Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: TSTbkUMXB79UWt41TlGIz1Dr/NqtisjWbY93dRe8/xU=
Subject key identifier: 92:36:8D:D3:F1:79:7E:3C:89:53:CD:67:3B:6B:1C:EC:BB:14:09:47
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019D389BEA54C8769B968E071A05C21767FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: R3dSlYqU2jz7tYWmYKXwxrvzHeKSZyIc8WIXUbBgPzE=)
3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ea:54:c8:76:9b:96:8e:07:1a:05:c2:17:67:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=92368dd3f1797e3c8953cd673b6b1cecbb140947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:dd:6e:2d:5a:de:ad:c3:90:9f:d9:bc:c1:
c0:83:e6:b1:32:59:34:4c:15:12:16:d8:23:37:c8:
a9:0b:c8:f4:f7:0d:d0:7d:96:32:cf:3c:0f:ce:fb:
0b:44:fa:e8:5e:ec:82:22:55:0f:7d:50:29:4c:ff:
53:a1:71:0b:b7:d5:bc:6c:43:b6:f4:fe:3d:fc:60:
d7:47:2f:92:be:fb:1a:15:e8:49:50:0d:d7:d5:83:
6a:e0:12:71:26:2b:ed:cd:ef:ed:e0:85:0e:57:cf:
c2:be:7e:2c:c3:df:e3:19:aa:e7:2b:c5:aa:61:29:
bb:19:49:c0:31:53:7d:50:01:e6:46:aa:1e:ea:3a:
0c:54:4e:db:6c:e1:ff:99:ab:7c:cc:b0:9c:e8:b6:
b0:0a:85:bc:78:0d:bd:6c:d8:73:cd:cd:8d:fc:cf:
d1:a3:41:3e:84:40:a5:ff:3a:bf:e9:bf:99:28:4e:
9f:30:48:e7:45:e5:6d:09:a2:ec:ce:08:80:48:db:
12:ed:b0:d3:69:07:c5:7f:5c:98:3c:f1:f5:15:df:
48:b4:43:00:f3:ae:81:98:61:1f:95:96:08:d1:2d:
f2:e6:7b:df:40:8f:69:91:0e:0b:f0:0e:0e:86:04:
63:70:36:9e:d2:4e:eb:98:5f:bd:77:02:73:eb:7c:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:8D:D3:F1:79:7E:3C:89:53:CD:67:3B:6B:1C:EC:BB:14:09:47
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:1e:e2:43:de:20:d4:8d:e9:c8:c9:77:f3:85:3b:53:e5:
74:95:64:00:d8:63:43:68:86:b1:8a:95:34:cf:c3:f2:5b:b5:
54:c5:df:23:49:15:1e:a3:b0:c2:fc:bb:50:30:b3:e1:47:ea:
de:a0:b3:40:43:a9:f0:ea:b8:f5:34:90:34:a1:fc:9b:0d:37:
82:b1:e6:26:a6:72:43:49:b7:eb:33:e6:3b:7d:98:2c:f8:f7:
ae:36:c3:04:80:df:f1:ec:81:9f:ca:b7:b9:d4:e0:33:7c:2b:
d8:99:e9:f8:72:57:81:56:d6:6e:c9:29:8d:c2:e6:04:9c:9a:
3d:4a:61:d7:b4:3c:ab:6b:19:05:11:28:1c:01:a8:47:0d:08:
99:10:18:33:12:3b:46:10:cd:25:4a:f3:6f:06:9b:8c:bb:ba:
81:16:f6:ac:f4:d0:a6:44:c4:0a:5d:43:70:ee:77:cb:8f:f3:
92:64:78:ff:19:d5:d3:c3:12:0c:a7:08:a9:0b:cb:94:ed:1a:
0b:14:c5:2d:5a:6c:7c:25:ab:17:c8:57:a4:dc:e2:68:83:07:
a4:48:5e:57:1a:bd:bd:55:d7:f0:39:15:d0:0f:1c:33:f5:27:
98:9b:72:29:70:35:2b:5a:5f:4f:84:65:13:53:0a:d0:07:72:
73:3c:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:41 2026 by rpki-client