Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: w/uXKqCTh3qzuRE3dF5sbLQaIoF+hOu0CYzlyoHsjlE=
Subject key identifier: D2:04:6B:E1:A2:C2:F1:87:6C:A1:47:C7:08:CF:4B:84:1B:6D:6C:11
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019F92EDB70693D108E9E52803A3836D253E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0E1F
Signing time: Fri 24 Jul 2026 07:01:20 +0000
Manifest this update: Fri 24 Jul 2026 07:01:20 +0000
Manifest next update: Sat 25 Jul 2026 07:01:20 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: l0ZMF1USpXH7Q3wI4cKvTlCVzU7KoV2vVT/enQ7Lg6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b7:06:93:d1:08:e9:e5:28:03:a3:83:6d:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jul 24 07:01:20 2026 GMT
Not After : Jul 25 07:01:20 2026 GMT
Subject: CN=d2046be1a2c2f1876ca147c708cf4b841b6d6c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:9d:4e:9a:35:88:43:94:b4:e3:e0:26:53:
1c:d0:a0:46:73:98:a2:75:b3:ba:2b:32:14:f5:0b:
bc:a7:5c:fb:b2:fd:37:5c:26:a5:77:1a:d9:10:0b:
41:0b:da:9a:ef:e8:1d:f3:57:ea:1a:ed:e5:89:75:
23:34:1d:7d:13:6b:7e:42:1d:a1:24:fd:1c:09:b5:
41:00:1d:b5:f0:53:26:86:d6:22:9b:c5:aa:ff:80:
e8:04:7b:22:ed:b5:aa:bd:e8:80:e6:f8:fc:b7:5f:
26:e4:66:85:bc:f8:fb:d8:fa:78:ca:cd:d1:eb:e1:
d6:11:a5:26:df:8f:25:5f:ac:73:42:83:76:8d:0f:
36:32:fc:21:7d:6a:6e:fe:fe:66:78:90:4d:65:36:
59:dd:64:bc:31:97:e5:98:97:60:0f:f1:c3:32:f0:
2c:8b:d3:68:e7:c7:ef:d6:ed:8c:03:8d:91:59:55:
15:d2:b7:f3:cf:0e:0f:b4:7a:27:87:f3:df:2b:5f:
fa:8b:e5:7d:cf:c7:e0:d8:2e:91:63:00:4c:d4:b9:
24:2f:21:5c:8d:d4:6c:7f:ba:86:66:91:81:79:b4:
cd:31:b7:78:5c:f1:94:1a:59:17:75:a3:9b:7f:fe:
fe:d0:b3:29:72:39:18:26:4f:41:96:4a:07:d2:fc:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:6B:E1:A2:C2:F1:87:6C:A1:47:C7:08:CF:4B:84:1B:6D:6C:11
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:36:a6:71:55:a6:23:40:4e:4b:02:71:fd:f8:20:6e:d3:
a7:78:96:10:75:4d:05:9c:8d:77:49:b1:29:2b:67:38:56:08:
90:06:c7:fc:6a:c5:a6:9c:21:c9:07:32:ba:67:35:60:e0:a1:
6c:28:34:57:f6:53:37:2b:4f:23:fa:b6:b3:cf:7c:a2:cf:67:
39:53:ca:3e:1b:ef:a3:dc:4d:0d:13:2a:7b:13:61:81:b1:8b:
1c:8b:4e:db:ff:3b:90:fe:ea:8b:d7:fe:55:e5:4a:80:0a:32:
c6:5c:19:e5:54:5f:03:b1:27:1e:86:75:bf:36:ac:b2:e5:29:
c3:6c:01:ee:1b:4f:3f:1d:62:8a:01:7c:78:05:dc:3b:4d:21:
a8:b6:9d:90:76:c0:4c:98:d5:18:26:1c:6f:40:78:16:54:76:
0d:ac:28:d7:37:ef:e5:56:ba:f2:95:0d:31:5f:70:de:ba:34:
0c:64:9e:a2:81:27:e2:bf:6e:73:29:46:d0:10:31:c9:d1:52:
4c:09:d6:e8:89:6d:e3:5e:f9:7d:ab:78:f1:85:40:27:3b:b3:
af:f3:4b:01:45:35:b7:af:2b:f7:68:c9:cb:14:a5:4e:57:91:
9a:0a:db:b2:10:80:26:8f:3c:dc:9b:f8:b5:99:d5:74:8e:7c:
f9:0f:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:09 2026 by rpki-client