Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: lP/zyLcRL2CquHWWu6NebOAY3Ka61eDbF2zNwmwBv24=
Subject key identifier: 34:88:AA:E7:76:1C:0B:06:DD:71:A5:D8:50:15:A6:E0:10:93:D8:58
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019DD0F676ECA5D7105BA61B84584280506F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0D36
Signing time: Mon 27 Apr 2026 22:01:46 +0000
Manifest this update: Mon 27 Apr 2026 22:01:46 +0000
Manifest next update: Tue 28 Apr 2026 22:01:46 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: 4FfZ4iV75UHTKGq6uaRNZg/uDkGjCYwfGyPgfy0K7qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f6:76:ec:a5:d7:10:5b:a6:1b:84:58:42:80:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Apr 27 22:01:46 2026 GMT
Not After : Apr 28 22:01:46 2026 GMT
Subject: CN=3488aae7761c0b06dd71a5d85015a6e01093d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:0e:f6:47:94:54:67:a7:58:71:e6:3d:00:
b4:80:38:11:e9:92:ef:61:7f:4e:b3:ab:69:8f:b8:
bf:b9:f8:cf:9b:47:eb:cd:b3:ed:34:26:c6:b1:71:
e7:45:75:ba:bf:2e:70:16:bd:5f:69:03:33:70:bd:
37:6f:ce:15:34:38:3e:c3:2c:e6:17:29:c1:77:95:
2c:6f:c0:f2:82:59:9e:71:47:6e:4f:bc:a6:9d:83:
61:98:6a:0c:88:5d:18:66:82:08:1f:8b:ba:0d:e5:
b1:0e:d4:9d:a8:96:7e:5e:91:5c:33:26:d4:c9:b1:
a8:98:be:3b:9b:42:47:f3:4e:f9:34:8e:5e:da:1c:
87:a1:42:1e:9d:6c:c7:a2:28:d8:94:df:d0:47:87:
7e:f0:81:33:ad:46:a4:ad:7a:36:9a:ca:7c:15:f1:
92:d1:08:fe:e5:7f:58:8c:66:aa:6c:c7:98:3a:ae:
be:35:cb:66:ae:28:e8:b6:d3:62:b1:4d:35:27:a6:
aa:ca:6a:9f:03:0d:d2:03:4a:b3:55:4f:30:72:2d:
95:72:b9:94:e2:55:ff:4f:41:b1:98:1d:d7:64:4e:
d6:a5:3d:42:d9:28:ef:5f:a0:46:b9:7b:a1:99:fd:
a4:5b:ca:8d:b7:68:c5:82:51:54:17:09:b3:1c:1e:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:AA:E7:76:1C:0B:06:DD:71:A5:D8:50:15:A6:E0:10:93:D8:58
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:56:13:a3:cf:fe:ef:18:1f:98:fd:10:fe:71:7b:77:ce:
ed:6f:3e:74:c5:0c:7c:b0:1b:3a:b3:81:10:4d:ae:80:f8:e2:
0d:f6:29:d2:20:80:e0:da:06:d3:9d:10:30:63:87:7a:7c:a9:
ca:bf:bd:6b:df:67:c4:c7:2d:a2:69:8b:85:6b:39:da:2d:cd:
be:af:67:02:75:cd:13:7d:ec:b3:f1:00:99:88:3e:c4:20:3e:
c6:be:b1:92:06:62:fd:b6:6a:53:50:5c:73:0d:0f:81:e6:d4:
a7:f0:fc:45:ed:d5:4b:c8:a3:83:b3:c3:45:ec:21:a5:00:35:
7a:ef:75:10:8d:08:dd:08:d2:45:8a:a4:5e:f0:49:5e:2c:ca:
99:dc:ae:86:a9:f2:6c:4d:59:98:6a:f1:4f:84:f8:d4:96:46:
56:11:cf:d9:13:ed:60:bc:02:46:cc:3d:e2:07:50:40:0d:b1:
83:ae:dd:fc:2b:c9:b0:f5:df:c6:e1:b0:88:5c:87:9f:33:fd:
40:3b:2a:d0:65:a6:ee:5d:e4:c5:83:82:99:fa:1e:a6:0c:68:
b3:9e:8a:6b:23:50:17:ff:e4:2a:a6:b0:3f:3b:13:93:75:b7:
08:bc:50:f9:76:81:58:9a:55:ef:83:f7:a3:9e:e8:a8:22:05:
6a:9c:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:46 2026 by rpki-client