: 5en0UIq6KKHB2vB53mKduFH/pH1FkmbIGnryOKNRjmw=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: YL6e5xqD3F4OfbEu5MeC2vZHZC4+zayD2eMB1nyR7e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:39:b3:b0:22:7d:bd:cf:ad:00:35:75:e7:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Jun 4 03:00:28 2026 GMT
Not After : Jun 5 03:00:28 2026 GMT
Subject: CN=7ab787075c136864269c5919c0bcf6f1b6926fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:07:c5:a7:b8:a7:42:c9:13:e7:b4:59:76:
1b:96:dd:bd:f9:63:ef:a9:7d:b7:41:70:3c:2e:ec:
ce:a3:6a:09:98:15:51:29:b7:5f:79:d4:31:6a:0c:
f6:23:88:d4:a8:ed:34:e0:18:24:99:ac:51:b5:39:
e6:b4:0d:dc:00:6f:58:99:4f:11:16:90:42:0e:10:
74:a9:73:04:ce:26:74:71:44:7a:bf:fb:5b:de:3f:
18:5a:47:f9:37:a3:af:66:da:16:0e:63:3a:18:5e:
bf:ae:3a:aa:25:99:11:79:79:c4:0f:a7:71:f4:f1:
24:e8:27:eb:fc:29:94:a6:28:30:a7:4f:70:f7:87:
80:89:df:26:73:c5:9a:de:a2:54:3c:78:d9:52:30:
e7:f2:61:d6:45:aa:46:87:a8:ed:af:ab:30:f1:ad:
ee:96:77:7a:26:a7:06:0e:f9:2c:62:90:41:c9:22:
31:4b:1e:c5:4f:43:dd:af:02:3f:1e:54:74:d7:1b:
39:2b:8e:88:41:70:36:27:06:9c:e7:cd:82:58:e6:
2a:6c:3b:07:97:c8:62:61:c2:cf:b7:2c:29:f8:7f:
dd:f0:49:c3:9a:b3:7e:ee:f6:4f:aa:2c:54:46:57:
00:40:6a:3a:c4:0c:64:fa:85:0a:0f:08:19:59:45:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:87:07:5C:13:68:64:26:9C:59:19:C0:BC:F6:F1:B6:92:6F:C7
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b0:67:93:08:fd:49:60:28:3f:28:e9:54:f2:ef:a8:af:b9:
c5:20:60:3f:72:21:84:89:e4:92:41:82:e0:c4:01:80:51:b6:
12:e3:b2:9a:ba:71:81:fa:3a:5c:0f:43:53:97:4c:ed:00:58:
71:e2:f9:17:fc:d7:99:6f:a5:1e:9d:66:29:7f:ee:df:53:15:
16:0e:33:da:c7:6f:bd:6e:eb:a7:66:0d:1a:df:59:e3:eb:57:
19:f6:f6:26:60:4d:15:d1:c4:c3:99:09:e0:24:e4:5b:1a:d1:
0d:c0:20:82:6c:68:59:80:9f:f8:bc:0a:dc:8a:62:8a:8e:6e:
47:a0:7e:b3:f2:72:29:08:42:2a:79:c6:e8:c1:c6:d5:1e:42:
6a:47:05:c4:fa:ad:fd:38:33:b5:47:a4:14:a1:7d:70:4a:00:
29:db:5c:90:82:24:e3:af:ea:3d:13:45:30:d2:49:b6:80:92:
0d:52:07:3f:c8:fd:97:6c:85:97:08:b7:be:d0:0b:26:7b:fe:
8d:29:0a:e4:22:11:8a:22:85:be:c9:16:8b:0b:b4:31:20:69:
47:ac:ca:0d:82:14:4c:91:9f:2c:78:00:7d:9c:73:b1:29:f8:
0e:f4:3b:76:bb:d5:91:73:11:26:5a:eb:12:90:a3:4b:22:29:
e4:18:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:15:27 2026 by rpki-client