Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: 9x9OdNVgqQ8MH+jJQjyLp0sbiBaVUmnmprQTy+PfNrI=
Subject key identifier: E5:7E:D0:D2:2D:41:1C:8A:1F:02:D3:85:E6:E3:5D:A7:44:5F:31:77
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 01A0DB71F0C32414B07183789648475991FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 02:01:12 +0000
Manifest this update: Sat 26 Sep 2026 02:01:12 +0000
Manifest next update: Sun 27 Sep 2026 02:01:12 +0000
Files and hashes: 1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: PTnVL/at0gXzUtsYa3AMWr0z5i3zLhz8sBOLk6QXFX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:f0:c3:24:14:b0:71:83:78:96:48:47:59:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Sep 26 02:01:12 2026 GMT
Not After : Sep 27 02:01:12 2026 GMT
Subject: CN=e57ed0d22d411c8a1f02d385e6e35da7445f3177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:52:bb:ad:e6:61:46:fc:25:2c:1c:f6:94:
32:0a:9c:64:ca:e9:f3:14:34:51:8c:e2:f4:88:91:
2b:1f:df:8a:bd:7b:95:3f:2c:c2:3e:28:80:b4:f6:
fd:41:bd:0c:ae:da:00:66:ee:ab:97:74:02:21:4c:
11:99:ca:b7:26:f7:0c:a5:80:1c:b0:0a:22:57:66:
01:11:ae:46:65:41:22:16:24:e8:2c:75:b7:fb:d9:
23:37:28:92:21:fc:69:4e:60:86:51:c0:82:8d:e8:
d1:f7:3d:c4:60:64:aa:0b:6d:2e:d6:47:fd:b6:ef:
25:1a:b9:65:ef:ed:52:f9:eb:57:64:61:30:3d:21:
f4:02:08:5c:4a:dd:46:d5:4b:2e:c8:d9:38:d8:69:
27:27:65:92:7d:d0:b3:b9:01:1e:fc:c3:fc:dd:d2:
1a:a0:af:95:4a:2a:7e:1d:4c:58:91:d8:7a:b3:88:
bb:83:86:e1:d7:09:b2:69:65:39:95:b6:4d:66:ae:
9b:ce:ff:f2:d1:e9:3c:fd:c8:6c:cd:03:91:f3:1d:
30:28:de:54:12:95:1a:23:e1:d5:88:17:07:bb:c9:
d5:b8:d0:73:e7:4d:92:aa:8d:1e:ba:31:dc:48:09:
32:8c:ce:13:7f:69:eb:e7:38:2b:89:76:c4:a8:13:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:D0:D2:2D:41:1C:8A:1F:02:D3:85:E6:E3:5D:A7:44:5F:31:77
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:30:60:4e:49:a6:d5:4c:50:4c:aa:96:4d:5b:0c:f3:c5:
28:b5:4e:7b:d6:67:71:92:18:56:dc:a6:1e:3e:c5:bf:3a:fb:
38:2f:35:cf:2a:10:9e:d2:a4:45:8e:28:d2:94:56:0b:c8:65:
e5:1e:88:92:7f:b3:52:9d:41:33:da:87:2e:d7:5a:e9:44:dd:
b0:12:1b:9a:2d:9c:20:2a:a3:e3:52:42:a5:b3:9e:dc:5b:73:
9a:d5:35:3a:6c:d2:07:15:4c:56:cf:7c:13:75:c5:7d:8d:b0:
ba:25:ef:32:3b:f9:ec:45:a6:ca:45:80:7c:8a:43:20:77:75:
70:62:80:0e:37:09:ad:57:59:ba:25:e9:a1:3a:ce:3c:e9:82:
e5:37:2a:8e:b6:36:1d:61:84:51:f1:74:c6:cc:ba:2e:4a:d8:
e7:b6:fb:b6:11:a2:b3:b9:62:03:28:1f:a9:ae:6f:01:47:f3:
d4:7e:57:3c:2b:35:e0:a4:8b:bd:3d:95:31:6e:28:a7:66:4f:
76:01:d5:1a:27:e6:39:66:0d:bb:4a:e9:fe:2f:23:62:e3:84:
aa:ea:78:0b:f5:1b:6c:af:82:2f:e0:b4:71:a1:34:32:11:e8:
ff:80:a3:6c:db:d7:01:3c:4a:32:e0:09:29:77:ce:75:d4:9c:
a6:ad:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:20:42 2026 by rpki-client