Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: ym6VaUiaiamrfd9cXKeEzAQp+uNb0h8614R4ZPJXQfY=
Subject key identifier: 05:36:A5:89:33:B4:93:16:5A:54:18:7C:2D:7A:24:A6:2D:6D:12:BE
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 01A0D9839E071D2E5AB43707A57421154D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 17:01:16 +0000
Manifest this update: Fri 25 Sep 2026 17:01:16 +0000
Manifest next update: Sat 26 Sep 2026 17:01:16 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: JFj4KXEZ7JuPRd6OHr0YxEmsLEBNsK6ITGDwF5enDvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:9e:07:1d:2e:5a:b4:37:07:a5:74:21:15:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Sep 25 17:01:16 2026 GMT
Not After : Sep 26 17:01:16 2026 GMT
Subject: CN=0536a58933b493165a54187c2d7a24a62d6d12be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:2c:39:35:41:b5:04:2b:2a:b8:65:16:81:
09:e5:c1:64:3b:ab:87:14:12:d4:4f:ce:66:b9:b8:
67:21:7c:bd:6f:fa:7b:39:80:bb:d3:77:1d:99:98:
15:81:19:3e:63:d8:94:ab:d0:2a:f4:cf:0b:54:eb:
56:91:ae:d2:80:41:83:42:a9:cd:e7:b8:84:ee:bb:
8e:63:0a:b4:64:c3:a2:2e:2e:6b:df:cb:47:82:2e:
8f:7b:a1:fd:95:4f:b8:e9:3a:85:76:3f:65:45:19:
50:35:e3:08:37:64:31:ff:ac:84:93:81:56:ff:bd:
e6:95:5f:ef:23:c3:0d:cf:14:21:ae:25:bc:cd:2e:
a2:81:e4:22:91:c8:09:81:2c:4f:ba:7b:17:ab:b3:
52:0f:b1:26:50:65:80:ad:25:8e:5f:19:90:ef:a5:
21:7e:74:1e:e5:77:ca:71:a7:20:53:b2:32:fd:28:
b1:8c:cc:3d:05:25:9e:26:b6:76:f6:1c:17:72:bc:
c4:d6:9f:d0:8e:8c:e0:36:2f:56:d7:3d:a7:0b:f5:
b2:89:21:05:5d:5a:b1:6d:db:a2:9b:81:03:a1:43:
1d:25:e3:39:8a:38:e9:f5:b8:bb:f7:d4:8d:33:d9:
da:b2:45:c8:46:4d:e1:9c:7f:de:b3:4b:38:4f:e2:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:36:A5:89:33:B4:93:16:5A:54:18:7C:2D:7A:24:A6:2D:6D:12:BE
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:70:97:4f:e5:79:e8:92:e7:33:98:72:49:fd:fb:b2:11:69:
1e:7a:3c:3a:d1:d2:18:ef:6c:99:2d:5e:30:11:98:2a:4c:26:
d9:07:d1:94:ba:25:3c:17:ec:7e:ec:55:4c:25:83:76:c5:21:
78:48:a0:ec:a9:cc:09:c3:ff:67:7b:5b:56:fd:d8:f0:f8:3d:
15:e5:c5:09:58:d3:dd:2f:37:ea:7b:db:c6:97:c1:b1:9e:a3:
09:4f:91:b1:22:2d:40:a0:31:03:ef:b5:e5:05:1f:fc:06:3c:
42:8d:92:96:7e:91:3b:ea:e2:c5:14:94:00:04:98:fd:45:25:
f6:d0:4a:90:72:6a:63:45:f0:d8:f7:b6:f0:2c:cc:93:67:32:
7f:a9:3b:2e:dc:f0:30:29:5a:b5:86:c3:58:10:20:73:ac:c8:
a5:77:fd:65:82:cb:f8:ed:66:62:ad:fa:8f:5a:72:2d:39:a7:
ba:5f:f8:8e:64:ba:45:43:be:19:8f:4b:37:64:cd:16:16:03:
4c:e2:a8:96:1e:c9:29:6d:70:e0:b6:c4:dc:3f:b9:54:6e:7e:
8d:98:aa:83:48:54:21:ea:b3:d8:74:e1:a3:73:10:05:0c:04:
30:ea:9d:8f:bb:9a:61:87:6f:b6:16:9a:93:4d:ab:e5:3d:fb:
2e:ae:7b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg54HHS5atDcHpXQhFU17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjYwOTI1MTcwMTE2WhcNMjYwOTI2MTcwMTE2WjAzMTEwLwYDVQQD
EygwNTM2YTU4OTMzYjQ5MzE2NWE1NDE4N2MyZDdhMjRhNjJkNmQxMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoksOTVBtQQrKrhlFoEJ5cFkO6uH
FBLUT85mubhnIXy9b/p7OYC703cdmZgVgRk+Y9iUq9Aq9M8LVOtWka7SgEGDQqnN
57iE7ruOYwq0ZMOiLi5r38tHgi6Pe6H9lU+46TqFdj9lRRlQNeMIN2Qx/6yEk4FW
/73mlV/vI8MNzxQhriW8zS6igeQikcgJgSxPunsXq7NSD7EmUGWArSWOXxmQ76Uh
fnQe5XfKcacgU7Iy/SixjMw9BSWeJrZ29hwXcrzE1p/QjozgNi9W1z2nC/WyiSEF
XVqxbduim4EDoUMdJeM5ijjp9bi799SNM9naskXIRk3hnH/es0s4T+KfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU2pYkztJMWWlQYfC16JKYtbRK+MB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3HCXT+V5
6JLnM5hySf37shFpHno8OtHSGO9smS1eMBGYKkwm2QfRlLolPBfsfuxVTCWDdsUh
eEig7KnMCcP/Z3tbVv3Y8Pg9FeXFCVjT3S836nvbxpfBsZ6jCU+RsSItQKAxA++1
5QUf/AY8Qo2Sln6RO+rixRSUAASY/UUl9tBKkHJqY0Xw2Pe28CzMk2cyf6k7Ltzw
MClatYbDWBAgc6zIpXf9ZYLL+O1mYq36j1pyLTmnul/4jmS6RUO+GY9LN2TNFhYD
TOKolh7JKW1w4LbE3D+5VG5+jZiqg0hUIeqz2HTho3MQBQwEMOqdj7uaYYdvthaa
k02r5T37Lq57xQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:30 2026 by rpki-client