Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: Hrko/dNRhwrsBAFyyiT4YwmyUlBiHoyu9Jw6WX6Gnso=
Subject key identifier: FB:F6:81:36:A3:B7:1E:A5:02:92:D5:F2:15:04:7A:38:89:FE:A5:01
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 019DA678D579595F77A4C93F11E3F6ED5EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 12B3
Signing time: Sun 19 Apr 2026 16:00:29 +0000
Manifest this update: Sun 19 Apr 2026 16:00:29 +0000
Manifest next update: Mon 20 Apr 2026 16:00:29 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: E66mT7qNdVN1OluUKbkwbCTyC53Uy2skSNAbVaFot4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:78:d5:79:59:5f:77:a4:c9:3f:11:e3:f6:ed:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Apr 19 16:00:29 2026 GMT
Not After : Apr 20 16:00:29 2026 GMT
Subject: CN=fbf68136a3b71ea50292d5f215047a3889fea501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:19:4a:96:a1:c2:8b:15:21:3a:da:50:88:
01:01:fe:15:57:14:d0:eb:08:c9:6a:ca:5c:73:52:
b3:eb:66:c7:56:e9:63:d3:f9:20:1b:b4:f4:d0:cf:
fe:9a:b6:73:0e:f9:54:3f:76:28:ae:89:06:5d:22:
d9:aa:59:44:fb:b9:fa:77:e2:21:14:4b:c2:fa:1e:
ca:96:19:80:6a:9a:b2:1d:9f:a9:47:c5:dc:95:18:
fd:d2:3c:49:4f:1d:42:11:90:e8:18:b8:3c:74:99:
29:66:cd:e8:b4:e7:dc:2b:bd:ad:db:f8:10:16:5f:
10:b2:47:78:f8:f5:21:1a:c3:43:a5:3d:f8:84:5e:
f1:3b:fb:4a:62:66:b9:74:f1:7e:8a:69:4a:fc:19:
63:2d:74:84:d6:cc:f8:0f:e1:cf:c5:fc:21:d0:0f:
a5:94:9b:99:78:45:5e:cf:86:f8:23:6b:28:f1:d9:
1e:69:0d:43:4a:55:91:ea:13:10:50:0f:84:21:0c:
08:11:37:89:b8:d8:01:2b:e0:e2:af:4b:52:83:8f:
e9:03:a8:bd:92:31:2c:9d:47:02:79:15:f7:a7:7d:
58:26:76:2d:4d:88:36:82:e4:bd:20:cd:00:f2:e3:
51:f1:a5:6b:07:6c:0e:38:36:58:89:ca:79:28:b9:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:81:36:A3:B7:1E:A5:02:92:D5:F2:15:04:7A:38:89:FE:A5:01
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:08:e2:11:3b:a0:c8:56:16:4a:3e:0e:87:21:40:6c:38:
4e:3d:52:20:8e:fb:d7:bb:c1:e5:c9:63:4a:32:dd:14:f1:2a:
be:eb:84:04:37:08:13:15:0c:94:64:a3:8a:1f:9c:28:ea:26:
9b:a6:c9:1a:6d:48:c8:e0:92:dc:90:00:25:b3:49:12:37:12:
3a:d9:94:40:32:9b:de:48:19:8d:88:3a:7c:fe:41:2d:d8:d1:
54:1c:fc:12:a3:28:40:f2:22:5b:2b:22:b1:cf:46:b2:9c:c4:
3f:ae:40:3a:df:d6:a1:ff:76:a8:6f:c3:17:e6:ca:a8:65:47:
ad:89:61:8b:29:71:ad:3e:9e:6e:06:ed:66:04:49:6c:02:35:
14:9e:b0:1c:8c:72:db:e0:b8:0e:fb:e6:a0:ee:b4:15:50:9d:
02:ae:3c:b0:1d:37:ba:c2:ba:ff:9b:fb:4e:1d:9a:63:29:c0:
25:3d:26:30:9d:88:13:d1:5a:93:e7:14:39:b1:a4:51:92:32:
e3:a9:4d:c6:08:c7:65:4f:83:6d:48:b6:1d:06:ea:3e:6a:72:
11:f2:27:84:26:9a:c5:67:33:86:5c:71:23:42:d4:cb:ca:6f:
fc:3d:6c:81:04:eb:b7:13:cf:d9:66:2b:67:be:e3:cb:d2:52:
65:4a:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:31:08 2026 by rpki-client