Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: ghN4uDrtRa0m/9a1JvBC/IezqXDdYD1OPRHOIOrYTug=
Subject key identifier: 19:C2:3B:86:E1:23:3A:30:B3:2A:B8:AF:29:78:6C:9F:FE:86:D9:9F
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 019D2960DCA54226F6F5D9F40A65FEB813F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0A0B
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: 1iXcw_VtwzC503OBHl7UPQ9wk40.roa (hash: 5en0UIq6KKHB2vB53mKduFH/pH1FkmbIGnryOKNRjmw=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: Xzrt6/TWRvBNui1nmTRudCr4MuMQX+RhnOb7nb6NASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:dc:a5:42:26:f6:f5:d9:f4:0a:65:fe:b8:13:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=19c23b86e1233a30b32ab8af29786c9ffe86d99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:43:8a:74:6a:a4:2a:6e:03:ce:d0:a8:90:
f0:76:8a:26:0e:7b:e3:3a:5b:b1:d5:57:d9:5e:ab:
8e:bd:a3:c5:c4:11:29:85:00:a7:8e:3c:53:5a:73:
14:23:1b:66:e2:ff:64:be:48:2f:61:15:f4:ae:20:
be:eb:85:ed:ac:9b:ae:33:02:36:9c:d6:22:fc:a7:
ae:8e:f9:9b:88:c1:85:49:88:88:ea:5e:f2:53:cb:
aa:72:e1:f5:f9:d9:b8:48:56:9a:2a:d9:fb:2e:dc:
9e:a6:3e:51:43:ae:7d:74:ec:fb:4a:58:70:31:00:
a6:9d:6e:ce:25:da:cf:c2:6e:cf:2c:eb:9a:8a:33:
f2:e0:6a:05:57:ac:4e:d1:a1:68:94:6a:95:aa:78:
1f:41:08:07:5f:4b:c5:b1:e7:bc:b4:a7:ce:40:28:
2e:a2:f1:07:8b:12:7a:fb:89:49:46:de:e4:a6:2a:
0a:97:54:95:ba:40:64:ea:01:01:51:95:c7:85:82:
09:12:80:8e:f3:d9:73:74:b7:31:84:80:6b:fe:c2:
f0:d1:0d:30:0e:76:82:03:60:6d:2d:b1:7f:17:52:
4f:29:2c:18:78:99:ff:76:7f:49:a8:95:c2:89:ec:
c9:1a:f3:53:29:71:eb:01:a9:aa:ea:66:0b:6b:e3:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:3B:86:E1:23:3A:30:B3:2A:B8:AF:29:78:6C:9F:FE:86:D9:9F
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:40:74:21:26:7a:05:9b:1b:59:fb:d7:1a:41:34:37:e5:
23:6b:21:2b:b5:f7:45:e4:ef:6c:6c:32:cb:c7:03:5e:05:ff:
51:ee:af:7a:24:6f:33:d0:bb:d5:90:c7:91:31:61:33:4b:5c:
f6:ed:bb:04:77:c2:e3:cf:b4:85:a4:0f:13:f5:b5:59:3f:3d:
13:a3:6b:3e:29:e0:3e:40:db:e7:0f:8d:10:1c:4b:01:af:bb:
ad:72:c8:28:23:ce:9d:ab:2f:b4:cf:34:af:b1:e9:22:0f:ff:
65:ef:d0:6c:7b:5f:75:66:7d:e9:d8:da:44:fb:40:62:de:ea:
f6:1e:1a:3b:36:f6:42:1c:c7:85:ab:e4:89:6c:4d:da:58:e4:
84:e2:38:ca:e8:a7:d4:ab:72:4c:de:16:04:3e:00:8c:da:38:
d5:6c:b0:9d:53:ad:8d:93:25:1d:ad:4b:ae:bb:17:09:50:29:
51:5a:8c:cc:08:6f:41:dd:12:65:a1:bb:8b:cf:c9:ae:8a:20:
3e:83:9e:b3:77:ae:2a:53:92:ad:f0:c8:4a:90:68:d0:c2:51:
51:f1:d7:52:82:e9:9e:6f:f2:b9:c3:16:64:64:91:7e:3b:d5:
72:eb:5b:a3:cf:df:53:2b:9a:1b:15:64:1a:62:5b:23:ae:6b:
6c:94:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:02 2026 by rpki-client