Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: 5pcJeOjE+oYdfHMea1NLgGn5ECNOLMLh98xZb1JNTkY=
Subject key identifier: 64:7A:91:26:18:12:F3:8E:9D:1F:CE:0B:38:90:D1:6F:7E:4B:6B:3A
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019D9A3E0FEF67E769EA8D963152366E3BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: gpiSyrW+EbFKUITpMaAjX/FmffpfWOeZb3AMpj37lTg=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0f:ef:67:e7:69:ea:8d:96:31:52:36:6e:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=647a91261812f38e9d1fce0b3890d16f7e4b6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:4d:20:02:41:97:1f:2a:dc:1e:87:13:04:
27:4a:96:5c:58:8e:b8:56:da:00:0a:74:aa:68:85:
2a:c1:4d:62:67:94:c0:96:f8:cf:6a:11:da:3e:c0:
fe:c8:34:01:f6:da:86:8a:be:eb:12:06:83:94:38:
fa:c3:14:7b:f3:1a:31:1a:7e:06:3a:7f:53:8f:21:
5e:e3:4a:28:c3:dd:cf:0a:3f:42:da:0b:80:3b:d9:
ad:5e:d1:61:3f:8a:b5:cc:d9:71:21:18:14:f4:93:
16:36:d0:3b:4c:63:00:70:8c:28:63:97:2c:ec:a1:
c8:02:24:14:aa:be:ee:1d:6c:6d:19:ad:4d:02:93:
d2:20:ba:c9:78:1d:2e:52:12:6a:a6:66:fe:ad:b6:
97:2b:3f:a4:71:8d:a2:cd:2b:64:af:3e:a2:64:e3:
3d:74:97:bb:b5:1e:39:a8:05:ff:e7:11:3d:e1:d3:
a6:a7:2e:62:61:0a:1d:be:54:c5:32:8c:9f:86:53:
d5:9a:af:1e:f6:26:3b:eb:df:5b:32:ef:7d:fd:88:
2a:a3:0e:0c:90:ad:9c:9f:76:bd:a9:ba:9f:47:79:
d6:8b:f7:1f:44:57:b4:c2:16:b3:01:78:d8:a7:b3:
6a:f3:76:c2:fb:27:b5:46:d8:08:82:31:e8:c8:3d:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:91:26:18:12:F3:8E:9D:1F:CE:0B:38:90:D1:6F:7E:4B:6B:3A
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c1:59:37:c8:7c:bc:6d:e6:a7:95:96:b9:7c:cc:86:01:c9:
16:2c:60:71:c1:c1:9f:8f:fd:fd:8d:80:f7:a9:25:25:12:28:
c8:29:12:11:40:80:f1:1b:af:88:93:18:03:34:56:e7:a2:3a:
3f:c1:a4:b1:36:06:7c:c7:e1:d3:ec:14:c6:2b:c5:13:8b:bf:
66:36:33:f2:d8:f5:9f:30:15:0c:31:a3:79:ff:3b:33:b5:cf:
11:7f:85:89:dd:cd:68:ed:6e:d4:4f:2a:5f:c2:26:31:97:99:
fe:05:7c:73:07:dc:eb:b1:56:8f:49:a6:d2:ab:cb:f6:73:44:
cb:de:e3:fa:e0:76:f6:df:da:e7:b4:2f:35:cf:10:0c:a8:f1:
f5:fa:29:56:e5:a6:39:3c:1a:7d:3c:80:38:c3:28:d4:29:6d:
04:94:13:55:95:69:d9:14:a3:a4:31:e9:9c:81:4f:5d:c7:a3:
a1:46:a7:58:c5:60:f9:20:56:80:c3:27:a8:76:fb:6a:b5:96:
f7:a0:0a:b8:80:b5:4e:e9:12:66:1d:21:68:df:25:df:df:79:
c7:4e:5d:73:cf:29:ab:2f:53:22:66:88:e8:c4:54:39:a3:14:
1f:b4:0d:bf:29:ad:84:b1:03:75:8f:06:29:80:e7:0d:1c:31:
5a:89:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:10 2026 by rpki-client