Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: anub09jQMAPp7aDwDCPvtcZpMO3ce/sdQMgzrEG46YQ=
Subject key identifier: 05:73:7F:E1:8B:70:2D:5D:0A:75:21:44:CB:B7:21:7F:D1:75:E5:D7
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 019D2929346E71433B3FCD081CDCBF4B7B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: 30veFJcZt5gYyATK3kLXTpDt01M.roa (hash: J0kpnYEYKB51xy6rnF6SvnRNcgOm8w3XRsDftym/CFs=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: vz3QM/oyg9XasYTK5llDXSvvEJRiVlv8hSPh9FzRhG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:34:6e:71:43:3b:3f:cd:08:1c:dc:bf:4b:7b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=05737fe18b702d5d0a752144cbb7217fd175e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:7d:28:77:63:76:e6:22:5f:7b:5b:08:0c:
f3:2f:51:8a:02:67:a1:78:90:b7:9d:93:47:42:6e:
53:35:7d:76:b0:7a:4c:cb:d8:40:1c:b7:d3:e4:82:
07:68:ee:16:2f:c0:0d:6f:c2:36:ac:33:78:e4:49:
bd:f5:2a:67:e9:bb:ad:2d:37:42:b2:ab:db:fa:91:
df:ce:5a:92:a5:02:b8:92:25:90:42:1e:66:f2:ec:
a6:5d:2a:42:e5:de:a8:49:66:97:a6:c9:ae:35:5c:
1d:19:d4:7c:40:2b:3b:35:82:62:4b:e3:de:20:60:
ac:55:fb:a3:de:70:f6:3b:4b:ed:6a:00:4d:b5:d6:
af:09:5f:f9:d5:de:64:f8:02:53:c4:b2:6a:b5:5c:
c9:94:1b:66:11:19:3e:b9:f0:d6:cb:5d:90:6f:80:
ff:30:2e:2b:20:44:9a:15:3a:bf:34:fc:ea:f3:1d:
9f:87:5b:9b:74:87:b4:87:e4:97:eb:0e:be:66:f0:
53:cf:5c:64:8c:59:0b:0b:7f:59:2e:50:29:cd:81:
38:f5:80:d6:a1:1b:63:07:75:f7:54:8c:b4:07:22:
bf:61:e7:50:32:33:72:d0:12:b3:bb:ab:fc:26:39:
a9:81:8b:72:02:0b:00:f7:d2:f5:19:7d:ed:ef:87:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:7F:E1:8B:70:2D:5D:0A:75:21:44:CB:B7:21:7F:D1:75:E5:D7
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:e5:ad:22:10:de:95:b3:b8:25:fb:4e:e0:d2:76:5e:a7:
b1:31:87:73:b4:eb:a6:30:71:7d:ef:a5:68:5e:6c:68:2c:65:
6d:13:66:c2:fa:9c:1e:37:33:3c:d8:05:9b:7c:b7:c9:f9:b1:
68:88:b9:52:fe:e2:a1:00:fc:f8:da:36:e4:11:8c:23:ff:eb:
80:ac:0a:8e:10:68:a6:1b:b4:31:45:3f:bf:29:08:d7:13:c6:
40:19:f8:c9:48:ed:6b:27:e5:f8:c5:05:13:e9:09:5d:55:c2:
d9:46:84:20:5f:28:f8:54:00:7b:0a:0f:ff:4d:ce:94:e6:89:
d1:42:f4:9a:8b:d6:8c:84:63:33:5e:43:9d:c7:34:e6:67:2f:
b9:d0:05:3a:d3:33:72:2e:b5:dd:d3:fc:e7:2a:28:be:c0:db:
8d:7d:69:29:f9:4d:67:a7:0d:54:12:e0:2a:40:57:33:cb:c4:
cf:a0:b1:11:3c:2c:7b:d0:06:6a:00:84:06:14:af:67:c6:92:
11:70:21:b4:3b:49:30:6a:2b:03:13:6a:63:7c:4a:47:cf:a2:
fe:6a:22:ff:b0:64:6b:b9:22:98:82:04:8f:1e:82:bd:41:06:
d4:7b:d7:f9:b2:08:86:80:aa:eb:96:84:7e:dd:41:35:1b:90:
67:48:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:08 2026 by rpki-client