Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: /jmKVRwUitOJzeMt1uukpked4EHwc9Vt62EMeQxllQg=
Subject key identifier: D2:6B:90:CC:95:A2:49:1E:F8:FE:57:06:26:DF:DE:61:29:C5:7B:35
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 01A0D8A87269B9F5E63000E71133F1BA5F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1A04
Signing time: Fri 25 Sep 2026 13:01:52 +0000
Manifest this update: Fri 25 Sep 2026 13:01:52 +0000
Manifest next update: Sat 26 Sep 2026 13:01:52 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: pqhFXmyMNbsc/IdfXYBExMF7z4pUoV+ep+LltJTd/Kg=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:72:69:b9:f5:e6:30:00:e7:11:33:f1:ba:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Sep 25 13:01:52 2026 GMT
Not After : Sep 26 13:01:52 2026 GMT
Subject: CN=d26b90cc95a2491ef8fe570626dfde6129c57b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:68:f5:23:cb:0e:8e:5d:c2:9c:39:25:c4:
61:69:02:6b:0f:71:e0:b7:09:8a:65:02:2e:56:dd:
cf:a6:30:c2:96:67:68:6d:b4:aa:c7:d1:2e:79:b5:
1b:9c:38:5b:a4:60:40:a4:66:d2:89:78:74:41:2d:
0f:a2:3c:a7:3b:dd:b4:18:19:d1:fa:56:86:a0:2b:
76:55:40:79:42:2a:5f:ad:42:7f:66:02:42:ae:18:
f5:29:a1:22:a0:28:59:d6:ca:f1:8b:e2:af:91:f9:
19:85:7c:37:78:89:9f:2d:a0:7f:de:b6:fa:b3:d4:
6e:81:9d:a9:2f:85:ea:1c:34:7d:53:e0:dd:ed:af:
c6:c2:78:65:b9:7f:57:cd:88:c9:3a:57:42:62:64:
65:c2:ba:f8:64:e7:d7:3d:a9:5b:a4:d7:8d:03:90:
58:0f:81:f9:de:28:a9:f5:0d:b2:66:16:71:e0:26:
be:0c:17:8f:af:19:40:f9:d9:c0:c8:13:8b:5b:de:
d3:f8:7a:d6:d7:59:f1:0b:b1:15:59:7a:01:df:61:
06:92:34:2c:d4:b5:2f:0e:e7:30:69:7c:d9:13:a2:
3b:4f:bb:f3:ed:87:4d:1e:d3:76:0b:86:a0:e8:66:
01:63:80:04:d8:b0:9c:42:84:d6:81:7a:fb:e4:d1:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:90:CC:95:A2:49:1E:F8:FE:57:06:26:DF:DE:61:29:C5:7B:35
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:e6:d7:b3:c9:b9:1d:c4:34:35:37:66:5c:c6:27:7e:2d:
24:fc:65:ea:45:03:aa:1d:ba:3c:cb:7d:58:8e:1b:17:f4:3f:
1e:77:38:98:98:0d:8a:62:cc:d9:66:3f:4b:37:02:b7:d8:0f:
38:c8:d2:c8:a9:6e:15:dd:6b:74:00:65:76:31:a3:02:b7:06:
ff:fb:4a:a5:0b:af:0e:d8:39:f7:3c:b5:3d:ca:9f:7b:66:eb:
83:6d:a9:fb:6b:fe:bd:48:15:c9:40:a3:f0:a1:af:5c:d1:d0:
57:93:01:05:3b:e2:98:e1:4e:af:92:62:19:56:b0:14:6b:47:
a3:04:6a:9f:55:93:a4:23:6c:2c:85:2f:c5:14:61:b2:e0:5b:
98:be:73:8e:90:85:fd:85:c3:dc:bd:18:10:35:3a:19:78:9c:
74:db:54:1d:e8:3a:bb:3b:51:d8:8e:81:86:18:9e:e9:71:b5:
a0:9b:cb:1a:3e:7e:88:05:11:e5:3f:91:94:fd:39:2e:58:fa:
d7:12:b6:38:fd:f4:9e:dd:95:36:20:53:6f:62:19:4b:28:24:
79:86:46:61:df:58:4b:de:47:cd:aa:bc:5f:b2:84:e5:1c:b2:
bd:af:83:09:a0:b0:67:36:61:4a:fb:11:84:85:9f:70:e2:2e:
0c:7f:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:18:47 2026 by rpki-client