Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: 0TpzNAntk8sSE+HFk7gktDrRdfjarHVXGaWAL3yEEq0=
Subject key identifier: 2B:F0:84:D7:B8:FD:59:3E:A6:70:74:97:5B:37:CA:0B:08:7A:C7:31
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019D265EE281201675C96E13B234548D36FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: DHGW2SZUM9HJBszIPrFas3onp/AmogHDm68SbzYNOmk=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e2:81:20:16:75:c9:6e:13:b2:34:54:8d:36:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=2bf084d7b8fd593ea67074975b37ca0b087ac731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:68:5d:73:f0:72:17:a6:95:d9:f7:7d:2c:
cc:69:ee:3f:7e:d5:d4:2b:76:1c:24:73:47:c1:93:
c0:ad:8c:23:fd:f9:59:98:04:36:31:a2:be:a0:1c:
2a:92:84:3b:28:9f:68:67:59:6e:b3:e1:08:07:09:
57:26:ce:00:1e:c5:5a:16:b1:45:4b:c1:84:ee:f0:
70:f4:7d:2c:7a:de:0f:80:80:07:17:7d:e3:3f:73:
e6:dd:a5:23:88:cf:c0:fb:94:f9:06:b5:63:bc:3d:
c8:df:d9:7f:11:64:78:df:cc:e3:d5:54:6a:2d:5e:
ac:8a:f4:f8:c7:94:14:6b:2b:7c:e3:af:2a:b4:d8:
de:ce:63:cf:b2:d4:60:61:b9:cb:f1:9e:18:ef:f0:
7c:f4:0f:61:de:55:4c:c8:a6:e3:1c:34:69:05:b4:
f3:ee:30:1c:63:17:91:bb:96:37:c7:38:91:d7:83:
d9:71:6c:f7:08:37:8f:90:42:0c:15:28:e6:b0:e2:
66:6d:45:a9:ca:ec:c4:7e:14:9d:d1:71:45:9f:ef:
f1:c5:a1:b8:25:b3:49:74:04:ca:18:21:03:db:44:
b7:1b:41:18:7a:59:6c:88:b2:97:fc:fa:c4:3b:e0:
92:ea:35:8e:94:c5:16:22:22:74:48:f8:9e:70:ca:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:84:D7:B8:FD:59:3E:A6:70:74:97:5B:37:CA:0B:08:7A:C7:31
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:bc:f8:5f:4a:61:d2:b7:f0:05:26:8b:18:79:c5:e5:52:af:
db:15:22:26:86:1f:16:01:44:c8:46:a0:e1:be:43:bc:b2:2a:
1a:4d:a3:b5:34:83:7e:d6:6b:11:fc:27:e6:f6:bd:d6:88:11:
18:23:6a:24:e1:2d:ba:67:ca:f3:f9:e1:db:c2:a3:4a:01:12:
38:ab:83:71:2d:db:3c:d8:de:33:5b:9f:e9:c6:8b:7a:0a:eb:
0b:f5:21:4b:90:69:b1:30:da:ef:9d:b3:a7:cd:79:b6:fa:cb:
34:11:bb:3a:b3:2c:bb:1b:6a:32:aa:dc:ff:61:8a:27:27:9b:
e1:35:6f:61:a2:00:d1:6c:51:f1:20:fe:81:6e:74:71:88:26:
12:5c:ce:3c:f7:7b:5b:f6:a6:8f:8e:13:b1:9b:70:14:3d:ab:
c0:9e:0b:18:c3:d1:58:30:1a:7d:47:2a:38:c8:4a:8c:d3:bd:
42:e0:b7:6b:0c:fd:42:64:f6:76:25:9f:0f:9c:ae:ae:c6:27:
0f:27:16:01:a9:5d:60:22:25:44:23:f2:18:a3:a2:a8:ee:49:
e8:2f:b0:1a:05:76:32:b4:68:2b:d2:27:81:f3:18:df:5d:5a:
db:e2:58:28:18:ae:7c:b6:98:c3:60:46:15:1b:66:cf:19:ea:
0f:41:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:55 2026 by rpki-client