Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: lUHwzmZUUBZnwj+9mJDssf3AQsd6mpko1PLhxFlIv8I=
Subject key identifier: ED:23:D3:DE:9E:71:DE:2D:5B:A4:06:E9:DD:18:83:76:AC:96:54:9A
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 01A08942D7EBB3770D82D0B461D5ECBA3832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 1482
Signing time: Thu 10 Sep 2026 03:00:54 +0000
Manifest this update: Thu 10 Sep 2026 03:00:54 +0000
Manifest next update: Fri 11 Sep 2026 03:00:54 +0000
Files and hashes: 1: 9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa (hash: nTZbJQLNFOotBjznpph2w+kxtUo4D9XsbLL1i612LtY=)
2: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: Fl2No/3oTd6wuYwXtEaGc1ZQn9zGSrAilhwg8QPbZVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:d7:eb:b3:77:0d:82:d0:b4:61:d5:ec:ba:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Sep 10 03:00:54 2026 GMT
Not After : Sep 11 03:00:54 2026 GMT
Subject: CN=ed23d3de9e71de2d5ba406e9dd188376ac96549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:5e:fe:ca:db:93:6c:d8:f2:34:9f:31:40:
df:c1:a5:42:a3:2b:6f:e0:6b:be:76:ea:0a:af:de:
6a:84:01:a7:2d:61:6c:a8:74:b3:25:88:4a:91:e0:
14:cb:3f:65:58:31:63:e0:7d:84:c2:d8:ba:e6:ee:
69:18:8f:7f:92:6e:c2:44:22:5a:9e:9b:b8:aa:3d:
db:d3:7f:f3:a0:46:d6:55:c9:17:76:df:93:45:7a:
90:8e:7f:70:24:22:ac:12:19:0f:01:f3:cb:17:46:
78:04:f0:08:fd:48:5f:c0:87:1a:7c:47:53:58:23:
3f:c3:97:4a:91:ed:7d:8c:65:c4:c9:b7:fa:01:e0:
66:a9:c4:d0:cd:af:c6:e2:f7:80:b8:e5:0b:c1:57:
b9:ab:d8:c3:1c:1c:c6:e9:aa:91:b6:98:64:1f:98:
f1:c1:e8:11:15:d4:fc:69:74:8c:41:77:fc:be:05:
95:f2:6f:4b:89:a5:cc:d6:a7:d3:ff:e7:e0:87:96:
22:fa:58:2f:30:26:47:13:d2:0d:9f:f3:8e:ee:e1:
ba:e4:e5:e8:fd:39:52:c1:15:6b:53:c4:ac:42:c4:
b5:48:eb:67:49:68:fa:69:7b:7e:2f:af:99:8f:ea:
55:a9:f6:ea:65:5a:eb:f3:c3:a0:eb:7a:55:07:28:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:D3:DE:9E:71:DE:2D:5B:A4:06:E9:DD:18:83:76:AC:96:54:9A
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:14:87:55:6b:16:42:60:9e:81:41:c1:55:ce:df:8b:30:51:
d6:70:4a:c1:59:d3:33:84:a6:2a:83:28:bd:68:e8:49:e0:58:
45:8e:c2:9b:05:79:bb:6b:ea:73:15:ca:eb:bf:65:33:d4:9a:
4e:3f:e0:95:da:a7:5c:8d:dd:5a:c1:9b:70:7a:6f:58:7c:86:
21:a0:08:b5:31:d9:ec:e6:8b:13:08:21:7d:21:64:2f:8d:b4:
cd:c6:32:dc:0f:c2:5f:21:d5:c8:cf:19:b0:7e:6d:c6:a9:8b:
0f:a1:18:41:29:d9:91:fb:f7:b3:20:d8:8a:51:2d:be:d8:27:
50:4f:66:9d:9f:7a:94:e3:d7:68:47:f9:48:02:ea:6f:95:07:
9f:32:cf:3a:3b:25:be:13:28:51:bc:ce:82:e2:09:2f:bf:39:
2b:a2:f5:46:08:3a:8f:56:1e:67:e7:4b:e2:1a:fc:62:44:d0:
18:ba:04:41:fb:62:78:ae:bf:97:8f:72:0b:cd:7d:f9:b5:80:
cc:55:35:08:64:83:e0:a3:b1:c1:e3:80:88:aa:18:02:0f:ac:
c4:48:e4:59:1f:9d:ec:c9:04:f5:2b:a3:df:e4:c7:fc:9d:96:
0b:a0:a1:13:96:4d:15:13:43:80:f6:4d:b1:1e:99:3c:1a:df:
46:1f:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:25 2026 by rpki-client