Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: 4HPlWkC2kMsU1s775HdoJp/9ZdHVkYfJ75CUUVTULBQ=
Subject key identifier: 47:71:08:26:69:0A:62:D3:9E:30:0F:AF:A7:7E:08:4D:97:0C:80:39
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 01A17DAA873C89E72BF505C9D519FD273895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0F7A
Signing time: Tue 27 Oct 2026 14:01:30 +0000
Manifest this update: Tue 27 Oct 2026 14:01:30 +0000
Manifest next update: Wed 28 Oct 2026 14:01:30 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: nGgMPcNp4xz2uALbDveA1Ng0+7vaKEKmqY5PFJdanhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:87:3c:89:e7:2b:f5:05:c9:d5:19:fd:27:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Oct 27 14:01:30 2026 GMT
Not After : Oct 28 14:01:30 2026 GMT
Subject: CN=47710826690a62d39e300fafa77e084d970c8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:78:6e:b7:ad:d6:a4:ae:05:5b:bf:69:21:
37:25:12:07:e5:04:21:ec:9d:61:42:19:5c:a6:39:
e5:16:78:6e:20:d3:1c:34:8b:c6:b8:d7:ad:08:d3:
c7:f4:4b:a2:d3:8d:57:69:cd:0d:97:e1:94:b5:16:
c2:33:fd:26:2c:11:04:6f:94:a0:9e:fa:9e:ca:d7:
54:fa:77:b0:0b:da:85:2c:ec:de:4e:ce:3a:df:b9:
5b:45:1b:92:38:ff:af:a3:ae:d3:bc:00:c2:74:f0:
5f:67:75:01:b5:8a:94:5e:81:7a:1d:8c:12:3c:bf:
17:87:ae:e8:0b:e7:31:94:bb:d0:fd:2d:1d:11:75:
f8:eb:79:fa:d3:e1:4d:86:b6:3e:3e:2d:be:95:8d:
3b:8a:67:3b:56:11:ff:f3:10:9b:30:39:58:33:82:
0d:9c:6c:ea:13:1e:ea:7c:6b:11:82:4b:b7:a5:13:
ba:f9:8f:14:be:3d:bc:52:9b:3b:72:14:26:db:34:
3e:f4:27:a5:89:66:b0:ea:6b:d1:be:60:9b:b0:2c:
5e:15:de:52:0b:9e:b7:83:3b:49:b4:c6:b2:09:57:
43:e2:7d:e3:00:d0:77:88:de:09:9f:a1:cc:8b:07:
3a:c9:be:4f:ab:00:d8:7d:32:47:68:6d:9b:ac:58:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:08:26:69:0A:62:D3:9E:30:0F:AF:A7:7E:08:4D:97:0C:80:39
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:94:eb:58:37:95:28:db:e6:5f:b1:1b:a4:94:b9:30:c4:99:
8b:c1:4c:0d:1f:01:ce:c1:98:68:83:15:da:44:f6:29:5e:c0:
2f:5a:fc:81:3a:9b:ac:9e:e1:85:84:cd:33:44:41:b5:83:64:
03:6f:49:f9:c1:be:b8:c8:53:8f:ef:c6:aa:1f:d3:1e:3c:5f:
82:56:50:49:e2:e3:25:d7:05:be:c6:6f:49:10:b1:56:9a:28:
db:db:60:12:f3:99:36:81:31:7a:86:fe:ac:f5:3e:be:6f:13:
f8:04:1d:f5:75:b8:ae:b3:29:c8:bd:7b:88:07:01:7d:f9:57:
19:10:1c:18:78:00:2b:ed:91:de:c7:2c:bf:85:d9:ca:de:df:
f8:a5:e9:c1:38:de:db:c0:15:21:6b:42:35:8a:f3:90:ce:82:
af:1d:8d:8b:7f:8f:09:fb:be:b1:33:4d:1b:b8:d8:a5:4d:d2:
0d:3b:4d:23:5f:1a:41:d3:f4:74:44:42:1d:57:d1:9e:de:6d:
5a:17:c2:dc:6a:86:f5:df:da:7a:79:34:a5:09:fd:f7:e9:eb:
42:a4:28:69:e0:ad:be:79:db:a8:cb:cc:b4:63:df:da:a0:d2:
cb:fe:1e:48:b1:c3:0e:a2:f0:58:cc:dc:9d:4b:dc:6f:1e:9d:
65:b0:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:38:40 2026 by rpki-client