Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: fgPE8czb3662WZ0zV4VBfsM725ab/rMimhmP5Yl9skM=
Subject key identifier: 5C:B4:98:51:66:91:C7:49:EF:7C:2E:75:79:36:9F:45:05:C7:26:43
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 01A08C0D7A15D3BD206F2032F47EB03637D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0EA0
Signing time: Thu 10 Sep 2026 16:01:28 +0000
Manifest this update: Thu 10 Sep 2026 16:01:28 +0000
Manifest next update: Fri 11 Sep 2026 16:01:28 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: eslnoYba9FVWO/lH8h19c6oF/nXg8rRUL9wsmGWEjg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:7a:15:d3:bd:20:6f:20:32:f4:7e:b0:36:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Sep 10 16:01:28 2026 GMT
Not After : Sep 11 16:01:28 2026 GMT
Subject: CN=5cb498516691c749ef7c2e7579369f4505c72643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:b0:ce:4e:b8:59:ee:72:e3:25:e3:d3:3e:
d4:9d:72:de:e8:77:1f:6a:9f:15:7b:ab:a1:c7:af:
8f:46:f4:db:ef:53:92:3f:64:bb:36:4e:b0:f4:cd:
e5:b9:07:c5:9a:38:4d:2e:f3:54:55:4c:6b:aa:62:
f4:3b:29:e4:4d:e0:0c:a3:60:2c:8c:6f:82:fd:d7:
bf:43:a8:9e:5e:dc:7d:5d:d0:d0:76:96:eb:8c:12:
af:86:63:8d:27:93:4f:ea:16:f7:2b:96:34:77:ff:
06:59:c0:aa:99:7c:7c:01:40:ef:f6:e7:49:3f:df:
6c:c6:7c:7d:7f:c9:48:dc:09:7f:3a:5e:0d:fd:72:
f3:55:47:f7:0d:2b:cc:18:52:df:fe:b5:8b:ea:31:
91:c2:c1:74:c7:0a:d6:12:84:37:61:1c:8d:dd:08:
44:3c:b5:bc:aa:08:5f:0a:4d:00:08:5a:00:83:42:
9e:2e:0a:0e:d8:9b:f0:3f:a8:4b:d7:34:f0:24:43:
00:c3:1b:a4:56:11:ce:1f:4e:04:04:c2:f3:fd:ff:
96:ff:e6:43:09:7a:41:2e:98:b3:98:67:c5:8b:a9:
c4:5c:4a:2c:d3:a4:d3:88:18:0e:18:71:ff:6a:93:
b1:bf:9d:bc:79:8a:2b:14:87:89:c0:b7:b3:47:65:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:98:51:66:91:C7:49:EF:7C:2E:75:79:36:9F:45:05:C7:26:43
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:59:92:01:70:26:12:ff:4e:a6:b4:03:1e:64:f9:2a:4c:a9:
0a:7c:c3:ab:ae:bf:34:91:78:bb:96:44:1f:69:a4:7f:d8:e4:
ab:a5:06:8c:54:ef:ec:7f:4a:8f:69:ac:fd:f1:52:24:05:72:
6d:ed:77:b3:03:de:c7:4b:52:04:ae:fb:d1:9c:6a:ee:ab:13:
5d:d4:38:31:4e:cd:f2:9a:04:18:cd:71:3b:d6:7e:c6:54:bf:
ac:6d:0a:e7:ed:55:ee:2c:b8:d4:1f:93:a2:46:54:99:a3:eb:
19:de:10:49:7d:e1:9b:13:c8:e0:4a:11:94:f5:c7:36:8a:a7:
3c:32:00:fb:f5:52:4d:d7:f5:3a:90:1a:b7:bf:c1:f3:91:d7:
f6:4a:0a:00:5a:a7:de:98:78:b3:05:54:1e:15:c5:df:67:9e:
de:1c:0c:80:cd:79:87:a4:f0:a1:23:1f:a7:af:71:ac:59:59:
ad:9e:1b:c3:e1:a4:eb:36:a7:a7:c0:92:f2:38:b4:2b:87:99:
c7:57:24:81:80:f2:a2:4c:4a:04:6b:9d:c9:9d:29:cf:da:c6:
36:0b:1e:fa:00:45:34:e7:12:b1:42:23:0f:d7:07:88:47:1d:
59:73:db:0b:b4:d6:5f:70:e1:0c:5c:eb:f1:6b:82:85:a0:3f:
30:fd:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:39:57 2026 by rpki-client