Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: 95xUDWfs3BUyA3tcCJr3NMRKlSIC82Acm3tUoVaBI/k=
Subject key identifier: 5A:74:4F:D1:27:13:13:0F:A3:CB:5B:78:01:E4:88:BC:4E:9D:FB:F1
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019E31BBA32F4C84A630F02EDC222B14A281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0DC5
Signing time: Sat 16 May 2026 17:00:41 +0000
Manifest this update: Sat 16 May 2026 17:00:41 +0000
Manifest next update: Sun 17 May 2026 17:00:41 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: oChhcsJQp2NaX2sXK850hzJiQfYN2790YHP6XoWPSkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:a3:2f:4c:84:a6:30:f0:2e:dc:22:2b:14:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: May 16 17:00:41 2026 GMT
Not After : May 17 17:00:41 2026 GMT
Subject: CN=5a744fd12713130fa3cb5b7801e488bc4e9dfbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:49:06:73:9b:68:8d:d6:24:1d:28:2c:c1:
9b:5e:6f:07:9e:25:c7:cc:66:95:e5:99:53:73:49:
fa:f4:ce:d0:84:3a:8e:31:55:df:f5:b9:9e:8f:9b:
e9:a3:33:ff:44:ad:8d:4e:98:cf:c6:e2:89:4d:62:
14:9d:9c:3b:13:ba:81:b7:9b:ef:f2:1b:ef:1f:c0:
d7:b7:ca:ee:e8:47:4f:59:58:a8:c8:ab:56:95:c1:
99:10:93:b9:39:65:7a:89:81:31:5e:c6:f6:6b:58:
ee:23:52:22:bd:6c:ec:26:d4:3b:ba:88:57:50:a4:
8a:b6:c1:72:87:e1:73:27:53:47:16:61:3a:02:9b:
8a:b9:94:2d:8b:ce:5d:87:d1:de:71:f1:2e:aa:1e:
73:7d:59:2d:74:98:fc:85:21:af:74:b6:34:2c:64:
07:b5:ab:3d:af:3b:64:c4:c2:da:93:a6:a1:12:5b:
41:9f:d5:37:05:f5:88:02:40:98:e0:ac:d5:63:13:
39:23:4a:9d:bb:fd:fe:e5:d4:27:fc:42:74:92:f8:
da:d2:c3:69:2b:93:fb:4b:b7:8f:4e:85:bc:73:ea:
34:ab:13:a7:59:06:a2:3c:11:89:52:e2:1b:11:ee:
6b:99:c7:a6:d0:f8:5d:3d:62:c7:86:47:67:0b:6e:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:4F:D1:27:13:13:0F:A3:CB:5B:78:01:E4:88:BC:4E:9D:FB:F1
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:0c:79:cb:72:d3:a2:2d:63:c7:94:91:65:00:06:ce:49:
a0:d8:43:cc:fc:a5:50:d3:0b:62:d5:d6:08:24:41:af:08:18:
7c:af:8f:a3:f2:a8:ad:e0:f4:1e:44:0e:26:bf:18:ec:e1:27:
45:98:43:cc:ce:93:5b:37:fd:f8:3e:66:ca:12:e8:26:9d:12:
01:02:09:b8:02:c2:0e:73:8f:51:f0:8e:8f:db:27:b5:b2:46:
f6:99:99:12:5f:5d:48:5f:d3:8a:20:22:43:f6:18:57:04:d2:
33:29:e9:b8:0e:3f:a4:94:4e:9a:bc:87:10:01:fa:ab:c3:62:
a6:d7:2b:16:89:c6:d1:d0:05:0a:a9:b6:7e:e9:e9:55:c3:67:
12:13:98:b9:90:3a:47:ba:b3:9d:dc:9a:85:6b:20:f2:7e:78:
2e:0e:d9:a9:35:f4:19:72:f9:53:0c:44:ff:e4:0b:04:59:ed:
75:66:b3:fe:2d:3a:1f:73:d7:ca:d3:20:a1:a5:96:06:f8:09:
69:9d:ff:4c:60:1f:a3:97:80:df:79:f1:ad:4c:31:89:ad:6e:
0c:f3:6a:7b:ac:71:32:69:0d:c3:e8:b5:be:1e:7d:7b:1e:3c:
6e:cf:08:7e:ee:68:f0:2b:93:d0:f0:f9:2a:57:b9:f6:9d:2e:
56:16:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:48 2026 by rpki-client