Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: pDAC3cOESTNRKriqAeN2pszgDqUnOu4n7O7xSQSyQek=
Subject key identifier: 01:5E:BB:95:CB:CD:0A:FA:21:EE:39:D4:27:10:9A:E5:36:26:93:ED
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019FAA50F3058314CB5C0EC2952F0E32099E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 20:00:59 +0000
Manifest this update: Tue 28 Jul 2026 20:00:59 +0000
Manifest next update: Wed 29 Jul 2026 20:00:59 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: FROsKwahRMTouboU0ty5vZBzoVSkwbJ3StX0tgsrSvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f3:05:83:14:cb:5c:0e:c2:95:2f:0e:32:09:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jul 28 20:00:59 2026 GMT
Not After : Jul 29 20:00:59 2026 GMT
Subject: CN=015ebb95cbcd0afa21ee39d427109ae5362693ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:16:cc:3a:f8:cb:eb:42:61:0d:87:72:0f:
65:8e:41:f2:51:e3:ab:9f:e2:2e:18:3c:52:8e:19:
83:a1:66:3d:18:ca:65:fe:8b:2c:a6:90:d2:e6:d6:
ed:45:ae:d3:40:f6:29:12:3d:cb:b1:f9:dc:00:ba:
eb:cd:68:1c:04:84:8e:2d:06:78:2d:42:e0:2e:38:
de:05:61:bb:c7:31:11:24:2e:b6:97:11:a4:48:5c:
ca:39:b7:21:2a:7f:01:39:e9:a5:53:1a:f7:a1:55:
7c:69:8e:03:e6:33:c9:a4:3f:53:ad:df:6f:5a:09:
76:18:cd:cf:6c:e0:98:e2:8b:da:67:8a:fe:ed:b0:
48:9a:f2:5e:ca:71:06:53:96:84:0c:af:09:57:bf:
c4:10:c7:32:52:96:78:f6:04:83:68:3b:79:b1:ea:
7b:88:20:27:39:ef:32:57:a0:86:1f:08:b5:e8:f7:
26:72:9c:96:06:0f:f8:7d:e1:13:f8:bc:fc:19:5f:
f2:83:1d:aa:12:f8:2c:a2:3a:81:20:8a:0a:27:50:
68:ce:3d:15:4e:59:a1:15:56:40:29:23:52:55:86:
93:60:f8:c1:da:c1:cc:76:d6:6d:43:28:06:52:0f:
83:4f:d4:a3:57:8b:bc:bc:2b:4e:f7:2b:eb:69:7d:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:BB:95:CB:CD:0A:FA:21:EE:39:D4:27:10:9A:E5:36:26:93:ED
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:a6:03:1b:a7:29:b6:11:44:9d:78:04:15:6a:ea:17:f6:
ac:72:de:cd:81:7c:5f:3f:d0:4f:99:d7:00:c7:48:92:f0:db:
ab:c9:44:a1:d7:75:89:b1:8d:1f:d0:e5:33:2c:27:6f:b4:08:
2f:24:3a:c9:29:ac:34:a3:a3:e0:e4:85:8d:40:34:a3:47:58:
70:f4:85:ac:74:ca:23:a4:b8:be:42:9a:32:da:24:86:2a:25:
02:9a:8b:dc:1a:80:ae:91:1e:b7:95:87:f0:b6:b0:8b:d2:36:
81:14:24:9d:bc:da:9e:db:44:a8:10:4d:88:19:7c:48:7f:35:
67:ca:65:6a:fe:fe:66:6c:ab:b3:b8:ae:4d:8b:10:da:9b:83:
13:5e:90:5f:7b:5e:de:4b:77:44:88:5b:13:76:c6:8b:a2:bf:
15:f5:35:5c:3b:2f:e5:d3:e7:8b:9a:d5:16:a9:bb:e4:24:3b:
e4:6e:fa:09:ef:b6:c4:db:61:a6:30:56:ff:53:81:55:27:38:
17:14:0b:e4:65:50:51:a7:d8:23:38:67:a8:92:e6:fb:d9:33:
5e:6d:5f:2d:6a:13:ad:78:de:8f:52:ae:50:64:f3:6b:d4:c7:
70:4f:15:89:4f:84:94:57:3c:af:d5:3b:a0:78:1c:03:c2:e1:
f2:c8:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:06 2026 by rpki-client