Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: OB/u4SJGbqCDEX13odoKA1PcdaAoARoXqPU148h/lDk=
Subject key identifier: 02:3B:17:53:07:49:0D:A2:E7:9B:3F:25:54:5F:57:F7:76:23:69:BF
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019D2AE131006F5FBEF47D1C3B0D375174C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0CE0
Signing time: Thu 26 Mar 2026 16:01:34 +0000
Manifest this update: Thu 26 Mar 2026 16:01:34 +0000
Manifest next update: Fri 27 Mar 2026 16:01:34 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: fvRIcB/ZED7ISJ+3iMVNS930uVZzG+NziBc+JQDvQ7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:31:00:6f:5f:be:f4:7d:1c:3b:0d:37:51:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Mar 26 16:01:34 2026 GMT
Not After : Mar 27 16:01:34 2026 GMT
Subject: CN=023b175307490da2e79b3f25545f57f7762369bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:c0:ca:23:63:b9:8b:b3:c5:e4:27:3f:8e:
c9:46:11:97:44:70:ce:37:30:ea:fa:65:a6:ac:16:
04:01:64:74:57:96:9b:48:ed:c4:31:d0:b6:b0:5f:
44:17:68:1e:84:86:d4:ba:bc:83:e7:fe:63:4b:cd:
0b:ae:e1:fd:28:2e:b1:a3:98:a0:a2:fe:06:ca:ff:
6a:01:2e:75:56:69:97:4b:79:67:ad:bb:31:38:89:
17:a3:a8:cc:3c:be:55:14:b2:9b:05:ff:d6:da:6c:
5b:f3:18:c2:95:7e:b8:c0:93:35:a4:cd:af:d7:03:
36:ba:27:d4:6a:ed:0b:90:74:eb:d6:d4:7f:e4:ef:
59:d7:db:73:89:9c:2d:b0:41:59:37:91:c4:e2:35:
3e:c5:35:8c:9b:ac:09:dd:3f:3d:ee:c3:42:f4:12:
ce:a6:56:ae:57:33:c7:78:38:3d:9b:55:1e:db:7b:
e8:2d:fa:cc:4c:d1:a9:af:7f:68:45:d8:97:c0:85:
e5:af:f8:81:16:d8:5a:52:98:31:2e:d9:ed:85:84:
1d:19:36:87:fc:8b:76:02:5c:57:d1:ed:46:f9:fb:
9b:f3:6b:b4:a8:76:b6:39:66:cf:45:c1:50:b2:46:
1c:fa:54:9d:29:4f:59:25:62:6c:85:94:d4:ec:a1:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:17:53:07:49:0D:A2:E7:9B:3F:25:54:5F:57:F7:76:23:69:BF
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f2:98:84:1f:29:5e:11:10:01:be:e1:b8:bb:de:57:17:65:
6b:a5:8b:a4:56:d9:cb:ef:28:4b:94:fe:8c:b5:7e:30:50:2e:
df:59:d2:e1:32:72:6d:4e:8a:19:00:1d:e7:86:f3:59:2d:26:
19:20:cb:e5:6d:8e:5c:c0:8c:d2:54:0a:89:29:f6:9b:d3:0c:
ff:92:98:ee:8b:87:4b:ec:57:93:cc:74:f3:9c:91:95:3f:04:
0b:42:30:28:3a:57:e9:b4:fc:50:d0:24:4a:18:2c:b7:58:4c:
38:97:b2:4d:83:4a:62:a6:85:0d:36:fb:36:21:2b:4d:1f:eb:
43:ef:51:9a:73:5b:a6:95:63:31:db:da:d5:b3:49:8b:43:c9:
0b:ed:96:5d:2d:40:8b:bc:99:86:58:aa:6a:98:e3:4c:09:8c:
0d:94:a1:93:fe:41:1f:14:29:f1:bc:1a:c1:6b:73:57:09:b5:
19:74:d2:74:ef:a9:e0:18:90:a5:f1:48:3a:02:88:44:5a:73:
50:5b:23:9d:1a:c4:6b:ad:ff:be:cc:ce:6e:06:5d:17:ba:4a:
20:6c:da:c8:11:4e:cf:a6:d7:ce:b7:43:f4:38:ee:1c:0c:65:
fa:8f:07:b8:f4:62:55:ba:64:25:d9:01:11:9b:a7:81:7f:76:
af:32:1c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4TEAb1++9H0cOw03UXTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4
NmY1MWEwHhcNMjYwMzI2MTYwMTM0WhcNMjYwMzI3MTYwMTM0WjAzMTEwLwYDVQQD
EygwMjNiMTc1MzA3NDkwZGEyZTc5YjNmMjU1NDVmNTdmNzc2MjM2OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSLAyiNjuYuzxeQnP47JRhGXRHDO
NzDq+mWmrBYEAWR0V5abSO3EMdC2sF9EF2gehIbUuryD5/5jS80LruH9KC6xo5ig
ov4Gyv9qAS51VmmXS3lnrbsxOIkXo6jMPL5VFLKbBf/W2mxb8xjClX64wJM1pM2v
1wM2uifUau0LkHTr1tR/5O9Z19tziZwtsEFZN5HE4jU+xTWMm6wJ3T897sNC9BLO
plauVzPHeDg9m1Ue23voLfrMTNGpr39oRdiXwIXlr/iBFthaUpgxLtnthYQdGTaH
/It2AlxX0e1G+fub82u0qHa2OWbPRcFQskYc+lSdKU9ZJWJshZTU7KG38QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI7F1MHSQ2i55s/JVRfV/d2I2m/MB8GA1UdIwQY
MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct
MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj
LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPKYhB8p
XhEQAb7huLveVxdla6WLpFbZy+8oS5T+jLV+MFAu31nS4TJybU6KGQAd54bzWS0m
GSDL5W2OXMCM0lQKiSn2m9MM/5KY7ouHS+xXk8x085yRlT8EC0IwKDpX6bT8UNAk
Shgst1hMOJeyTYNKYqaFDTb7NiErTR/rQ+9RmnNbppVjMdva1bNJi0PJC+2WXS1A
i7yZhliqapjjTAmMDZShk/5BHxQp8bwawWtzVwm1GXTSdO+p4BiQpfFIOgKIRFpz
UFsjnRrEa63/vszObgZdF7pKIGzayBFOz6bXzrdD9DjuHAxl+o8HuPRiVbpkJdkB
EZungX92rzIc0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:35 2026 by rpki-client