Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: FE/0+wNZLb+FlVyTAYPMmbTAERKcMu5W7coZLPNXu/8=
Subject key identifier: 0A:37:54:71:A8:E6:D6:F2:01:BF:9C:D9:E9:26:0E:DD:62:9A:86:EA
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 01A135FF51933165B40502B52EE6B46C6D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0EF8
Signing time: Tue 13 Oct 2026 16:01:27 +0000
Manifest this update: Tue 13 Oct 2026 16:01:27 +0000
Manifest next update: Wed 14 Oct 2026 16:01:27 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: iMXat79iyPlyFbDHrmtcKpTiUqHK0f0aMhtj8Ewf/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:ff:51:93:31:65:b4:05:02:b5:2e:e6:b4:6c:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Oct 13 16:01:27 2026 GMT
Not After : Oct 14 16:01:27 2026 GMT
Subject: CN=0a375471a8e6d6f201bf9cd9e9260edd629a86ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:f0:a9:a4:f3:e5:bc:5d:de:20:fd:31:00:
62:57:fc:7c:34:cf:73:81:24:30:ec:46:c5:67:3b:
b5:dc:c8:53:4e:50:ef:c4:51:e6:ce:1b:6f:9c:48:
f4:ca:bd:a3:56:c7:ac:8c:23:55:a6:c7:d3:a6:95:
cb:a5:01:d1:1a:11:df:03:83:82:f3:f6:00:25:70:
94:31:b2:a4:88:7f:06:37:7c:3a:d0:2e:51:8b:ea:
54:70:f0:3a:fe:7c:0a:ca:39:58:0e:02:58:9e:9a:
9b:c5:ab:61:75:94:74:f0:b1:bf:30:ce:c1:c7:46:
89:54:ad:cf:71:40:f0:8b:31:15:3f:61:0b:8f:bf:
31:74:b7:ac:ad:ef:07:5d:8d:f8:7b:5d:4f:9f:7a:
21:05:a8:5f:fd:92:e4:d3:41:9a:4a:b2:b4:da:ce:
b4:fa:22:79:e8:88:16:6d:ea:28:b1:99:aa:20:12:
02:6f:4c:28:ec:a0:f3:14:f3:af:82:b4:4d:d2:32:
d0:2b:4f:f4:d5:ca:49:05:3e:fa:dd:41:eb:99:35:
3d:41:54:c8:c7:a0:0f:ee:2c:3f:6f:8f:0a:61:c5:
53:d9:f1:1c:25:0c:c4:21:97:68:76:97:4c:ba:77:
04:2b:ed:27:26:80:98:1c:4d:3f:96:98:af:aa:0b:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:54:71:A8:E6:D6:F2:01:BF:9C:D9:E9:26:0E:DD:62:9A:86:EA
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:f1:a3:10:71:b0:cd:82:fa:42:35:bb:1e:ca:42:1d:73:
73:0a:71:d7:2e:fe:4d:eb:8e:5e:fb:69:4b:c2:de:2f:e7:ad:
70:23:d6:c9:6c:0e:52:69:8d:cb:47:5c:99:de:79:2e:37:7a:
73:fc:c5:c7:9f:32:65:98:2c:ab:bc:53:8c:54:10:e3:ca:46:
62:d6:9e:cc:43:2a:dd:bc:17:58:25:9f:de:33:41:20:a2:32:
0e:34:a1:58:31:2d:48:5b:d1:98:5e:4f:65:a8:ee:15:f6:c9:
83:01:b5:7b:70:fd:a5:ca:64:20:b0:09:96:63:48:45:37:0c:
93:f1:17:79:28:fd:6f:f8:27:01:cf:44:fb:74:bd:9a:2a:a2:
8e:7d:aa:ee:00:a9:ed:57:55:0f:dc:db:f8:53:67:a9:37:01:
0c:5d:5c:53:19:88:6f:2c:d1:fc:a7:71:23:ab:ee:36:02:6b:
de:7f:1d:1d:b4:2e:99:57:0e:29:b8:bf:c2:8a:33:98:c7:0e:
70:ce:91:eb:ae:42:8c:e7:70:ad:3f:df:d3:1b:c9:b6:17:0b:
ea:13:30:ca:50:09:24:11:2d:de:3d:c6:f4:fd:f9:14:28:76:
81:91:86:bb:53:4a:95:b8:1c:8a:14:e3:90:29:f7:24:11:0f:
d2:a5:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:05:51 2026 by rpki-client