Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: KbSZVwDLK54cuiWFPLdS5p4fd/A1oI5Tt3VgWH7pTm0=
Subject key identifier: E0:B8:C3:C5:05:A7:9A:8C:F6:BC:BE:50:27:8F:3A:EF:23:8A:93:F4
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 019CAAC701A2F453D28AF841F368F12E5092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 07C7
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: RD8203zHL3K6gxmeNWt32Bem0yolyzCUGJPis9jpt5c=)
2: omCKLPBL-sX0T1F0arfYXvQOCR0.roa (hash: Y7NRh10SXgE8EspE8su8BnYaod8821/L39MdUhs+QAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:01:a2:f4:53:d2:8a:f8:41:f3:68:f1:2e:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=e0b8c3c505a79a8cf6bcbe50278f3aef238a93f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:ab:95:7e:f7:4a:57:2c:a3:85:41:bc:47:
05:e7:e7:2d:44:4d:16:c2:f7:e8:d0:c7:9b:e7:d3:
d9:82:c2:b9:cf:42:ea:c1:3c:81:25:91:36:f5:6a:
43:47:22:9e:0e:ac:89:27:c7:10:78:83:e8:1b:4e:
bb:26:bd:c3:c6:37:a2:3a:3b:08:25:7b:83:64:ba:
eb:d4:ed:3b:68:12:91:b6:f3:34:05:e7:b3:3e:50:
0c:85:dd:8f:d9:d7:92:80:27:0d:d0:0e:9c:72:4e:
cb:b5:f5:95:0f:62:c7:d1:ea:69:84:b2:79:9c:50:
36:70:25:1b:06:c4:73:83:20:3a:24:25:2a:53:ee:
28:31:e4:b7:67:bb:6e:f4:66:c0:03:8e:0e:b9:87:
4b:04:12:85:17:92:fa:f2:38:0c:10:43:73:1b:a5:
fc:72:9f:c0:2e:19:d7:53:a6:f3:3c:d0:f3:ec:04:
94:85:48:97:8d:38:0c:da:ce:1d:86:39:4f:b2:ae:
f8:fc:ca:32:39:09:4d:e6:34:de:83:8c:52:ce:cc:
3f:7a:b7:c5:67:e8:68:6d:66:55:b2:f2:e6:03:69:
c0:78:1a:b0:11:c3:5d:cd:1b:1c:03:8e:93:37:4a:
54:d9:45:df:94:43:60:26:80:22:63:59:1a:54:c9:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:C3:C5:05:A7:9A:8C:F6:BC:BE:50:27:8F:3A:EF:23:8A:93:F4
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:47:26:c1:27:c9:2e:8e:13:27:6c:6b:7d:78:01:55:7f:
10:04:7a:5f:01:65:d4:bd:29:d1:63:18:12:48:56:8f:75:10:
9e:22:bd:26:a7:c3:9c:5d:51:9f:69:71:3d:97:d8:7f:00:57:
cf:c2:31:c6:45:ea:b2:09:90:86:c2:19:89:e9:94:c4:de:8d:
03:b1:63:e4:c8:18:22:1a:d1:2e:43:ab:13:88:eb:39:2a:bd:
98:cd:5d:2b:e0:84:ad:47:53:dc:c2:a5:8d:47:56:d3:43:00:
78:7b:b7:1a:51:b9:e6:1d:67:c3:89:46:71:0c:c8:bc:0f:46:
67:27:bc:61:35:08:7c:9c:84:0f:ed:19:ab:64:eb:f8:9a:ca:
1b:24:95:c0:57:dc:d7:54:5a:90:54:44:da:cd:58:da:2f:50:
87:0b:f4:ed:b6:9f:ed:00:44:a5:91:a0:78:bd:1b:98:97:55:
06:90:8b:bc:0d:06:2f:ae:47:b8:14:e4:ad:93:c0:80:00:fe:
25:d9:c4:87:21:44:a6:3e:cc:fe:fc:3a:aa:0c:ea:67:20:7b:
03:a7:c2:c6:13:18:4d:a6:e6:1e:d6:96:08:f0:81:2a:28:a3:
04:40:2b:06:fc:66:64:df:af:ba:06:5e:e0:28:37:1d:4b:24:
5d:61:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:42 2026 by rpki-client