Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: WH7yAe6eKJix0g5zDimkXMh464sPFDxIXglFfWFfLGM=
Subject key identifier: 61:E5:68:7A:AA:75:57:96:C9:F5:10:26:AF:3A:32:FA:A9:68:6C:56
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01A10DDF1637A11AABA7DE380E7DDD865B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 21:01:26 +0000
Manifest this update: Mon 05 Oct 2026 21:01:26 +0000
Manifest next update: Tue 06 Oct 2026 21:01:26 +0000
Files and hashes: 1: A4VD151cCaGStZi1tukFaQlx8Ko.roa (hash: u0G3+aUNE8LU9u0mjX95yrd3NTvmpbcaXH6CpeKYAUI=)
2: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: G842+P1ex5T6ikCoNt+uIrYXkW6VapI/KCN5gGB2B7c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:df:16:37:a1:1a:ab:a7:de:38:0e:7d:dd:86:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Oct 5 21:01:26 2026 GMT
Not After : Oct 6 21:01:26 2026 GMT
Subject: CN=61e5687aaa755796c9f51026af3a32faa9686c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:08:75:0a:a3:e7:75:e1:e1:58:da:b3:43:
55:e2:5a:7e:d5:26:7f:96:b5:0b:cb:04:b1:a4:76:
45:9e:81:81:79:34:8a:47:c6:83:bc:bf:b3:b1:ac:
33:aa:02:29:ef:4d:73:ca:db:3a:74:5f:62:83:24:
7e:d1:c3:48:d7:eb:3e:7a:c8:d4:f1:c2:a4:3e:43:
6f:d7:79:4c:b8:83:67:3e:54:d1:da:61:55:9f:e5:
fc:f2:8a:8f:38:1f:68:78:5a:90:d7:80:99:31:fc:
01:3a:8d:e4:ee:a6:a6:99:c2:f6:ef:ff:64:ef:7d:
e3:f2:a0:b3:dc:e1:db:87:60:8f:34:51:13:d1:85:
d3:f8:1e:b5:16:10:7d:e3:3e:27:f6:2e:0b:1b:10:
ab:02:45:6c:94:b3:1d:c1:ff:cf:83:e1:19:ab:c0:
e7:34:00:90:ca:96:f2:62:d9:7b:d9:be:23:af:b9:
1c:60:3e:65:f7:75:9d:a2:b5:64:35:12:51:03:a0:
1e:f6:0b:5f:4b:4d:ba:a1:48:a1:99:d8:f9:e6:a6:
53:a7:e5:e0:75:7e:ca:08:c2:95:83:10:c2:51:e5:
8e:0b:62:ae:ba:11:ab:38:7e:76:67:63:4b:9d:23:
3f:08:6f:00:94:4d:90:15:ea:14:68:4c:79:ab:80:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:68:7A:AA:75:57:96:C9:F5:10:26:AF:3A:32:FA:A9:68:6C:56
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:88:73:9a:46:43:2f:7d:98:19:07:5f:13:e9:56:12:b4:75:
25:97:5a:25:13:3d:c0:87:63:26:f2:21:fc:e3:7d:d7:5b:de:
7d:b4:e3:e0:61:d6:eb:db:f6:9e:ec:e9:34:57:9c:83:4d:f0:
5b:2e:38:4a:e3:1f:55:11:0f:58:85:92:73:e8:d0:29:e5:2e:
34:34:65:43:3c:ab:c0:42:85:11:02:43:73:33:85:e5:49:67:
3d:67:a4:5b:11:97:06:8b:5d:c8:c1:91:fa:d4:40:5a:26:a8:
c7:ab:38:dd:04:62:e7:0e:30:00:15:05:03:98:5f:c8:d7:27:
d4:7d:a5:1d:a2:78:3d:16:a5:9f:21:ad:3a:39:03:c0:ac:ba:
bb:7c:9e:58:45:db:47:64:ac:7a:1a:0f:4b:75:00:13:de:52:
a7:0c:f4:40:12:65:b9:4c:90:c0:3a:27:7c:4a:34:05:96:4d:
7a:c1:af:90:00:a8:86:f1:94:4b:ee:14:3e:d3:4c:23:1c:2d:
d2:a4:ff:27:6a:e5:80:0d:43:4e:4f:37:41:16:71:c1:a2:90:
df:bb:8b:9b:a9:75:44:d4:d9:71:72:c8:75:97:34:e6:f5:5d:
22:ed:77:39:0b:f4:b7:2e:58:fc:53:b3:4b:ba:6b:07:1d:b5:
88:80:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:03 2026 by rpki-client