Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: fVX40VRWOgJc+HJZ/044+cXyEQTYh70JVS9uyL+sX/4=
Subject key identifier: CA:57:EC:0C:10:3E:B8:1D:02:66:B5:B1:13:67:A4:3E:0C:DA:9A:8D
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 019D2627E062A25F46A87799E8DB08BF8876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 12C1
Signing time: Wed 25 Mar 2026 18:00:40 +0000
Manifest this update: Wed 25 Mar 2026 18:00:40 +0000
Manifest next update: Thu 26 Mar 2026 18:00:40 +0000
Files and hashes: 1: 9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa (hash: nTZbJQLNFOotBjznpph2w+kxtUo4D9XsbLL1i612LtY=)
2: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: LHA2BvwTFQXT6s7C/pgYCGMfhcyrnCZEX169MnkXcTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e0:62:a2:5f:46:a8:77:99:e8:db:08:bf:88:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Mar 25 18:00:40 2026 GMT
Not After : Mar 26 18:00:40 2026 GMT
Subject: CN=ca57ec0c103eb81d0266b5b11367a43e0cda9a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:b4:bc:e6:49:16:9d:c8:ee:93:c8:b2:65:
f5:a8:11:b5:ab:97:45:ed:5d:af:da:b5:f0:40:26:
d0:82:4a:b9:d7:a7:08:3b:2a:6e:7f:24:f8:ff:c5:
0d:1f:ef:5f:22:04:b7:86:c3:39:5d:75:ba:19:d7:
41:4a:c9:e9:c3:c1:7f:bc:d0:9f:8a:46:53:6f:f9:
cd:1f:f3:a3:fd:72:58:93:95:06:b0:8d:4d:3e:37:
dc:e6:eb:db:ae:5e:3d:68:2f:7a:c8:70:5f:86:d9:
71:c0:5e:b9:9c:cc:0e:f9:3f:31:46:94:01:ac:4f:
10:82:99:78:89:8e:bf:f4:de:10:14:3d:45:ab:d5:
c1:98:2d:56:bd:f3:dc:ab:c4:b5:21:40:09:e3:43:
a5:3e:6f:6e:3e:be:60:25:ac:2d:5c:09:a6:41:4d:
15:a1:e1:20:de:98:91:34:58:3c:7f:8a:a2:7f:64:
ab:d8:26:52:2c:ce:df:67:55:05:75:92:a9:e2:b8:
9a:3a:7a:b0:fd:64:a8:c0:1d:51:87:8b:4d:d9:8e:
49:26:96:4d:c2:ea:cc:9e:76:10:3e:78:fc:76:d9:
c3:59:37:bb:d6:46:95:b9:be:eb:6e:49:4e:39:7a:
85:4b:77:de:35:9a:89:72:7b:17:67:5d:6e:a3:69:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:57:EC:0C:10:3E:B8:1D:02:66:B5:B1:13:67:A4:3E:0C:DA:9A:8D
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:df:a4:ca:af:81:ba:45:af:32:8e:2d:95:f5:a9:26:c3:
66:d3:46:34:12:e4:a3:06:02:3b:89:e7:6e:01:f8:88:45:ba:
05:4c:99:94:f4:c1:de:9d:66:77:1f:a4:76:f6:28:93:71:8a:
a0:52:37:74:7f:71:59:d1:0c:fa:21:2b:8e:5d:b9:27:d1:0e:
e6:9e:47:c9:fb:ea:ac:05:93:e6:08:d7:54:44:57:e3:33:37:
91:d8:20:21:19:3a:a7:99:25:6e:80:ef:e0:82:69:77:14:e4:
63:d3:ed:77:32:37:87:b6:f1:93:31:d6:ac:06:d4:b1:a6:e5:
d8:ae:3a:31:70:9b:c6:c2:2c:cf:41:df:81:5e:46:c5:81:51:
5e:64:41:f4:a7:19:e3:2f:bf:62:48:b8:52:dd:e1:f5:c7:a4:
83:ee:99:2c:7b:00:7f:38:a8:8c:63:16:5e:d5:c0:39:1d:4b:
4a:5e:39:d9:4a:ba:69:ce:ff:27:07:2b:b8:0a:05:c0:d8:42:
17:97:ed:06:70:aa:ff:14:3d:cb:25:71:36:91:1d:48:c3:d7:
95:8f:74:3f:9c:fe:34:25:4d:f2:bc:c3:10:67:31:5e:15:1f:
03:e1:f7:0b:a4:37:d4:85:85:83:1b:7a:24:f7:cc:b5:58:d3:
cd:99:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:13 2026 by rpki-client