Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: miBk5oZy8mRFXZ2koLiSrlk/O+kP+yKIo1Xqye0zlpU=
Subject key identifier: FA:20:22:0B:7C:DE:5F:7F:62:9B:2C:BF:80:2C:28:11:83:31:71:6B
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 019F1B3223B804698EFCC30F8D6454FE327E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0877
Signing time: Wed 01 Jul 2026 01:01:38 +0000
Manifest this update: Wed 01 Jul 2026 01:01:38 +0000
Manifest next update: Thu 02 Jul 2026 01:01:38 +0000
Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: 5gGiEo3BYr5rFCgtKtbqsl19wbYKmE4loSPb4rwxmuU=)
2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:32:23:b8:04:69:8e:fc:c3:0f:8d:64:54:fe:32:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Jul 1 01:01:38 2026 GMT
Not After : Jul 2 01:01:38 2026 GMT
Subject: CN=fa20220b7cde5f7f629b2cbf802c28118331716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:b3:70:71:43:63:47:c0:83:4e:61:39:e6:
da:44:68:d4:bf:bc:5c:17:d7:eb:8b:5a:d1:50:49:
24:48:9e:05:e6:f4:e9:e4:a8:2c:79:40:88:17:9f:
c5:f5:b1:13:a6:4d:60:3e:2a:ed:cb:a9:6d:b7:aa:
18:84:b3:44:23:49:8e:3f:b3:60:85:5f:93:35:7a:
34:ba:e3:c9:69:3a:ad:c2:81:2a:05:0a:ac:b1:8a:
ff:58:79:a3:03:11:e0:e3:0a:85:b7:ef:05:ab:76:
49:36:ce:d5:50:f7:37:2f:f4:d2:aa:ae:82:31:f3:
12:ab:2f:86:e7:e4:d4:fa:47:f4:35:ed:4e:cc:7f:
ea:bb:5f:a3:e3:b2:8c:7d:87:57:fb:94:1f:71:9f:
15:d9:45:88:8f:df:98:38:a9:e7:93:7d:38:7b:a2:
60:f6:70:c7:97:0a:bf:77:de:1a:ce:ca:81:a4:c6:
fb:75:cc:c5:df:13:4d:22:9e:3b:1e:58:b3:4a:44:
66:f3:37:da:16:fb:48:ea:2e:02:39:57:06:eb:e1:
13:b7:79:c1:80:50:89:a7:11:7e:e9:0a:12:29:ba:
ee:17:40:5a:15:33:6f:b2:d4:5e:9b:63:3c:b6:16:
b6:fc:59:f4:87:32:c7:cb:35:62:5d:19:6c:55:75:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:22:0B:7C:DE:5F:7F:62:9B:2C:BF:80:2C:28:11:83:31:71:6B
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c2:61:fc:88:82:d9:5c:aa:6c:03:d9:f2:d3:3b:b8:f6:6c:
7e:65:ac:a2:67:14:e3:8c:ab:70:f4:c0:17:c0:21:15:a0:85:
0a:80:62:44:d4:dc:f4:bd:0d:20:8a:d2:c6:c1:a8:2b:b8:e3:
3f:1e:57:e0:93:fe:23:35:93:ee:53:8a:2e:f2:5c:22:d0:dd:
9d:22:e1:65:30:80:93:4e:3e:61:fb:5e:50:78:28:6c:dd:8e:
f5:0d:13:95:55:a8:9c:5b:a2:4b:0b:8a:70:f4:e9:a0:e7:1c:
0e:48:2c:92:f4:af:69:b1:e2:99:73:84:38:70:94:a2:1a:b6:
ef:46:bf:5f:19:9e:92:57:c7:24:3b:8a:af:5c:ae:1e:e6:84:
d4:91:59:0c:32:9e:f7:d3:0f:ab:fc:be:79:5b:be:2f:f0:a0:
0d:08:83:2e:cb:30:b8:f8:b9:e1:cd:e4:9b:4b:df:d4:fd:9a:
08:79:e8:a1:86:e2:93:73:6c:50:b5:79:10:40:7b:c0:5b:84:
35:31:ad:bd:61:fd:42:6b:db:88:43:f0:07:07:78:24:9a:e6:
a0:d3:0e:50:01:6c:58:2d:95:6a:71:5e:26:43:78:7d:ec:82:
08:04:41:0d:38:c3:c5:f8:ad:89:a2:b2:79:45:24:f2:59:dc:
49:73:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:58 2026 by rpki-client