Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: nZUSvTU9aX7qqSRlV5wMotqG15zb+busz4QNsiqHVdw=
Subject key identifier: EC:E3:11:93:4F:A7:E9:44:5F:77:F7:61:60:ED:41:DB:F1:C4:A0:24
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019F2812A6074C0E72930F77CB0B4D71F64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1924
Signing time: Fri 03 Jul 2026 13:02:18 +0000
Manifest this update: Fri 03 Jul 2026 13:02:18 +0000
Manifest next update: Sat 04 Jul 2026 13:02:18 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: GV44l13qpqDSsr3uCkF5w6nUoqKxf0y4UjIm0OiUO1Q=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:a6:07:4c:0e:72:93:0f:77:cb:0b:4d:71:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jul 3 13:02:18 2026 GMT
Not After : Jul 4 13:02:18 2026 GMT
Subject: CN=ece311934fa7e9445f77f76160ed41dbf1c4a024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:1f:72:d9:07:19:7a:b5:8c:c5:18:5c:6f:
28:d0:75:22:13:88:41:f3:e5:8a:b9:21:35:dd:b6:
37:2e:2c:50:df:76:ac:73:8d:8c:1a:c5:ae:f2:cb:
8a:55:31:f2:b3:d0:34:d8:69:a7:6d:60:74:ce:da:
11:c0:a2:20:6f:3f:1a:bf:f1:86:ba:41:c8:90:a1:
15:04:7a:46:bf:b9:0b:e3:6d:46:74:b7:f6:05:af:
42:da:4c:1c:cb:76:f8:83:c2:de:d5:35:a0:55:df:
5b:bd:0c:ee:8d:eb:dc:fb:6e:2e:3b:05:f7:f5:1e:
41:19:60:8e:9f:da:a1:44:51:69:41:4a:c7:e5:87:
24:17:44:39:9c:f3:4e:bf:f7:f7:7d:c4:87:76:96:
4b:9c:b8:4f:65:bd:c9:90:92:54:f3:43:7a:41:16:
80:09:85:dc:96:c8:65:70:5e:db:cd:ca:59:c3:1e:
cb:44:1e:1e:16:85:45:37:38:39:f0:49:bf:87:34:
c7:0d:9c:5e:7b:68:23:1d:5a:c8:65:d8:12:65:98:
97:31:8d:7b:37:5a:35:ae:0f:a6:29:63:ab:06:a5:
8f:97:14:a4:48:5f:c0:69:ad:83:74:bf:6a:d5:66:
e5:33:e7:75:d7:1c:ad:74:b4:7e:7a:1c:b0:db:7b:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:11:93:4F:A7:E9:44:5F:77:F7:61:60:ED:41:DB:F1:C4:A0:24
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:0a:a3:c7:32:9a:b9:f9:71:c8:83:ce:e2:20:20:bd:dc:
25:d1:1f:51:f7:00:68:7e:84:31:9f:f0:43:c3:cf:61:60:70:
25:40:df:32:dd:de:72:58:d8:c3:4a:eb:45:22:42:6c:37:bb:
4a:2e:54:37:07:75:78:ef:9d:9f:f9:3a:2a:90:ca:71:c9:5d:
ec:df:dd:18:c2:63:1b:9a:a7:9f:30:93:f2:2e:ce:b1:6f:e3:
43:aa:c3:60:4e:45:89:9f:12:bc:fd:52:6c:24:df:a4:91:eb:
94:de:97:95:41:b8:45:29:2c:66:e5:76:52:f8:e0:a6:d9:37:
cb:38:bf:35:a2:f6:bd:a9:bc:13:c2:c5:eb:0a:67:c7:b4:7e:
2b:0d:64:64:85:13:fd:da:4d:8f:8a:45:62:a5:f0:75:88:7f:
86:cf:c1:78:4a:d4:f7:ec:5c:ba:24:31:0c:97:ef:9c:bd:c0:
41:fd:c3:fe:e5:65:19:17:83:0d:d1:3c:7a:45:a7:4b:b1:43:
a4:4a:02:df:ef:83:17:e0:ce:ef:3b:fd:2b:59:0f:79:70:5f:
05:9c:c9:f8:e0:05:fe:f0:f9:3b:37:af:78:fa:c3:9a:a1:46:
d6:d4:32:40:31:74:19:c1:e7:ab:f1:e4:02:cc:76:d2:bf:00:
85:a6:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:37:23 2026 by rpki-client