Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: g8f1kjII2u5+rTnLGenJm8JJZPgpt1s1naufogXzSr0=
Subject key identifier: 64:95:21:37:41:96:C8:9D:F6:0E:46:4F:9C:B2:26:C1:97:80:E6:56
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019D389C1E89CC3586C6E1146BAC9B2DA1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0D44
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: OFlAiGVaoeLdqwQa1IdF040esch4PkOXoYFQ1ditJys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1e:89:cc:35:86:c6:e1:14:6b:ac:9b:2d:a1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=649521374196c89df60e464f9cb226c19780e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:e6:98:42:2e:67:ee:39:fc:06:76:c0:ea:
77:6e:84:ef:f1:70:d3:ec:7c:00:8e:04:fb:55:00:
2d:f5:d1:82:09:bc:87:44:66:d2:c0:3b:17:67:34:
1e:72:86:87:92:1b:7d:88:c6:c5:7c:42:e4:b6:9b:
48:e7:7f:2e:39:f0:dc:75:e6:3e:f7:53:ee:73:4e:
60:8a:9a:e9:88:8f:e2:f3:0f:8d:81:39:40:10:27:
b3:34:58:25:d4:48:99:bb:72:fc:d0:f6:c4:d6:07:
1c:9d:19:3d:70:c1:07:ae:d9:04:45:52:d4:57:5a:
74:5d:0b:58:c4:ad:a8:cd:c4:9b:62:ca:5e:6d:68:
1f:20:cf:10:d6:b0:01:2d:1e:19:c8:f8:ea:64:c5:
49:9b:2c:c7:49:ad:8e:02:12:04:c6:34:67:04:e2:
e2:bb:17:c7:48:b1:0c:3b:49:c5:46:7a:0e:f3:56:
2d:60:ed:77:7b:da:df:7c:81:90:e6:6e:1e:44:4a:
4c:6c:c5:0b:f7:73:f4:d8:3b:ea:e0:f2:32:33:39:
47:9c:9c:5b:26:4f:0d:45:b4:1d:71:85:21:58:4a:
8c:d3:43:02:9f:b0:f1:3d:c4:82:47:9a:9d:7c:fd:
59:58:4c:83:b3:ac:cf:35:12:28:66:9b:21:ef:62:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:21:37:41:96:C8:9D:F6:0E:46:4F:9C:B2:26:C1:97:80:E6:56
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:e7:4f:cc:f3:87:9a:7c:c8:af:67:89:82:76:c2:52:b7:
07:5b:9d:79:ee:05:1b:7a:e7:a6:19:04:a3:87:ce:22:35:e5:
fe:c1:b3:fb:68:74:da:3b:a8:1e:ba:ac:cc:6a:46:48:5d:49:
c9:73:c0:28:ce:1d:1f:f8:7d:e8:76:81:23:4b:4a:2b:a4:0c:
3c:11:c7:6d:a7:b7:04:cb:e4:b2:3e:5c:45:77:51:6f:23:72:
5a:25:92:8d:46:1e:1c:c7:ae:79:06:b2:4e:db:7a:b1:e9:7f:
31:57:51:98:69:75:c1:2f:d0:0d:9c:1f:4e:de:1e:60:0f:e0:
58:1e:a3:a2:84:50:c0:3a:1a:8e:56:c7:f6:34:25:23:a5:8c:
48:1a:e6:0b:bb:2c:64:e5:58:a8:3c:0d:dc:b7:94:67:5a:5b:
d9:35:93:01:7d:07:39:67:49:43:55:fd:7f:fc:47:61:13:33:
fc:23:7e:ea:dd:25:51:4c:75:62:5d:7b:5c:f2:8f:5b:45:ed:
74:3f:b8:0c:9a:25:3f:3b:31:01:88:6f:ba:03:08:75:a8:e2:
64:b7:c8:48:62:43:0d:b9:02:c0:1c:e3:0c:9b:5b:21:e0:6e:
0e:1c:12:96:75:45:16:81:6b:39:05:8a:50:28:b2:28:22:35:
d1:bf:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client