Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: 8781eRrlrXGaiC3CeG/+8leTeAvOjJ2uV5c20RpveYE=
Subject key identifier: 77:A0:5A:F4:FC:05:72:26:24:46:13:B4:B0:FF:1C:B5:70:8F:0D:56
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 019D389C2D1C5F51F0EA7976A92014DB2F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: 30veFJcZt5gYyATK3kLXTpDt01M.roa (hash: J0kpnYEYKB51xy6rnF6SvnRNcgOm8w3XRsDftym/CFs=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: Q4Lxw6L3upYLRwFgq7AI8TQSetY4QFvTJWLn47Va3ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2d:1c:5f:51:f0:ea:79:76:a9:20:14:db:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=77a05af4fc057226244613b4b0ff1cb5708f0d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:84:98:d3:b1:44:58:40:eb:97:f2:f4:54:
df:c2:07:d6:57:4a:be:db:82:c8:18:17:77:9b:b0:
c4:e2:91:d4:59:72:bd:4a:12:c8:db:a0:7b:ec:ca:
37:b6:91:ac:4c:69:70:c8:43:17:86:8c:09:5d:39:
de:f3:e3:8a:65:3c:c0:a3:f8:cf:32:21:b6:4d:c3:
c3:03:78:54:dc:c7:66:e1:ac:24:40:35:af:7f:3f:
61:69:7c:f7:e5:4d:5d:0f:f2:98:55:75:f7:2b:58:
dc:26:9d:21:dc:29:21:a8:48:90:25:90:35:1e:e0:
90:4f:57:3b:5d:9b:35:0c:5e:26:ba:0a:56:5f:d4:
4d:8a:bd:f5:0b:a4:02:54:92:0f:13:bb:1f:02:74:
87:2c:6e:92:f6:6e:8a:43:dc:80:44:77:4e:e0:8d:
6d:ca:93:15:f3:4a:07:d7:68:e6:85:1e:d3:40:70:
99:80:cd:4e:11:93:e6:99:12:d9:61:c7:26:10:45:
2d:94:2c:f8:39:f1:cf:69:51:f4:44:e2:cf:fe:c6:
05:b5:f1:6a:ab:88:e9:1b:e0:66:a6:68:85:34:a8:
80:bc:29:8b:26:13:ca:38:7b:60:59:23:60:14:c3:
77:29:58:e4:69:eb:3e:d5:4b:22:fb:84:0a:25:72:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:5A:F4:FC:05:72:26:24:46:13:B4:B0:FF:1C:B5:70:8F:0D:56
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:16:87:3d:c9:2a:8d:f6:58:95:ec:c9:f7:d5:49:05:d5:9e:
76:db:ee:74:a0:b4:35:9d:71:66:57:eb:ef:1a:59:b3:56:a8:
8b:75:ab:ad:5c:3a:30:5d:91:9a:9c:2f:8b:80:eb:10:f2:b9:
bf:df:33:f2:96:fc:39:c7:ce:28:81:1e:a3:4a:ab:8f:ea:98:
41:14:3a:03:59:f8:74:1d:49:d5:40:e0:08:d5:db:90:5c:5e:
da:cb:32:d0:df:88:b2:6d:93:a0:f5:33:64:39:74:54:d8:c1:
3c:7b:77:71:57:16:40:6c:54:d0:3b:b6:7a:2a:45:8a:b2:38:
b5:21:be:28:4b:53:6a:bc:0e:08:9d:07:38:07:48:41:33:00:
5f:7d:57:e4:cb:fb:39:a1:53:68:b6:f5:9b:90:19:ed:c7:24:
f8:bc:3c:22:91:a9:3a:83:19:02:ff:1c:18:86:d4:a5:24:4b:
d8:11:5a:90:2d:48:d8:ad:ac:58:a4:83:80:47:e5:f2:ac:9f:
45:f0:e8:41:1d:df:21:e6:9e:18:c5:d6:7c:15:31:16:31:16:
5c:90:5a:52:81:b6:89:08:51:c8:cc:53:5b:39:db:9f:65:f8:
5c:db:28:ce:39:8e:d9:cb:c5:77:f5:28:66:3d:62:71:80:4f:
b6:c3:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:20 2026 by rpki-client