Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: DUja2/6aW7R+1dmJ32rfR6TvC6sxmAUC51+XpzoLQao=
Subject key identifier: CE:7D:60:EA:B3:8C:6F:88:CC:01:94:24:E2:35:B4:94:2D:C1:11:A9
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019EB8B44E18FD743B0BD572FADCADC4CEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0DAE
Signing time: Thu 11 Jun 2026 22:01:24 +0000
Manifest this update: Thu 11 Jun 2026 22:01:24 +0000
Manifest next update: Fri 12 Jun 2026 22:01:24 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: iGCNrEalAFUIFmGsg/OwcZb38lonrsQh72061VJbchg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:4e:18:fd:74:3b:0b:d5:72:fa:dc:ad:c4:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jun 11 22:01:24 2026 GMT
Not After : Jun 12 22:01:24 2026 GMT
Subject: CN=ce7d60eab38c6f88cc019424e235b4942dc111a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:07:67:22:f9:4b:3d:35:fd:06:61:c2:30:
9d:f2:cc:55:4c:46:2f:1e:d9:2d:c7:96:aa:8c:42:
70:40:0c:2e:b0:b1:2a:fd:cc:fb:74:d0:a9:a7:75:
d1:5e:67:9e:93:e0:32:ef:5b:9e:0d:5c:90:45:03:
d0:02:10:25:c0:b9:62:c9:fe:05:0d:5b:70:50:68:
2a:10:3e:92:27:cb:5f:20:20:8c:18:fe:2e:0b:1f:
5d:3c:b9:db:a1:7b:0c:5a:f4:b5:14:4b:ac:1d:d8:
ae:bd:88:64:59:95:30:40:dc:9b:43:52:38:40:54:
3b:aa:82:ac:df:87:73:e6:21:73:9c:71:9b:bf:27:
bd:a7:59:53:90:4c:88:98:e8:7b:aa:a3:8e:72:be:
14:c7:2f:78:5b:6c:50:c3:fe:13:2c:42:19:6f:f5:
22:46:dc:ba:00:a7:0d:77:0c:8e:9d:8c:bb:19:89:
5b:f0:0a:f1:e3:a0:6e:9d:05:9f:c9:2e:33:2f:ea:
82:49:5b:44:f1:df:1b:32:c7:72:70:d7:71:91:c9:
0c:a8:d9:5e:89:8f:8c:f8:01:24:f4:03:b5:38:e3:
dc:89:0e:6b:f8:ff:eb:d4:1c:5a:82:86:0c:9f:d3:
37:e2:41:66:22:0e:63:86:3c:83:8c:28:5d:93:9a:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:60:EA:B3:8C:6F:88:CC:01:94:24:E2:35:B4:94:2D:C1:11:A9
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:51:e2:1b:68:a2:36:39:00:f6:ec:ae:ab:84:fd:ce:dd:a3:
9e:37:38:d5:47:12:d8:16:4e:43:cb:c1:fc:84:34:e5:22:61:
48:86:75:b1:b0:77:72:af:ea:17:fc:dd:69:6a:44:25:c0:70:
9b:8d:d3:12:42:22:c9:53:f1:c4:b5:03:7c:5b:b5:f2:42:40:
6c:43:fc:71:e5:5d:4c:a0:f7:f0:1e:e5:ef:58:14:b3:f6:93:
70:11:3b:4d:f6:69:06:8b:2e:d5:c7:73:bc:da:e8:12:15:68:
f2:f4:f9:96:95:d7:4d:2d:bf:e3:9d:53:29:20:d8:10:e9:db:
47:40:9a:4f:6f:ab:6e:67:d2:f9:2b:f8:58:b5:8c:27:e3:c8:
2b:6d:83:61:ad:18:6c:1d:4f:d5:f4:c1:ad:c1:14:8f:e6:1d:
91:84:83:c3:a8:da:d8:c8:b2:da:b8:75:d2:9e:32:53:7b:9f:
7c:06:08:43:3f:75:88:fd:4d:c9:b7:c0:7f:53:10:54:a1:64:
cb:d9:ff:76:9b:9b:9c:51:78:a0:98:88:3b:54:d1:7f:64:bb:
fa:2d:f2:86:22:0f:82:72:38:14:5e:e8:e3:29:ec:fc:a1:24:
af:63:19:e5:db:c0:15:96:61:6f:3a:cf:df:12:e6:e4:95:b6:
28:48:81:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tE4Y/XQ7C9Vy+tytxM7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4
NmY1MWEwHhcNMjYwNjExMjIwMTI0WhcNMjYwNjEyMjIwMTI0WjAzMTEwLwYDVQQD
EyhjZTdkNjBlYWIzOGM2Zjg4Y2MwMTk0MjRlMjM1YjQ5NDJkYzExMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRsHZyL5Sz01/QZhwjCd8sxVTEYv
Htktx5aqjEJwQAwusLEq/cz7dNCpp3XRXmeek+Ay71ueDVyQRQPQAhAlwLliyf4F
DVtwUGgqED6SJ8tfICCMGP4uCx9dPLnboXsMWvS1FEusHdiuvYhkWZUwQNybQ1I4
QFQ7qoKs34dz5iFznHGbvye9p1lTkEyImOh7qqOOcr4Uxy94W2xQw/4TLEIZb/Ui
Rty6AKcNdwyOnYy7GYlb8Arx46BunQWfyS4zL+qCSVtE8d8bMsdycNdxkckMqNle
iY+M+AEk9AO1OOPciQ5r+P/r1BxagoYMn9M34kFmIg5jhjyDjChdk5qiEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM59YOqzjG+IzAGUJOI1tJQtwRGpMB8GA1UdIwQY
MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct
MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj
LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1HiG2ii
NjkA9uyuq4T9zt2jnjc41UcS2BZOQ8vB/IQ05SJhSIZ1sbB3cq/qF/zdaWpEJcBw
m43TEkIiyVPxxLUDfFu18kJAbEP8ceVdTKD38B7l71gUs/aTcBE7TfZpBosu1cdz
vNroEhVo8vT5lpXXTS2/451TKSDYEOnbR0CaT2+rbmfS+Sv4WLWMJ+PIK22DYa0Y
bB1P1fTBrcEUj+YdkYSDw6ja2Miy2rh10p4yU3uffAYIQz91iP1NybfAf1MQVKFk
y9n/dpubnFF4oJiIO1TRf2S7+i3yhiIPgnI4FF7o4yns/KEkr2MZ5dvAFZZhbzrP
3xLm5JW2KEiBww==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:47:26 2026 by rpki-client