Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: hZotXvj8Nju/V72wJyNhY6wojZWtjBj8gfHJWKLPVn4=
Subject key identifier: C6:DB:5F:ED:63:C8:D4:B1:00:52:1B:0A:EE:83:E0:75:44:26:C4:71
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019CE7490A29703D5A3F744312F8ABA17E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0CBD
Signing time: Fri 13 Mar 2026 13:00:49 +0000
Manifest this update: Fri 13 Mar 2026 13:00:49 +0000
Manifest next update: Sat 14 Mar 2026 13:00:49 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: OmlUu2Z8yiyOvJ6UAo/T+lsZFnB0n0Lbz7YLbhUxOH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:0a:29:70:3d:5a:3f:74:43:12:f8:ab:a1:7e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Mar 13 13:00:49 2026 GMT
Not After : Mar 14 13:00:49 2026 GMT
Subject: CN=c6db5fed63c8d4b100521b0aee83e0754426c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:d5:38:00:ab:a5:52:66:46:07:b3:08:86:
05:97:ba:bb:82:ec:3c:ee:64:25:aa:51:bc:ad:ef:
06:da:0e:fd:a5:19:fa:b9:2b:72:35:ec:11:29:31:
04:69:66:84:8f:db:53:7d:1a:5d:a8:32:c9:e0:f1:
d5:fd:38:b6:8f:4c:ef:77:61:d0:0d:db:93:52:f7:
c3:38:56:02:9b:36:50:35:da:04:f9:a0:86:96:1a:
9f:5c:f2:74:e3:7a:a2:81:c7:08:c6:fb:57:cb:a6:
2c:dd:8c:d8:6b:59:8c:ac:d1:20:59:45:59:3a:85:
ba:55:a1:cc:91:00:21:71:79:0c:04:bd:6b:62:e9:
36:47:55:f7:e4:c0:e3:5d:6d:03:2f:e6:3a:2c:86:
d1:d7:0e:f6:6c:6f:70:d6:b4:be:15:63:b3:1c:3b:
0e:a9:fe:37:83:5a:c4:c1:01:96:cb:39:6d:58:d0:
9c:4d:da:dd:6c:fe:9b:f4:3f:e9:11:c0:de:81:9b:
cf:34:12:3e:d3:2d:0c:c3:8a:ba:f7:89:ad:cf:4b:
b8:09:eb:91:80:ce:a9:eb:2a:4f:f7:4e:a2:1e:b6:
5c:6b:17:f6:3c:33:38:79:ce:bf:e5:98:e7:4f:d9:
6f:13:39:11:11:e9:8f:09:3c:32:df:ad:be:a3:5b:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:5F:ED:63:C8:D4:B1:00:52:1B:0A:EE:83:E0:75:44:26:C4:71
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0f:00:af:84:6b:d5:e9:a0:df:7f:2a:17:2b:6a:8b:64:40:
08:7f:a5:f2:b3:12:e0:b9:a4:56:f5:bc:89:01:30:8e:36:30:
25:80:b8:0c:63:16:5d:a9:8d:ab:3d:85:d6:1a:31:17:92:be:
9c:cc:a2:29:66:4f:57:cf:83:1a:17:a9:76:da:66:b7:be:89:
69:fc:2c:b6:5e:04:12:69:3d:75:d2:be:9e:27:7e:d7:aa:62:
3e:24:25:53:c6:e7:56:93:f5:3c:cf:0a:17:93:c2:87:e0:47:
ae:c3:1f:c1:d7:36:eb:b6:b9:e1:f9:26:8e:5a:66:46:91:02:
82:40:ef:87:b3:d9:ad:a7:08:3f:f1:86:62:23:4e:d0:78:99:
ed:e0:d4:e2:1a:72:a5:3b:3f:7d:0c:7c:c1:bb:d5:ac:c3:e1:
90:c9:53:28:a4:f6:e0:e4:26:b9:24:b6:de:9a:90:9d:fe:64:
68:7f:f9:6d:66:03:09:88:07:43:60:90:1e:2c:61:7a:4a:0a:
31:19:13:51:2c:70:2c:dc:c5:d0:10:41:08:75:ff:64:ab:3a:
7f:02:ab:59:ca:b5:af:4d:31:d2:c4:e0:8e:27:8c:46:6e:88:
31:d8:aa:9f:fd:30:32:0e:58:5d:31:f6:43:d2:14:00:f4:c0:
40:64:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:49:32 2026 by rpki-client