Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: JEh5pAUeU/J+7qdMkEMzKYslSWBKYq59FcfbRB41yMY=
Subject key identifier: 35:EF:26:4F:42:03:CC:D3:77:B0:58:88:74:A8:28:4F:6C:16:FD:FA
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 019F856823CAB24128D7ABB5C47AA80EF167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 13AB
Signing time: Tue 21 Jul 2026 16:00:22 +0000
Manifest this update: Tue 21 Jul 2026 16:00:22 +0000
Manifest next update: Wed 22 Jul 2026 16:00:22 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: RSWcOrbIkhCjFxY+ve/NexVqEXZl1dX2/eLv23aIhBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:23:ca:b2:41:28:d7:ab:b5:c4:7a:a8:0e:f1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Jul 21 16:00:22 2026 GMT
Not After : Jul 22 16:00:22 2026 GMT
Subject: CN=35ef264f4203ccd377b0588874a8284f6c16fdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:12:fe:be:8c:80:26:29:76:9a:d9:96:b2:
68:3f:16:d4:40:41:3d:e2:92:4b:77:b8:e8:4d:b8:
3c:dc:3d:e2:7a:a6:72:8c:78:fe:6d:5f:c1:c1:14:
71:10:1f:fa:9b:c1:d5:8f:47:9d:a9:fd:e2:f4:b1:
bd:95:b5:65:dd:cb:3f:75:fa:cb:eb:f6:77:ac:6e:
c9:a6:35:aa:26:64:9f:0f:35:ad:a2:70:99:a0:93:
45:cd:ec:3c:ad:2a:20:67:76:36:4a:5d:38:f6:69:
20:13:95:8e:04:7a:e2:21:b7:5f:c9:0b:52:1f:74:
5a:d4:56:e7:06:37:09:a9:f3:ed:91:b3:d0:ab:d2:
73:80:14:6c:26:cc:31:5e:65:54:35:02:bb:f7:e2:
8a:76:be:b5:44:2f:e3:43:91:b4:b7:56:e9:54:0a:
c0:69:ad:92:14:61:17:96:19:00:ad:79:f8:4e:02:
ac:b7:9e:8e:6d:08:b3:bc:bd:be:ef:3e:6e:7e:d4:
97:70:b1:ed:fd:11:37:58:e7:76:4b:4c:ee:8e:b3:
89:29:16:c9:b6:d6:48:0a:39:4f:2a:47:e7:a1:d2:
bb:48:59:4d:43:ab:f7:dd:36:17:db:71:75:8e:04:
93:0c:51:2a:d4:3a:36:b4:96:b3:43:d3:8b:38:9c:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:26:4F:42:03:CC:D3:77:B0:58:88:74:A8:28:4F:6C:16:FD:FA
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:82:b0:1a:5e:0a:a4:4e:3a:84:38:ca:95:70:fc:92:d1:06:
14:41:27:c2:aa:95:12:0f:10:bb:df:db:9b:83:50:18:4f:a4:
2b:b5:78:ca:5d:84:29:f5:f2:cc:fa:ae:01:b4:80:30:59:f0:
bb:46:13:44:02:e1:b2:af:a8:13:87:78:58:9a:c6:84:38:ae:
01:73:14:b5:fd:82:60:09:3c:9c:dd:58:f4:a0:db:5f:6e:df:
14:ca:21:a1:3f:a8:75:b1:ed:c9:40:e4:fb:33:ba:37:8b:62:
48:47:3d:c8:68:54:33:cc:52:7b:7e:98:f1:2d:09:61:51:f0:
4f:47:94:0a:e2:d8:0f:db:ba:6a:a6:94:c4:67:0a:05:b9:22:
0b:f0:fc:51:19:a9:d9:5d:4f:62:cd:ad:c2:91:b8:33:64:62:
d8:d0:c7:3e:1a:e4:3b:c6:a0:0b:ec:27:c2:19:3f:c5:e2:79:
75:7a:5e:35:aa:05:17:a9:af:36:57:93:04:a8:ad:63:2f:e1:
a4:7b:85:2b:79:a5:08:5b:84:68:70:59:9a:d9:1b:f7:98:b6:
05:6f:81:93:f2:7f:68:bb:b1:bf:3c:3a:3d:35:7d:c3:31:26:
2a:a9:4c:a2:e8:06:11:a4:ec:de:a7:61:7c:19:0f:0f:3a:9c:
a8:41:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:44 2026 by rpki-client