Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
File: IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json)
Hash identifier: 15uWG++HqVfeVBInEcxHkgf4x+eIqhRVqYAhIhpVtYo=
Subject key identifier: EE:0C:BF:65:DB:A7:C1:DC:63:13:97:50:06:76:51:30:EE:3E:DB:C9
Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
Certificate issuer: /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Certificate serial: 019D25F1A8D19933A29D24F269AB0142316A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
Manifest number: 01C2
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: l75FDSnEHitUArL/TzzhyjGZLponLvV52d2kVtHQfXM=)
2: __gU18kn96xEQP-dgqv4pCY4F3M.roa (hash: iyyh1hfdSStH6dbQTlmWYSXkFzAYSbU1VEOsURfS4Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a8:d1:99:33:a2:9d:24:f2:69:ab:01:42:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=ee0cbf65dba7c1dc6313975006765130ee3edbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:63:b1:d6:35:9b:16:86:41:50:16:b2:0b:
6a:7e:ef:9d:87:31:0c:a9:75:6b:ea:f9:0f:91:52:
bb:02:4a:90:8d:0c:5a:d9:37:b2:d2:0c:a7:3a:fe:
1b:18:d3:7e:65:d1:b6:51:95:5c:02:41:c2:65:f2:
54:36:2b:78:9b:5e:43:5f:a6:32:af:c5:6b:07:bc:
52:62:67:58:12:66:ae:8a:fa:72:d7:ca:94:f8:f6:
1b:cc:0d:a4:78:ff:07:ac:ff:0f:33:50:46:53:44:
2b:6f:cd:c6:6e:82:6c:58:11:4c:bd:c3:05:4e:94:
39:4b:b2:34:79:e9:1b:20:9f:bc:47:9c:93:5c:53:
3e:ae:b7:21:d7:54:43:10:6f:16:b1:05:0e:74:b1:
a9:89:b2:1c:06:9f:09:bc:61:8e:8e:50:a7:ac:7b:
3a:2e:de:02:68:14:a1:8e:9b:38:41:29:3d:0e:b0:
41:f7:5b:84:79:ed:3e:36:eb:d0:85:12:30:c7:1f:
22:22:b8:5c:a1:c0:7c:97:d6:f4:41:41:36:49:56:
bc:c5:8b:1e:5f:9b:cf:e7:f6:8a:fc:b8:7c:b1:e8:
2a:3e:3c:24:2b:fd:08:98:25:ab:83:2b:d9:fe:80:
cc:00:cf:ff:80:da:a2:64:5b:9c:da:2a:e2:a4:0f:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:BF:65:DB:A7:C1:DC:63:13:97:50:06:76:51:30:EE:3E:DB:C9
X509v3 Authority Key Identifier:
keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9d:37:0c:3e:61:67:ad:33:9f:d8:31:75:23:8d:3b:f4:de:
0b:90:cf:49:78:da:b1:a1:c2:33:e2:19:82:d7:04:64:e8:dd:
ee:de:26:b7:26:8e:0a:5f:a7:21:07:f0:92:94:c2:8e:dc:83:
a9:5b:e0:2a:85:b5:35:34:9d:6c:12:24:f5:db:21:68:51:c3:
df:16:f1:0d:50:19:58:ff:93:27:ef:c4:1a:f2:d2:57:ea:24:
91:da:e4:79:e6:64:99:1f:a1:58:06:db:f1:ab:a1:76:56:42:
0f:9f:24:7b:cf:a9:e0:8c:95:64:54:e7:0a:74:32:01:af:60:
f4:ca:2b:78:ca:ec:b1:20:5b:48:c2:b1:79:12:5e:4d:db:11:
2d:ce:4b:fb:e7:a2:aa:1d:46:16:6f:d1:94:23:37:01:62:8a:
3b:ca:0c:94:a9:e5:69:4c:7d:2d:3c:ef:c5:7f:f9:e8:02:f0:
2a:64:f6:3b:d3:e7:30:5e:f5:57:84:6e:2e:7e:84:75:56:96:
2c:b4:3e:75:9d:4a:61:7a:d4:a4:7a:fc:e9:0a:e9:ee:ee:64:
d8:f1:45:dd:23:25:ec:b2:63:4c:52:41:5c:23:48:5b:9f:d9:
78:80:1c:a1:e0:4b:f8:33:3c:56:92:cb:6a:93:c4:d7:b0:1c:
d1:b1:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:50 2026 by rpki-client