Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: Jfy1fFN/1PCLpIUShka+15kw7JnHU/6SpiHZIxzuNXQ=
Subject key identifier: 26:B4:3C:6F:EE:08:AB:06:D5:E4:F5:F7:41:1C:8C:16:E3:26:31:1F
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019D0C9F5B838AD666E7C0FE01FEF85D2BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 10EB
Signing time: Fri 20 Mar 2026 19:01:03 +0000
Manifest this update: Fri 20 Mar 2026 19:01:03 +0000
Manifest next update: Sat 21 Mar 2026 19:01:03 +0000
Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: G/RmqLde8q7TZ3Z8IbvgaJZmnjasZRN7LeFyulxojco=)
2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:9f:5b:83:8a:d6:66:e7:c0:fe:01:fe:f8:5d:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Mar 20 19:01:03 2026 GMT
Not After : Mar 21 19:01:03 2026 GMT
Subject: CN=26b43c6fee08ab06d5e4f5f7411c8c16e326311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:e4:ba:af:d1:74:a0:82:4b:a4:4a:d4:3c:
87:99:87:66:a7:1b:76:b9:46:db:4f:47:c0:5a:71:
8b:bb:ba:18:4a:4a:3f:8a:72:3c:22:37:0e:27:62:
84:3e:cf:08:6d:9e:35:03:ef:f8:bd:be:9b:e4:67:
22:f5:09:35:0a:69:5e:ff:42:cd:a1:b3:d8:81:4f:
0e:64:62:5b:64:75:07:40:82:41:2e:0f:fb:01:fb:
86:a2:65:89:92:a1:f2:f7:47:92:1b:50:cb:c8:ff:
9d:73:6c:3b:8d:d1:a2:df:4a:ae:7a:06:cb:b7:35:
88:02:f3:1f:92:4f:9f:11:ed:d3:78:ec:9e:19:d7:
d9:a5:8e:01:76:1d:07:c2:c8:f9:e2:2b:61:30:72:
c2:21:3e:66:9b:a8:86:57:04:9a:16:9e:3c:87:bd:
8f:df:2a:39:c4:33:15:d0:dd:64:2b:01:09:1a:7a:
59:bf:7d:eb:9a:5d:e0:63:cf:11:b9:c0:ab:2c:60:
d2:28:6e:af:fa:63:4b:8b:8e:73:0d:da:8e:72:9b:
de:d1:be:1b:de:20:d3:5c:fd:4c:c5:c9:70:1c:00:
6e:b0:0b:b4:1d:b1:ca:e2:47:71:15:09:b3:00:12:
18:23:cc:be:a6:23:7e:68:5c:ab:2c:db:87:e1:8e:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:3C:6F:EE:08:AB:06:D5:E4:F5:F7:41:1C:8C:16:E3:26:31:1F
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e3:91:e0:39:09:4d:5b:20:ca:22:4a:64:40:67:95:c2:04:
78:e6:fa:9b:71:fe:ff:ec:55:6f:58:99:2a:dd:04:86:c3:96:
86:fe:c7:bc:b4:81:97:3d:6e:e4:4b:e3:b6:5b:48:ae:ab:53:
55:d4:f0:6f:a2:c7:b6:da:fd:d3:ff:77:de:cc:93:9e:31:0b:
74:2e:b4:8f:aa:f1:77:e7:aa:f7:33:44:61:24:e5:1c:75:80:
5e:79:a7:15:73:58:32:36:0e:aa:82:5b:82:19:21:1e:69:bd:
4a:35:3e:10:43:c5:b7:9a:04:b6:c6:51:98:1d:c7:4f:52:3d:
a9:4c:0c:e1:07:7a:68:63:89:ed:2f:c6:05:20:12:13:f9:0d:
ce:14:66:e0:b9:66:9b:16:e6:48:0c:ea:ee:94:ce:e7:ea:03:
f4:51:c7:f8:bc:92:de:88:fa:6a:f0:c4:8f:5f:a2:a7:6d:bf:
85:f1:5d:11:f6:e6:2b:6f:ad:ad:49:6b:00:70:b9:f7:7b:bd:
df:3f:6b:72:ed:96:78:1f:10:c8:54:c6:8f:6d:7a:b1:24:66:
0b:56:48:3c:81:9e:39:05:cc:b7:00:56:fc:ca:2c:d0:ec:36:
a1:c5:8d:05:7e:f3:da:94:b2:1d:38:e0:60:69:55:7a:69:d1:
b8:b2:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 00:16:10 2026 by rpki-client