Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: bnBoFfXu14RTIp1YOQ8o6WnLqMMFf40Nk6w9x3rmVmo=
Subject key identifier: 04:07:BC:C8:33:58:E9:42:99:5C:E1:9E:1A:69:70:9E:AF:CF:9F:3B
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019D9B197599A3B9B111D655D9CAED3C642E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 11:00:30 +0000
Manifest this update: Fri 17 Apr 2026 11:00:30 +0000
Manifest next update: Sat 18 Apr 2026 11:00:30 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: aPR5mcAmWeWEo/hWDejsJNzuS7/PD/95b4GKYPiw7nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:75:99:a3:b9:b1:11:d6:55:d9:ca:ed:3c:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Apr 17 11:00:30 2026 GMT
Not After : Apr 18 11:00:30 2026 GMT
Subject: CN=0407bcc83358e942995ce19e1a69709eafcf9f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:c0:48:99:4f:0b:40:80:89:c1:99:b7:a5:
b8:cc:43:36:e4:ef:03:55:78:79:7e:d6:27:f6:1a:
b6:bf:cc:54:0f:20:27:a2:6e:33:f7:31:b1:70:6d:
01:9a:8b:53:5a:0f:0a:bd:b1:54:21:be:ac:fd:c9:
4a:68:19:4b:2b:e2:a3:f9:a5:64:70:9f:8f:6b:7d:
14:45:95:bb:2e:00:aa:1f:10:13:6c:df:f3:53:84:
03:8d:d4:fd:cf:b0:f5:15:db:82:53:d3:09:06:75:
bb:c1:63:77:9e:7d:07:fb:6e:ed:d1:e4:f2:cd:6d:
d3:35:ff:23:07:d5:a8:bc:f1:ba:64:c3:ef:84:11:
c3:3d:a7:dc:27:cb:78:e1:eb:ec:0a:41:a9:a3:6f:
93:c4:52:7c:bc:92:57:52:2a:5d:de:2a:79:83:ec:
33:bf:01:04:e1:06:85:00:a7:16:b2:78:46:b5:5f:
c8:3b:47:4f:a6:47:f1:f6:b1:f5:0c:b5:6b:90:e0:
29:b7:8e:c2:d9:97:73:9d:a7:76:b4:1c:bf:a9:1b:
07:d0:c9:21:06:ee:93:be:c3:a1:2b:51:60:b5:59:
86:40:40:ea:92:bf:f6:8d:63:59:6d:96:bb:11:88:
ff:d9:81:c1:ab:8c:0f:d8:75:e9:11:2b:ca:a7:21:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:BC:C8:33:58:E9:42:99:5C:E1:9E:1A:69:70:9E:AF:CF:9F:3B
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:b6:53:0f:9e:29:b4:90:06:3d:47:c5:e9:e7:5b:73:b7:
4c:ee:cc:d7:64:b3:99:ed:20:9a:1a:36:d2:a5:2f:f6:61:aa:
0c:23:56:a8:3f:87:20:f3:80:fd:ac:18:74:c8:5c:d4:b9:04:
88:6d:72:7d:0f:c6:e4:33:56:28:98:f2:05:76:35:7a:6f:c1:
91:c1:a3:0d:a1:b4:3a:58:f3:97:a4:0e:9f:e4:9e:55:71:81:
9d:4c:8f:02:54:d8:77:ca:27:a8:fb:82:0b:a9:53:95:80:d1:
00:26:4f:41:8f:2b:24:64:95:64:d2:b5:43:73:6a:68:93:9d:
90:8e:11:5f:05:9e:f3:fc:ba:f5:5c:32:1f:66:be:33:63:83:
31:28:c1:cc:38:5b:f4:ea:f7:f4:ac:dc:60:c2:12:f9:85:6e:
83:b5:5f:b3:ec:7e:58:c5:de:04:bc:e4:4d:cc:88:98:ca:8a:
1e:ca:10:53:52:8e:6d:f0:cd:bd:a2:76:d3:33:0a:45:d9:ed:
41:fd:e4:2e:9f:59:89:94:66:11:75:60:cb:1e:39:dd:9d:21:
a6:80:11:4b:b9:cc:15:d8:ed:ab:d1:d3:5a:3b:15:15:fa:a1:
0f:16:ed:b0:9f:e5:0c:8c:4b:71:e6:42:9d:96:22:d9:d4:bb:
7a:b0:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:13 2026 by rpki-client