Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: Q9TVomDkYrAi2bIryU2eGInnyZNTvdqm9OXHqqXuwOg=
Subject key identifier: 81:23:6B:76:C3:E5:53:B4:BE:8E:CD:A2:C9:D0:3B:22:72:5C:CC:E0
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 01A1852D600A53C6184C3FB8778F6EA0BF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0F21
Signing time: Thu 29 Oct 2026 01:01:45 +0000
Manifest this update: Thu 29 Oct 2026 01:01:45 +0000
Manifest next update: Fri 30 Oct 2026 01:01:45 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: SIbyP+D/kRE5p99Eyu1LNyeoowjGfxmjo414teaCTUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2d:60:0a:53:c6:18:4c:3f:b8:77:8f:6e:a0:bf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Oct 29 01:01:45 2026 GMT
Not After : Oct 30 01:01:45 2026 GMT
Subject: CN=81236b76c3e553b4be8ecda2c9d03b22725ccce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:97:b5:c5:f7:86:e6:d8:ff:29:ae:9f:e7:
dc:f6:8f:74:e7:10:6b:03:e4:da:b9:24:28:91:80:
ab:8b:1c:03:97:81:b9:df:2a:d6:df:c3:63:d0:ff:
b5:31:4c:65:f9:2d:1b:c6:a1:32:de:92:4d:63:b5:
95:80:8c:ab:d5:07:63:08:44:2f:a4:a0:79:39:c6:
61:2f:7f:70:8d:dd:42:99:76:c5:8f:b5:9a:b7:b7:
7e:ab:ad:96:1b:11:41:31:43:87:bc:91:8b:49:7b:
53:31:11:44:2a:52:e2:a2:7f:19:f2:d8:41:7c:0a:
aa:a0:e9:f0:64:21:97:ad:60:0b:14:e8:e3:14:7a:
bc:34:a1:36:ce:17:15:bd:41:34:8c:36:ef:18:c4:
ff:53:8c:66:fa:cf:1b:38:aa:92:bd:42:8e:57:2e:
5a:7a:29:46:78:75:9e:3e:e5:d3:31:d9:d4:9c:76:
e0:3f:29:ca:9f:d2:27:cd:39:52:41:c8:5b:d4:53:
a2:be:f1:07:a3:44:3a:c5:62:dd:72:ce:e6:fb:07:
5e:03:d6:cd:5b:02:88:3d:8a:68:07:59:e1:2c:47:
5d:66:72:38:5a:c9:59:70:5b:88:1c:1c:81:a3:8c:
b6:3f:47:e9:a3:4c:e2:da:97:5f:37:03:1d:18:70:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:6B:76:C3:E5:53:B4:BE:8E:CD:A2:C9:D0:3B:22:72:5C:CC:E0
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:2f:d9:32:a4:9b:36:90:13:08:76:27:8a:89:d1:8b:74:
3b:1e:b8:4a:63:36:6d:d1:25:8b:e4:64:14:26:94:e4:51:81:
5d:e0:e1:f7:dd:60:d7:94:9c:7f:95:96:15:5f:88:d1:21:a5:
b5:83:0f:ce:62:7e:ad:ab:58:7b:00:21:67:dc:1a:68:f2:15:
5f:d8:7c:f2:0f:31:64:87:f6:aa:0e:15:4d:15:27:ae:40:ca:
96:85:ba:12:33:10:38:df:d9:b1:1e:27:87:7a:4f:c2:80:f6:
d9:71:de:2d:e4:2e:20:8c:2e:4e:ed:a9:04:ae:ea:67:a0:25:
ae:ec:3d:a7:cb:66:4e:90:3f:f3:6d:9d:69:fd:78:1f:96:f2:
a1:fb:20:8c:cc:40:bc:c2:c5:d9:08:23:b1:0e:94:5f:fa:9a:
0f:67:84:c8:a5:1d:f8:5e:08:7b:b8:36:f5:5a:24:9a:eb:2f:
bd:85:40:0f:12:f0:b3:7d:0a:38:b5:ef:ee:80:92:58:c7:f7:
e1:cd:d3:6e:a9:07:da:1b:65:27:8e:1d:0a:32:14:fd:0e:1f:
35:a4:a2:39:0d:e8:a5:c9:59:79:ef:44:55:52:1a:d1:17:1f:
4f:df:63:f3:c3:b3:94:76:1f:25:16:07:d9:f2:7c:9c:87:20:
0e:46:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:38:00 2026 by rpki-client