Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: 9CZM0ISxYmI10UbPQT+ZJNXnnd71vR38CuzD6eRrAzU=
Subject key identifier: A9:E6:61:F3:CF:FE:EF:80:1D:AF:A6:F1:FE:C8:34:CF:B3:F8:31:62
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019F197A345A7332389DE9E8EFC4C3B78C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 191B
Signing time: Tue 30 Jun 2026 17:01:06 +0000
Manifest this update: Tue 30 Jun 2026 17:01:06 +0000
Manifest next update: Wed 01 Jul 2026 17:01:06 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: EhzRlazvtXF1/N8rLjRW4xk4EiuoQAYWs+LR7WHpq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:34:5a:73:32:38:9d:e9:e8:ef:c4:c3:b7:8c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jun 30 17:01:06 2026 GMT
Not After : Jul 1 17:01:06 2026 GMT
Subject: CN=a9e661f3cffeef801dafa6f1fec834cfb3f83162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:61:87:af:47:1f:40:22:2e:27:51:fd:b5:
9b:42:45:95:2b:2f:82:42:f7:b9:aa:56:3b:b8:91:
0d:ee:e3:4c:98:cd:66:a9:5f:88:40:12:be:58:95:
56:42:82:30:7b:d6:ff:f6:7b:ad:05:86:ed:f3:9f:
b3:c2:94:89:41:0d:ea:3f:e6:42:16:d2:97:7a:a3:
50:30:25:92:7a:61:ed:0a:d5:4b:b3:0b:96:ee:db:
ac:81:a7:78:56:f9:bf:80:75:0f:db:04:87:99:20:
09:3b:86:fe:be:48:5d:6f:75:66:13:ba:ef:7d:f2:
3b:99:1c:9a:ad:80:35:95:bc:c5:1d:ac:71:dd:73:
15:a3:fb:f3:c7:10:d7:27:59:80:92:ea:0d:87:18:
87:af:08:5b:e2:ca:a3:6b:ef:46:5f:a2:91:ee:79:
9a:83:6f:66:41:89:90:58:4d:12:54:d3:5b:f2:95:
1c:3f:f2:c4:03:ce:0f:52:3b:56:62:a8:95:e8:6e:
a2:3f:6f:a9:df:23:f3:8e:94:6a:26:3f:55:00:62:
38:6e:fe:b7:0a:7c:fd:43:21:68:5e:82:70:5f:af:
4e:62:9e:cb:c3:83:24:b9:fd:44:4d:5e:41:27:44:
e5:73:8c:4f:4c:11:61:5b:9f:56:18:58:51:7d:3c:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:61:F3:CF:FE:EF:80:1D:AF:A6:F1:FE:C8:34:CF:B3:F8:31:62
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:86:96:53:15:21:85:f5:bd:21:34:f6:d3:3e:bf:d5:71:
d5:ad:fc:c3:e1:48:82:92:da:3d:bf:4d:79:4d:38:ea:c6:0b:
9d:d1:3c:a7:c7:67:e0:db:73:97:b7:61:e6:68:9e:f6:96:11:
c1:ef:b6:94:05:25:59:d2:47:e6:30:c7:db:93:19:df:da:38:
c0:84:16:99:df:28:85:2e:23:58:92:cf:b5:42:95:cd:24:93:
01:dc:6f:d9:76:2d:95:10:2f:2a:46:18:be:09:cb:76:07:92:
ca:37:c4:cb:84:aa:0c:13:43:2c:ab:7a:33:e5:75:89:b2:d7:
b4:00:12:98:63:a8:f3:85:ab:31:c3:59:b2:13:38:48:e7:4c:
3b:73:0a:3c:84:99:48:d9:e0:e3:fa:50:16:c4:61:41:d5:b6:
dd:6c:1b:88:9d:2f:a6:8a:13:85:26:2b:0b:38:45:49:5f:58:
80:ae:96:6a:64:98:22:a8:e9:30:1b:e7:5c:0b:92:1d:a7:77:
3e:9a:45:88:9f:be:22:67:f4:34:a6:f0:bb:52:28:6f:c7:76:
a3:c0:66:dc:50:36:b8:9d:4a:1c:38:f6:15:21:c9:9a:81:95:
5d:b5:92:a9:48:fb:16:12:db:e9:8f:7d:9c:c5:a4:24:20:9a:
58:e1:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:53 2026 by rpki-client