Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: G2WXXtpQiHamTxRZglKxrqpbFtiouRB88G4bS/l9MOU=
Subject key identifier: A2:3A:F0:3F:9D:A7:8D:50:D6:33:A0:88:89:53:5D:D3:E1:4F:C8:92
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019D3909BA1CA005CFACF4B139E61FEE4F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: eMX7IOZjaPncfzG78lv+aaamonVOlOQmV4fFD+MbQ3M=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ba:1c:a0:05:cf:ac:f4:b1:39:e6:1f:ee:4f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=a23af03f9da78d50d633a08889535dd3e14fc892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:e3:b6:4e:07:c5:70:a2:71:7c:40:17:85:
5b:3c:a9:b0:9a:5d:3d:a4:18:bb:63:35:e3:5b:a5:
d8:4d:18:3f:d5:24:a4:d7:e4:7a:7e:a8:7a:78:a1:
ad:8d:2f:c6:0b:07:5a:00:75:ac:de:24:49:9e:ec:
49:9e:89:cd:93:39:fd:50:b3:79:76:eb:c3:9d:75:
a4:62:2c:75:19:57:80:90:a1:1f:60:22:e9:1e:01:
7e:ba:85:32:12:ed:ef:be:36:be:77:1d:f3:f9:32:
2e:ce:d4:ac:73:7d:33:cc:3f:80:7a:94:c3:18:2b:
cb:72:33:83:2b:6c:75:97:bb:f7:90:fc:35:c0:03:
ef:cf:40:cf:e0:d9:c5:b1:d1:ab:da:4e:c4:b7:f4:
a6:ec:65:36:e8:fb:47:1d:f9:f7:27:84:cd:56:74:
2f:67:3d:64:84:e3:ef:09:85:84:2a:33:b4:e4:df:
85:8b:3d:91:82:5d:fd:74:1c:18:88:25:11:32:f9:
e6:3a:a7:0e:0b:f4:69:aa:3f:23:a7:57:bc:08:b1:
39:4f:a0:8a:75:bf:d0:7c:1a:f6:8c:88:c7:3c:4d:
b2:58:7f:ec:75:4d:22:93:bf:6c:22:4d:71:91:b0:
54:38:d9:38:b5:79:08:60:86:3c:23:44:50:81:a9:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:F0:3F:9D:A7:8D:50:D6:33:A0:88:89:53:5D:D3:E1:4F:C8:92
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:07:f1:39:b7:2a:d3:f8:8a:7a:92:c0:8f:0a:91:66:5d:6b:
24:19:4e:e4:63:93:3a:0e:7f:9e:18:6d:7f:e0:2f:9e:6f:1c:
54:96:4d:d0:07:fc:6e:49:37:63:d8:e2:17:79:4a:0a:4d:04:
86:0b:a1:ce:62:e1:61:75:19:48:87:fe:b4:28:f3:08:18:d8:
ad:40:f6:ea:49:a7:11:d2:2e:d0:fe:ec:64:8d:96:94:fb:76:
b9:39:de:ea:d2:3e:fe:7e:60:61:34:c5:ca:3a:a4:da:ef:a8:
28:e7:61:70:39:bc:53:7a:7e:ee:24:6a:b6:16:11:cf:72:ea:
b9:ad:6c:13:27:23:12:0e:b7:22:0c:0e:a7:88:2f:76:54:e7:
f4:5a:28:18:04:85:87:dc:51:61:d0:87:13:b7:79:a8:25:20:
12:59:6f:e5:4b:0a:d9:93:e1:a2:17:d0:f7:d4:05:73:61:5a:
5a:d2:dd:d6:8c:65:dd:8a:a0:83:41:cc:0a:ff:50:32:ab:af:
c5:28:21:ce:70:c4:41:d0:f8:99:8e:d4:fa:ee:5c:ab:c7:3b:
2e:fc:77:e3:2f:36:ec:27:cf:c0:60:5f:9b:56:42:86:df:ee:
a9:41:ac:b3:40:0c:6a:c3:95:3b:d6:c0:fd:4b:ed:b4:14:83:
8f:c1:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:48 2026 by rpki-client