
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: P/Ie+2rdFoFu0Ry1PnQp3F8wjVnNrkSSW1u8ycimMB8=
Subject key identifier: 17:A0:E4:40:F3:EB:16:8C:75:2F:3D:5C:FB:B0:E8:6E:49:BE:64:04
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019CAEA385E133CF61FDDCF649E80FB74F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 098C
Signing time: Mon 02 Mar 2026 13:01:18 +0000
Manifest this update: Mon 02 Mar 2026 13:01:18 +0000
Manifest next update: Tue 03 Mar 2026 13:01:18 +0000
Files and hashes: 1: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: 7Be9b7Mn5k4bVGmhZB9EWCBzktXHO7pxQC/XomBUgoM=)
2: kMOSZWtiewXuTyw15Rj0qERqvDU.roa (hash: 0sRuOEf/juDtnk/XmtOYHhmqAObydjSuiq84TabvvMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:85:e1:33:cf:61:fd:dc:f6:49:e8:0f:b7:4f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Mar 2 13:01:18 2026 GMT
Not After : Mar 3 13:01:18 2026 GMT
Subject: CN=17a0e440f3eb168c752f3d5cfbb0e86e49be6404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:e8:7d:41:fa:8a:ce:a4:e9:6e:59:a2:0b:
02:bf:ac:60:61:48:41:f0:46:78:02:1a:a9:75:ef:
1b:29:bf:72:02:c7:f4:8d:70:66:ea:2a:c6:3c:55:
6e:ba:a9:ef:d7:df:3b:ca:6d:c9:bd:0d:9b:cb:ec:
e4:60:0f:e5:01:88:d2:a6:04:0f:df:90:23:9d:da:
52:c5:00:eb:ac:67:fe:0b:4a:06:e3:92:79:22:1f:
02:75:f4:83:30:6e:66:09:0b:42:48:fb:c8:c0:db:
5a:7e:29:8e:84:04:e0:86:6e:9b:2a:54:42:3c:1f:
b5:8d:49:fb:50:a5:38:67:5c:50:e2:27:ea:f8:41:
8c:22:72:2c:8c:82:7e:59:a5:8e:53:a6:39:82:0d:
c8:3f:b1:15:70:b3:13:30:00:58:58:80:d9:0f:ae:
15:fa:89:e8:79:8f:fa:98:17:5d:d0:e5:e0:5f:2c:
54:aa:05:8d:83:dd:24:62:55:3e:56:94:9c:9e:19:
d2:75:3b:a2:2a:5a:8d:4c:f8:d5:14:77:3b:5b:40:
2b:d6:60:c3:fa:e6:b5:76:13:71:d7:ca:a4:16:60:
17:a9:5c:e6:76:9c:29:41:81:2d:87:9a:6a:14:9a:
9b:f1:69:b9:7b:4b:2c:74:0e:f9:31:64:eb:70:2a:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:E4:40:F3:EB:16:8C:75:2F:3D:5C:FB:B0:E8:6E:49:BE:64:04
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:65:b6:ac:29:e6:de:85:1d:6f:14:1d:d8:ed:20:05:04:9d:
62:2d:95:79:e0:75:a2:57:b4:e9:2b:64:94:e5:68:18:e5:bd:
30:ca:55:86:95:51:c1:a4:88:e3:00:06:f7:0a:cf:ae:d6:af:
15:c5:30:01:94:89:07:87:27:32:16:bf:07:3d:fc:9b:9b:2a:
81:2f:57:b9:02:83:d0:39:8a:b7:2f:39:24:cf:79:0a:02:bd:
28:75:78:f9:bf:f7:8b:34:2c:b0:a7:62:47:36:f7:87:13:53:
86:f7:3e:56:f9:89:ce:dc:db:c1:bc:af:2e:8f:56:8c:f6:8b:
6c:ab:8e:82:6c:20:ba:1c:22:97:22:6d:55:8e:f1:d9:bc:e9:
35:30:3e:ec:dc:5b:73:c5:dc:73:21:b8:d8:05:53:1a:c1:4f:
9c:33:ef:a9:f0:78:b6:69:bc:77:6e:2d:1c:99:ec:c0:69:8d:
c2:84:44:b2:b4:48:1e:39:30:e4:51:a4:b1:a2:b6:85:c0:a5:
7d:02:4b:97:15:6f:c2:ee:c5:a7:22:07:66:a0:3d:3a:95:65:
6e:9d:51:46:91:fd:57:a9:c2:f9:f2:13:f8:25:0e:8a:a1:de:
59:2e:c3:82:6d:d1:31:78:52:0f:c2:51:b1:1a:4f:a0:66:92:
66:17:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:37 2026 by rpki-client