Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: ICESokJoATu6yAcVG5fw9xGOvbysIwx0xjyrhC2958g=
Subject key identifier: 92:FE:1D:BC:23:94:EE:B8:BD:BF:A3:AD:7C:17:6D:A0:A1:7D:FF:55
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019D2929A244DC756E5FB04251005C9ADEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: dtyx04uUtDmB3moNukQDY6nQF9PVphig/pskIXSCAw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a2:44:dc:75:6e:5f:b0:42:51:00:5c:9a:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=92fe1dbc2394eeb8bdbfa3ad7c176da0a17dff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:e6:45:97:2d:1c:94:72:15:ea:ea:0b:57:
3e:03:56:fd:97:d7:9b:33:73:3a:54:d6:85:c5:73:
2f:d4:82:5b:20:96:ca:f5:31:84:33:62:3f:08:d2:
f7:23:f2:ec:9e:e9:29:f9:3b:d8:c4:87:0d:e7:8d:
ee:69:2d:76:1a:e5:7e:47:46:b9:92:d0:f8:f2:fe:
16:3a:2e:b7:95:55:ef:57:51:54:3a:35:04:49:ee:
43:81:2c:37:6f:eb:aa:83:98:e8:57:96:c0:26:27:
c7:58:0a:32:5a:06:14:ac:40:db:88:e2:d2:0c:bc:
6e:af:24:c9:ad:d6:8f:42:0b:77:36:5d:7e:e4:87:
3f:3a:43:23:7b:b3:77:d3:92:b8:d5:17:cf:9d:94:
7f:cb:cd:e8:20:f9:e3:fd:99:d3:5c:da:f3:ce:f1:
2f:00:ed:54:50:ed:b2:5a:0b:a7:42:5c:7c:58:da:
b7:89:ae:3f:a1:f7:b7:2d:c3:31:1b:8c:8e:75:15:
1b:11:1d:78:68:9f:6d:7f:88:27:12:29:c5:4e:ed:
43:2b:e1:90:e5:fa:9a:9a:50:46:a8:8a:10:03:ad:
78:b8:ec:50:03:7e:e9:a0:d3:52:06:f6:f1:46:a0:
3a:ef:f6:f3:52:9d:1d:b1:8b:ae:da:16:5f:30:85:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:1D:BC:23:94:EE:B8:BD:BF:A3:AD:7C:17:6D:A0:A1:7D:FF:55
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:e0:5a:a1:21:53:48:f2:f1:a9:4a:0f:59:e4:d0:d9:30:
38:0f:b0:00:17:a7:32:94:af:5c:b8:c8:47:69:9e:75:a2:a7:
f1:5b:b2:cc:18:51:dc:93:9c:60:71:da:42:eb:6c:0f:04:2a:
ae:5a:c0:dc:97:28:a6:56:d6:6f:7c:bc:de:48:13:05:d4:d8:
02:08:1d:42:02:bc:21:72:2f:5a:a0:10:8e:13:21:d7:b6:7c:
61:13:6c:a3:ab:19:92:fc:5c:f6:2c:92:84:6b:bd:7e:d1:31:
a0:32:61:3d:66:eb:cd:ef:bd:63:7d:67:5e:44:de:1a:1a:f2:
66:9e:c4:7b:d9:d5:b1:14:5e:69:a1:77:7e:fb:af:fa:95:39:
2f:14:23:92:96:54:1c:50:ee:2b:ee:17:93:f9:fc:7c:d2:63:
1c:9f:ad:23:36:f1:fc:45:77:e6:3c:f0:69:24:86:8c:f5:74:
80:cc:ff:9b:09:d8:ec:8f:c2:17:09:df:c5:8a:93:16:2d:eb:
55:f5:94:d7:07:24:9c:77:d9:74:8d:3d:8b:7e:1b:fb:cb:bf:
29:4f:3b:18:c0:23:c0:8c:fa:02:3e:06:90:30:26:22:04:c0:
e4:56:84:6c:dd:8c:5d:f8:89:75:c3:fa:83:e6:57:83:92:32:
e0:5b:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:45 2026 by rpki-client