Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: ywcrUtnlp7QOiYce0cYznxn+tUw/7MJCuMfYdmnk4HE=
Subject key identifier: C5:5E:20:EC:D2:F6:7D:FE:08:66:94:12:B4:8F:C0:BC:81:A9:D7:A1
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019FA9752318B4A4C53DE4F276FE0D2322C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: ip5Kks7+Y1LMIO52j5fNj7WvNbTNA7SgUsKkoytraHE=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:23:18:b4:a4:c5:3d:e4:f2:76:fe:0d:23:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=c55e20ecd2f67dfe08669412b48fc0bc81a9d7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:a8:e0:24:88:39:e5:35:f0:41:33:e4:4a:
df:3b:fd:9e:a0:78:6e:52:6c:67:ae:3a:33:6c:d0:
5c:8f:75:e8:77:ed:81:53:00:82:a0:46:9f:82:d1:
d9:1b:90:a2:a7:b0:53:f1:85:76:38:58:ed:7b:2d:
50:5d:2d:f7:4f:e0:d8:ff:69:f6:64:bf:76:d0:b8:
5a:f9:97:d1:23:df:02:9f:1f:49:a2:bc:18:1d:c8:
28:73:d0:de:26:2e:f6:45:6d:73:6f:29:b6:3b:80:
c4:37:fd:a1:88:b6:29:ac:ad:3c:5b:14:ab:e4:0d:
61:d7:a3:bf:20:6b:3f:47:cd:d0:75:6d:67:c7:9b:
e4:8f:3c:3e:c2:0b:0b:95:26:e7:4d:e6:ba:6d:69:
9f:cb:5a:c1:1a:15:3a:d8:46:19:05:72:2a:86:6d:
fe:d4:39:21:7a:fb:d6:48:e4:07:3a:d1:31:45:37:
53:91:10:de:f2:25:80:ad:55:ab:6d:0c:c1:7c:e1:
79:0e:2f:62:0d:4e:a6:aa:c9:59:85:9f:40:dd:83:
13:79:81:b1:ca:e5:d2:a2:39:b2:2a:cb:5a:ff:c0:
6c:a2:25:b0:b8:6d:3a:ae:a4:25:53:fe:4a:56:87:
c3:d9:b2:89:b1:54:9f:97:1b:1a:65:21:ef:60:41:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5E:20:EC:D2:F6:7D:FE:08:66:94:12:B4:8F:C0:BC:81:A9:D7:A1
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:1d:59:3a:d8:e6:a8:e9:b0:75:8a:88:ab:91:1b:0f:6d:
80:c9:d2:4d:c2:fc:e9:54:ca:f9:00:8b:8d:5d:cf:a1:e5:98:
49:f1:01:e7:07:74:55:3a:19:8c:c4:05:ae:d3:0e:3f:16:60:
32:04:b3:59:4f:27:18:a9:50:cc:44:0e:5d:6d:63:27:50:18:
28:49:00:fe:32:70:65:68:18:f0:01:b0:76:6f:7f:18:19:bd:
73:55:59:5f:07:c7:0d:54:ae:cb:f7:a4:1b:c5:25:cd:ab:09:
76:e4:c9:4b:43:7c:ac:2a:b0:1f:ec:0d:57:92:11:12:94:77:
6f:dd:ab:98:06:a9:5d:b0:8a:38:9e:cd:fb:86:26:7d:55:41:
29:ad:c7:27:10:70:7d:fa:44:3e:d8:29:14:fb:dc:03:22:44:
07:21:1c:6a:bc:6a:fc:e9:60:7c:14:fe:e3:4b:85:83:46:b4:
16:d3:a4:02:1c:48:c2:77:ef:60:56:b6:d4:76:c4:5d:74:50:
41:25:f5:83:64:01:11:2c:97:25:05:d3:c0:66:06:bd:4d:3d:
96:54:9e:ee:99:2b:0a:93:50:5f:a6:17:3b:31:58:e2:61:10:
b1:34:a5:c0:0b:8b:4e:ee:7d:59:d7:42:91:92:b5:f4:4b:59:
27:a7:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdSMYtKTFPeTydv4NIyLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjYwNzI4MTYwMDUzWhcNMjYwNzI5MTYwMDUzWjAzMTEwLwYDVQQD
EyhjNTVlMjBlY2QyZjY3ZGZlMDg2Njk0MTJiNDhmYzBiYzgxYTlkN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtquo4CSIOeU18EEz5ErfO/2eoHhu
UmxnrjozbNBcj3Xod+2BUwCCoEafgtHZG5Cip7BT8YV2OFjtey1QXS33T+DY/2n2
ZL920Lha+ZfRI98Cnx9JorwYHcgoc9DeJi72RW1zbym2O4DEN/2hiLYprK08WxSr
5A1h16O/IGs/R83QdW1nx5vkjzw+wgsLlSbnTea6bWmfy1rBGhU62EYZBXIqhm3+
1DkhevvWSOQHOtExRTdTkRDe8iWArVWrbQzBfOF5Di9iDU6mqslZhZ9A3YMTeYGx
yuXSojmyKsta/8BsoiWwuG06rqQlU/5KVofD2bKJsVSflxsaZSHvYEGvbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVeIOzS9n3+CGaUErSPwLyBqdehMB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG0dWTrY
5qjpsHWKiKuRGw9tgMnSTcL86VTK+QCLjV3PoeWYSfEB5wd0VToZjMQFrtMOPxZg
MgSzWU8nGKlQzEQOXW1jJ1AYKEkA/jJwZWgY8AGwdm9/GBm9c1VZXwfHDVSuy/ek
G8UlzasJduTJS0N8rCqwH+wNV5IREpR3b92rmAapXbCKOJ7N+4YmfVVBKa3HJxBw
ffpEPtgpFPvcAyJEByEcarxq/OlgfBT+40uFg0a0FtOkAhxIwnfvYFa21HbEXXRQ
QSX1g2QBESyXJQXTwGYGvU09llSe7pkrCpNQX6YXOzFY4mEQsTSlwAuLTu59WddC
kZK19EtZJ6dzbg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:20 2026 by rpki-client