Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: ptOLF9wofJZQWbUR98bj3UmE5js+sHY54fvRGNCHBdM=
Subject key identifier: CC:A7:93:79:8B:7A:8A:65:CA:41:AD:EF:43:49:AF:D1:B9:8C:EC:F3
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019CAAC6117B56FB5256CBBD7BE01FC2E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 19:00:33 +0000
Manifest this update: Sun 01 Mar 2026 19:00:33 +0000
Manifest next update: Mon 02 Mar 2026 19:00:33 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: AmEdqBuBMKkyJNNT3M9pRSziW0teWwKcfgbsW/lek74=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:11:7b:56:fb:52:56:cb:bd:7b:e0:1f:c2:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Mar 1 19:00:33 2026 GMT
Not After : Mar 2 19:00:33 2026 GMT
Subject: CN=cca793798b7a8a65ca41adef4349afd1b98cecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:29:80:9a:85:9a:e5:7e:fc:b0:96:96:3e:
15:4f:b3:d1:81:94:a0:9c:16:d2:aa:80:a8:58:31:
f6:10:f3:d2:54:1a:1a:55:4c:4c:54:ea:26:42:7e:
42:ee:24:71:b9:8f:fd:64:fa:0f:99:cb:22:c1:1f:
b5:ef:0b:1f:10:eb:fe:f0:6c:ec:84:8a:a6:29:d1:
78:b6:25:c1:ce:51:19:a6:b9:5b:89:af:a4:4b:57:
57:da:5f:af:f3:d2:1e:c7:2a:9b:4a:37:54:10:15:
bb:e8:c3:88:5e:fa:78:da:5c:36:cd:04:84:04:7f:
b9:58:95:d4:2a:e9:78:eb:8b:e2:78:e5:c2:cf:7d:
67:e7:1d:37:2b:96:a6:b5:39:5f:c1:51:06:91:01:
7d:3a:9f:02:79:7d:3a:53:0e:d7:70:6f:c8:9b:9e:
e0:ec:b4:41:f9:f7:09:10:01:f8:a3:7d:77:33:f4:
7c:92:d2:98:f0:c9:f0:ef:d7:a9:b1:fd:9c:94:26:
98:1e:91:a0:ed:e5:e1:08:2f:16:2e:8d:f2:7c:74:
6e:db:f1:b5:78:7e:89:80:fc:b5:d9:f4:8e:e0:de:
eb:62:0b:fb:d6:ed:0b:90:1e:bb:f0:0e:7e:06:b0:
50:e7:bd:b4:61:66:72:9f:62:d4:55:b5:ea:42:62:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:93:79:8B:7A:8A:65:CA:41:AD:EF:43:49:AF:D1:B9:8C:EC:F3
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:a4:16:e1:98:aa:fb:4b:9e:55:da:a6:87:02:d8:29:44:4f:
57:a3:55:01:5a:d4:f3:e1:a7:6e:9a:f7:fe:cd:00:ca:6d:fc:
07:32:81:82:e2:20:ac:98:af:d4:87:60:55:20:54:95:8b:06:
97:7f:06:8e:47:f4:01:80:9f:2f:3f:95:82:35:19:14:63:b4:
9f:f0:a6:7d:95:4c:39:dd:4b:d8:7d:e7:dd:1e:14:f5:2d:fb:
9e:42:35:96:f5:b3:52:ec:55:72:6e:54:9a:eb:c6:37:c9:5b:
83:f6:95:48:a0:ad:cd:82:71:98:22:90:a1:1e:c8:7a:17:6e:
cb:c1:cb:34:2d:cc:9a:cd:23:d2:14:a5:6c:4b:38:a0:41:e2:
42:ec:b2:47:83:f9:46:07:29:ff:00:e5:ff:62:50:b9:4b:4e:
9a:f7:4a:e5:5b:67:ef:d6:57:13:30:77:88:e2:5d:1b:55:9c:
84:03:91:74:32:18:72:15:53:42:bc:46:3c:d4:cf:56:c6:42:
8f:b4:ad:b2:27:e8:37:eb:ae:19:5f:56:0c:fe:f8:59:e9:f4:
6f:6c:aa:7b:91:be:c6:48:77:05:14:de:47:b9:29:6d:94:d2:
13:98:94:03:cb:00:c6:83:67:d8:47:1f:a4:3d:e7:39:82:5d:
63:7f:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:11 2026 by rpki-client