Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: ZlmIEpF64McQXESj5NeID6NiCdiJnVDNmLOLdftCU18=
Subject key identifier: 43:C1:B4:13:12:DD:D0:5B:7B:24:EF:16:15:6A:59:E3:4B:00:93:1F
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019E322A36D27832CAFCA221759509B76A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 19:01:27 +0000
Manifest this update: Sat 16 May 2026 19:01:27 +0000
Manifest next update: Sun 17 May 2026 19:01:27 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: nljxXZ9fYQeOMHOS8piDNdsVndc7UopUUx53GwLpoDQ=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:36:d2:78:32:ca:fc:a2:21:75:95:09:b7:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: May 16 19:01:27 2026 GMT
Not After : May 17 19:01:27 2026 GMT
Subject: CN=43c1b41312ddd05b7b24ef16156a59e34b00931f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:a0:90:d2:c8:5d:a1:0f:65:0c:ed:51:3b:
b5:62:82:4b:fd:7e:10:47:83:a1:27:cd:2a:fc:ed:
9f:a6:27:d2:61:d9:d9:ed:7e:77:e9:bd:90:be:33:
5f:69:d8:3f:49:cf:7e:67:5a:d9:e6:20:1c:e8:7d:
af:32:3c:24:fc:6b:b0:65:93:6a:b4:4c:10:03:71:
09:28:6c:75:48:c3:d3:d2:a6:ef:d1:98:1e:8a:02:
c1:c2:8e:49:c5:ed:55:a2:85:45:89:75:56:0d:13:
8d:26:23:07:8b:2a:a8:cd:76:a7:a7:bf:f1:17:81:
d8:b5:d2:a9:14:98:db:57:76:95:5b:42:34:03:57:
69:05:f0:01:01:d2:cc:61:02:be:76:48:85:aa:e8:
3f:7b:54:99:07:c2:4a:d8:d4:ab:ba:35:1c:0c:e2:
3d:c6:8a:f1:29:dd:43:5d:e9:80:88:8e:5f:ed:ec:
d7:68:08:84:fb:a4:c6:1d:b8:bf:7c:08:bc:1e:5b:
28:13:63:8c:de:5d:4b:ab:87:46:dc:d7:2f:b6:43:
c0:f3:25:d7:e9:d5:20:92:ee:5c:0a:12:69:b7:c1:
b3:af:d3:ae:52:3b:4d:e3:22:c5:4d:4f:d1:e0:41:
78:5e:3c:89:1d:0d:4b:84:15:13:25:77:fb:f7:7b:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:B4:13:12:DD:D0:5B:7B:24:EF:16:15:6A:59:E3:4B:00:93:1F
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:b8:32:cb:33:19:b3:16:2e:b1:4f:83:96:62:b0:2e:c8:
34:6c:b6:b2:9b:74:9e:43:bc:6a:e3:16:0a:6c:9f:16:7e:89:
b4:66:f7:6f:61:27:4f:8c:c4:8b:58:d8:ae:f1:11:94:7e:58:
d0:84:e4:7d:2a:3e:51:f7:35:8c:ec:11:05:61:04:29:ad:30:
aa:a7:84:f8:5c:69:90:36:00:ac:76:ba:a1:30:54:6c:ba:8b:
01:cc:48:ba:0e:5b:e8:db:18:47:ad:9c:f2:08:2d:44:50:de:
57:1d:e4:fc:83:bc:3e:f4:b2:98:60:57:00:77:0f:11:fc:db:
75:bc:e7:f5:c0:d2:27:70:ef:d8:c8:df:46:6d:e7:83:5c:d6:
ce:86:54:be:c4:c2:c9:09:ee:47:cf:63:c0:4f:3f:aa:87:9c:
22:fa:4d:fe:be:8c:35:98:ed:1a:7d:b3:6d:bf:63:dd:bf:1d:
0c:03:67:c8:a2:7f:23:52:c4:bd:ce:39:f7:8e:30:19:f7:66:
08:c4:d8:77:ee:bd:68:3e:eb:dd:ed:c5:08:66:62:5d:1c:92:
49:35:fe:8b:8a:f1:49:35:94:b7:58:93:13:95:7e:70:67:7e:
a1:ea:2e:44:62:d1:f5:38:72:d4:ff:ce:3f:c5:fa:e3:68:25:
7c:c9:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:15 2026 by rpki-client