Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: QP+vCWdPv7K56TwVMRKq2FjJmPhWCAxWCCJ+Lg0/BZg=
Subject key identifier: ED:7D:20:24:A1:08:CE:C5:87:B7:6B:59:C4:FC:E7:02:A5:E0:0E:EE
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 01A12F8F896001081D7D4BC4B454953FAC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1A31
Signing time: Mon 12 Oct 2026 10:01:38 +0000
Manifest this update: Mon 12 Oct 2026 10:01:38 +0000
Manifest next update: Tue 13 Oct 2026 10:01:38 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: HI+KzSRCnHwxUvrxdUWO7D+hdpMA4O2M2K3FGQ4PJPk=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:89:60:01:08:1d:7d:4b:c4:b4:54:95:3f:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Oct 12 10:01:38 2026 GMT
Not After : Oct 13 10:01:38 2026 GMT
Subject: CN=ed7d2024a108cec587b76b59c4fce702a5e00eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:98:5c:0f:e3:44:bf:31:45:0b:f5:49:2d:
f9:ea:86:d0:b8:95:30:eb:57:82:aa:3b:d4:d2:b7:
a4:00:17:73:be:8a:12:30:66:6d:a1:f1:9d:3d:5f:
89:6b:e1:e5:2b:6c:17:83:5c:9f:ae:dc:7f:1f:ac:
fc:24:99:89:0e:13:eb:5b:a8:2f:8d:73:0a:c4:77:
65:27:81:52:d8:c6:69:b5:50:23:81:10:b1:cf:1d:
0e:4b:7a:c5:1b:9c:ab:48:29:66:c3:ae:41:63:a7:
d9:10:59:51:36:c6:40:16:3e:20:86:2b:28:4f:10:
c7:c2:b6:b2:7d:a5:b8:46:3e:97:c3:ab:59:90:62:
43:fc:ed:c7:fe:9a:22:4b:7a:d3:5b:cc:1e:ec:e9:
ea:68:2f:7f:b7:53:22:d9:fa:ff:5b:9b:6e:12:ca:
2f:03:92:e0:f0:10:f1:ab:a7:c0:f6:3d:0b:e0:0c:
7f:7d:37:99:70:1b:88:58:5b:20:1a:1f:c3:38:18:
e5:e7:15:0d:96:3a:75:6e:5c:8e:c0:2d:25:41:de:
c9:42:c4:a3:db:44:c2:25:77:24:40:83:71:e6:49:
58:8b:89:33:a9:60:86:99:b5:de:8c:d0:a8:ff:c3:
35:a9:e7:44:cb:a5:95:41:7e:e4:64:e6:97:26:1b:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:20:24:A1:08:CE:C5:87:B7:6B:59:C4:FC:E7:02:A5:E0:0E:EE
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:28:01:33:35:8a:da:ce:90:24:53:bb:74:8b:86:1d:75:
dd:ef:f5:c1:fa:b7:c1:80:ee:b3:26:aa:21:43:2b:4c:b4:37:
a2:3f:ea:f9:65:03:54:f9:aa:1a:12:0f:0c:c5:6c:94:0f:a7:
39:ac:d7:f3:41:19:79:b9:eb:26:4b:16:80:e5:9f:10:55:63:
f7:c7:f0:30:4d:d5:d3:d3:07:d9:86:52:43:08:d0:91:bc:25:
ce:72:91:6f:2b:1a:e6:f3:7e:b0:d3:25:bf:0c:59:e9:be:6f:
a1:a5:f8:23:38:d7:c7:83:14:1e:7e:aa:0f:15:85:e5:23:14:
bd:00:fa:11:c2:c1:ff:4b:d9:23:82:64:96:46:3b:8f:7c:33:
21:54:8c:67:0d:b8:0b:b5:c4:f2:1d:cd:80:77:94:60:c8:68:
51:96:73:30:ed:3e:89:e3:42:6f:41:aa:11:36:86:7d:4e:33:
73:92:25:de:69:01:68:40:8a:ab:d7:7b:07:d1:56:46:56:91:
39:7d:1c:60:57:37:60:a4:f7:5f:01:01:da:71:2a:69:51:d5:
75:c0:54:5b:31:36:f3:a7:16:0d:fb:bc:c4:8b:78:84:40:2a:
3f:fa:f2:38:59:b9:6d:e0:e0:3b:63:d9:ed:92:d5:56:21:f8:
6a:e9:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:02:45 2026 by rpki-client