Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: xYQ7bk4yrvLl0I7quxO+DavBC3meZBtOrZjEIPEV2h8=
Subject key identifier: 10:F2:A1:13:0F:BA:C8:78:6B:2D:01:79:EC:A8:EC:14:D5:E4:23:72
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01A001A6335B622684AA79A2DE4B5505258B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:01:04 +0000
Manifest this update: Fri 14 Aug 2026 19:01:04 +0000
Manifest next update: Sat 15 Aug 2026 19:01:04 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: V+E3kbXOblfjVj1dtR26J1PEiRJnBdfEn1GJhV6I/vE=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:33:5b:62:26:84:aa:79:a2:de:4b:55:05:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Aug 14 19:01:04 2026 GMT
Not After : Aug 15 19:01:04 2026 GMT
Subject: CN=10f2a1130fbac8786b2d0179eca8ec14d5e42372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6a:b7:9e:7f:b9:91:ee:95:10:c8:52:fd:07:
3c:aa:16:b6:de:6b:82:1e:20:8c:3c:a6:02:c1:41:
88:7f:a6:07:91:f4:03:eb:52:52:09:dc:ae:9a:05:
b7:d8:03:38:84:4e:d0:28:1a:ca:15:66:93:3e:4c:
81:a8:8c:29:5d:ab:fe:ed:0f:4a:61:22:4b:8d:97:
6b:43:18:b2:db:7b:bb:04:15:58:a1:63:e8:f2:69:
79:ea:c5:ff:60:b6:eb:8c:5c:b3:c3:21:6f:26:a7:
42:2e:2b:0a:5b:7e:be:16:39:de:17:fc:1e:ad:52:
2c:52:99:de:5a:d9:89:08:8f:60:e1:95:c9:7e:56:
50:aa:89:94:46:6f:21:38:bf:16:43:da:de:ff:45:
01:68:80:8a:b1:ff:09:9d:cc:9b:7e:07:d2:31:4a:
a8:6b:f6:2f:f8:6c:70:60:53:d1:66:5b:7f:42:d7:
da:2c:9f:a0:3a:f0:79:8d:26:db:8d:2d:d4:21:1a:
37:a1:3c:bb:b4:13:92:74:22:29:31:bd:22:de:2a:
0d:80:5d:48:a5:1c:e1:2e:04:1b:46:16:1a:46:99:
af:d9:4d:15:d6:66:3b:cd:74:45:e6:76:8a:c5:80:
84:13:59:12:70:a7:1e:e3:1e:2c:f3:12:60:c2:a4:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:A1:13:0F:BA:C8:78:6B:2D:01:79:EC:A8:EC:14:D5:E4:23:72
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b4:b2:9c:c8:74:ff:fe:48:36:48:7c:e7:bd:a3:f3:96:0c:
58:2c:d1:c7:7f:a7:88:92:2a:79:fb:01:f9:c2:d6:a8:c3:94:
6f:b2:41:7d:f3:2e:de:2a:e9:f7:41:7c:ec:cf:1b:79:f3:f3:
af:ae:fd:3f:fa:2a:07:68:4b:de:38:85:27:ef:6f:c5:ce:ef:
5b:64:d1:ac:84:14:b9:18:8e:e0:48:cb:94:3a:a7:63:1a:81:
5c:13:e8:8d:56:26:97:2b:1e:3b:15:43:f8:ac:1c:7d:68:f6:
7d:e0:1f:00:07:ed:a8:d8:f3:9e:43:f2:da:63:38:00:99:44:
e2:18:60:81:18:4c:53:f1:07:59:86:5b:0e:a9:24:6d:93:3e:
df:5b:9d:73:ee:9f:6d:b7:8e:13:6e:a6:10:d1:79:64:46:04:
1a:11:f1:12:6d:ce:57:cc:a6:ca:d4:e9:dc:88:70:4d:c3:9c:
2a:31:e3:0e:28:d2:f2:16:37:be:6c:fe:5c:8e:70:e5:4b:56:
5f:96:7d:bc:41:b4:a5:80:34:02:42:9b:8f:b7:08:7e:a9:f6:
51:a5:40:06:a5:9a:68:a5:38:37:e1:eb:c7:c3:4d:b6:3d:bc:
0a:02:d9:e2:40:1c:b5:92:31:6b:aa:21:80:39:98:02:2e:a3:
6b:bf:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:02 2026 by rpki-client