Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: mFuEtEwkcg/JLkYNQi5dhvbUx0HxECm3MvLrrdEDJQg=
Subject key identifier: 91:1A:3D:5E:B8:50:8B:12:4D:50:9C:C2:AA:49:72:90:C5:C7:E0:5E
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 01A1393694F8EC9244A2AD9884DCBB8D7BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1A36
Signing time: Wed 14 Oct 2026 07:00:40 +0000
Manifest this update: Wed 14 Oct 2026 07:00:40 +0000
Manifest next update: Thu 15 Oct 2026 07:00:40 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: 6vgTgv9hP6G3LKc8aXeCv2syOdex+7XwVIaTzqyoMY8=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:94:f8:ec:92:44:a2:ad:98:84:dc:bb:8d:7b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Oct 14 07:00:40 2026 GMT
Not After : Oct 15 07:00:40 2026 GMT
Subject: CN=911a3d5eb8508b124d509cc2aa497290c5c7e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:29:2f:1d:1b:23:b1:cc:1f:aa:ff:e2:3b:
02:10:ce:af:40:65:d9:08:33:83:b3:90:45:66:36:
79:97:2e:a7:53:75:df:70:e7:6c:c6:d3:82:0d:4a:
27:f8:f9:0b:ef:b2:8a:73:ba:88:6a:43:b6:09:d4:
92:7b:cf:e4:b7:37:88:c1:6d:66:e5:59:c8:6a:c1:
e7:60:d3:d8:83:46:79:67:12:71:4f:54:2c:04:85:
32:86:df:ff:7f:48:dc:93:c0:92:a2:3a:14:70:c5:
d2:2a:4a:d2:e9:74:c7:9d:09:bf:ea:93:a1:e2:a1:
20:41:14:cc:04:88:8d:f4:0e:73:4f:bb:28:5f:d4:
b5:03:a2:ea:1d:6e:91:1c:10:41:72:0e:c5:c3:a3:
55:b7:13:a5:de:05:28:28:29:06:aa:cd:53:02:45:
b1:a6:20:36:c3:b8:56:a3:d5:f5:0c:eb:04:0e:7b:
31:60:db:08:55:ac:08:6a:2d:c6:fd:22:63:0f:1f:
aa:fb:ab:32:8a:2d:d7:82:5e:b4:94:2a:a6:3d:b6:
88:e1:b1:54:c3:73:70:e2:7d:69:77:49:89:fb:6c:
fe:8c:0b:c5:fd:3c:9a:37:1c:f2:b0:ff:f9:52:d7:
8e:8b:25:62:62:03:b8:a6:ac:8c:bd:a2:44:2c:67:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:3D:5E:B8:50:8B:12:4D:50:9C:C2:AA:49:72:90:C5:C7:E0:5E
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:7b:65:dd:a4:50:26:c5:cb:63:9f:12:77:d4:4c:d3:72:
23:e6:a5:32:e1:ee:73:35:59:4e:7e:8e:a0:14:05:95:90:50:
af:89:69:ad:02:6f:25:5e:f8:81:8a:d3:3d:58:ca:d2:f4:41:
07:8c:91:44:8f:e4:5a:31:e2:1e:89:d0:06:dc:51:3d:07:c1:
05:96:7c:80:34:ae:ab:00:57:fa:ed:44:48:8f:d7:44:25:73:
df:7c:40:2a:a1:6d:36:14:1d:0a:d8:69:b1:0b:ea:d6:ff:b7:
b9:26:6a:95:ea:a3:87:31:a2:fa:26:d0:b5:d8:40:71:5a:be:
2b:fb:36:1f:3b:05:d6:ca:e9:51:fd:26:5d:b5:b8:c7:0b:88:
d0:e9:33:d6:ed:a3:c0:cf:48:8e:4b:3b:37:ba:6f:3e:99:e8:
77:4f:65:a9:a0:12:37:93:82:24:bd:f3:3c:f8:42:46:d5:d7:
02:3d:61:ca:24:26:83:fc:98:00:70:a9:75:47:42:4b:96:91:
05:8c:32:7e:20:57:a9:a2:23:f1:a5:a7:25:5d:05:7a:64:39:
65:bc:07:f2:a2:d5:1f:2e:6d:aa:77:61:8a:7f:70:26:04:05:
aa:7f:2a:63:59:06:8d:90:79:f9:a3:27:1b:88:06:34:e6:cf:
5b:c6:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:07:51 2026 by rpki-client