Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: tWp64b/fxiZM3GrwXu5O2hhaYF60WDe33X6rqOs6TDM=
Subject key identifier: 27:D0:D0:B9:9A:E5:BE:6E:A9:B3:BC:D5:38:36:3E:E9:C4:15:4F:0F
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019D2A3C2FF52950F19AB6877DB6E23433F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 09CC
Signing time: Thu 26 Mar 2026 13:01:20 +0000
Manifest this update: Thu 26 Mar 2026 13:01:20 +0000
Manifest next update: Fri 27 Mar 2026 13:01:20 +0000
Files and hashes: 1: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: dN2B6FdENJXJUDbX97oHToBzWkDR/IPsOGdxpSfUxFM=)
2: kMOSZWtiewXuTyw15Rj0qERqvDU.roa (hash: 0sRuOEf/juDtnk/XmtOYHhmqAObydjSuiq84TabvvMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2f:f5:29:50:f1:9a:b6:87:7d:b6:e2:34:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Mar 26 13:01:20 2026 GMT
Not After : Mar 27 13:01:20 2026 GMT
Subject: CN=27d0d0b99ae5be6ea9b3bcd538363ee9c4154f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:d4:dc:68:52:07:2b:2d:35:bf:ba:63:83:
42:1f:17:db:e9:8a:a8:2d:6d:40:00:dc:70:c5:e7:
82:44:cf:04:8a:61:0a:0d:32:68:4e:d5:7b:1d:a6:
24:e3:e0:c0:6f:1f:e9:35:d7:91:fa:11:14:73:f0:
72:3f:92:b3:bf:42:df:f8:23:68:5d:7f:d9:53:bd:
20:e7:c0:01:cb:ff:37:a2:27:a7:0d:d2:a0:ab:cd:
0b:d7:1c:e1:e8:e4:75:81:a6:83:af:b4:30:8e:73:
12:52:2e:e1:58:bd:5a:79:e8:ee:43:45:f6:d1:d4:
3e:a7:1d:d5:08:87:16:16:e1:67:77:da:55:fd:f4:
82:c2:d6:5b:b4:e7:3e:a1:79:62:41:c5:b0:5e:92:
60:07:cb:06:f3:61:16:54:73:96:b0:06:26:90:92:
47:2b:53:0d:41:9b:78:f3:a5:a1:3e:8c:d8:66:94:
40:8d:7e:04:67:b0:19:ca:b3:69:4d:9b:b6:98:d0:
5a:57:0f:33:5b:c3:d3:ac:f6:7f:8f:0c:77:d1:f2:
c4:fa:e6:28:ce:3c:f8:83:9b:8e:f3:86:6a:ad:3b:
78:86:02:1a:d6:fe:1a:91:01:a0:05:9a:e7:a3:9b:
8e:c1:fa:d8:5a:4c:ed:79:a4:3a:8c:d7:13:47:d3:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:D0:B9:9A:E5:BE:6E:A9:B3:BC:D5:38:36:3E:E9:C4:15:4F:0F
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:4e:a4:9d:97:dc:3c:21:75:11:65:b4:c3:94:70:94:bf:
83:77:af:aa:4c:8b:54:14:ad:b3:55:a4:d6:bd:00:65:20:a7:
a2:20:41:21:3e:9b:a1:45:31:48:9e:d1:8a:90:62:cd:75:fe:
91:8c:ae:dc:db:ca:e5:33:82:d5:54:ee:02:a0:23:26:24:5d:
bb:c6:f4:db:80:a3:b2:3d:dc:0b:7d:d1:9b:2a:5a:44:74:28:
9a:2a:91:8b:79:8d:b9:39:49:ea:29:8c:5a:61:71:76:06:fd:
a0:7b:85:f4:3d:16:37:fe:90:c0:94:cb:a1:66:08:63:8d:f7:
25:48:d8:c6:40:0c:c0:b1:7e:d6:63:82:55:84:72:a7:b5:da:
01:c5:5c:60:cd:84:c0:74:8b:40:aa:00:4d:10:d2:6f:32:05:
df:a8:95:31:80:c4:bf:52:18:ab:f5:b1:7b:e4:ed:a3:5e:eb:
3f:bf:9b:cd:6b:96:89:1b:74:14:b2:dc:1f:83:87:68:a6:5c:
aa:85:66:54:2c:d4:d5:e5:bf:cc:af:ea:f9:d0:6d:49:64:e8:
fe:26:10:4f:97:fb:92:af:32:f2:b5:80:4e:c0:91:12:a0:77:
ff:22:6a:83:77:76:ab:7a:64:13:e9:27:1b:d9:a0:3e:fc:47:
08:10:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:13 2026 by rpki-client