Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: IHGTIHPsR7SBGH7yA6+VxUzXrwrpFHsai9HcpiYlvPw=
Subject key identifier: 0D:09:65:39:63:92:62:F5:4A:0E:AD:51:34:40:9B:09:B6:A9:BC:87
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019F19E894F348CDB17E7EB6BC2C1850FAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 19:01:40 +0000
Manifest this update: Tue 30 Jun 2026 19:01:40 +0000
Manifest next update: Wed 01 Jul 2026 19:01:40 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: dtGeE8HLHGnT7+vBcCIGGNOI/Yvjcn7mtMSQQZxnlXw=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:94:f3:48:cd:b1:7e:7e:b6:bc:2c:18:50:fa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jun 30 19:01:40 2026 GMT
Not After : Jul 1 19:01:40 2026 GMT
Subject: CN=0d096539639262f54a0ead5134409b09b6a9bc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:99:ec:87:09:a7:71:a2:73:7b:46:b5:87:
30:84:bb:78:60:85:52:c2:fe:a3:41:55:6e:ec:61:
43:fd:1c:4c:30:ac:9d:62:80:fc:33:8d:a1:e2:01:
d6:6f:08:f3:e6:76:1e:0c:e7:bc:8c:51:e7:a5:f5:
75:c2:b1:fe:81:ed:65:f4:3f:41:8c:46:85:49:f9:
cc:37:84:73:f5:3a:80:e9:3b:8a:07:e6:c4:fa:1d:
b1:1b:66:82:4a:6f:06:7c:db:2c:28:69:51:c8:99:
d1:30:b0:8d:a4:f1:41:22:19:42:7c:ca:94:fc:4c:
f5:4f:b2:35:67:56:d2:c2:4a:66:7d:bc:c2:86:a7:
1e:a7:2b:e2:f2:b6:34:8e:45:72:ce:42:d2:8c:cd:
c5:15:c0:4b:f3:2b:1c:bd:33:9a:9b:7d:43:52:6f:
5b:f8:2e:6d:e0:9a:23:40:3a:52:13:ee:7a:ce:f6:
81:aa:32:8b:6f:2c:13:fb:f8:4e:e8:f6:b0:8d:01:
e1:b9:7e:c4:86:1f:05:b8:e0:97:24:95:8d:60:30:
e2:c3:d0:1b:4a:c1:a9:16:fb:7c:52:cb:35:37:4c:
24:9d:04:33:63:d0:ba:26:9e:03:1e:71:19:de:d4:
b3:d6:b9:99:bf:00:ef:04:97:b8:e9:ff:49:b5:7d:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:65:39:63:92:62:F5:4A:0E:AD:51:34:40:9B:09:B6:A9:BC:87
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1e:76:77:1e:96:71:1d:e6:6a:6a:06:c2:3d:3f:64:89:cf:
8e:5a:c4:0e:32:e4:f4:b1:15:8e:31:be:dc:00:54:e3:26:fe:
6d:17:3c:08:23:9b:1e:97:07:33:fd:f2:af:4f:ad:78:cb:f5:
bd:d6:d9:c8:1e:b6:95:5d:5d:56:4c:2a:b1:06:50:be:c2:86:
90:66:47:0f:90:96:79:31:eb:ba:bd:f0:84:ba:43:50:46:7c:
d7:3b:12:fd:ba:d5:94:17:95:30:ef:5a:0e:eb:a7:3e:b0:d9:
f0:e5:17:6c:35:65:e7:73:81:3d:25:8b:e6:5a:13:49:b8:95:
05:a0:4e:e5:7e:7f:67:4f:45:f0:34:a4:c5:58:69:61:97:f0:
6d:6a:d4:8f:c3:7f:1b:ea:7e:21:46:49:a8:40:30:1c:3b:16:
f5:8f:51:91:01:e2:46:59:44:de:33:a5:40:63:01:c2:7c:db:
dd:87:b0:4a:26:01:55:3f:d3:2d:b3:3f:8c:8c:ed:dc:ce:cd:
6e:1e:a0:91:09:57:13:09:6f:0e:11:35:57:d8:9f:98:13:28:
9a:99:85:e8:98:54:1f:23:b0:49:16:bb:7b:04:0e:69:c1:c5:
76:9f:e3:9b:c4:42:c2:4a:c7:7d:41:59:b6:9e:7b:34:91:18:
34:f1:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:23 2026 by rpki-client