Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: UwFzrKYRemrLFvVNfdPoZHKZ8h2FlrLZZcO7reIBDrg=
Subject key identifier: 25:7B:64:F1:0B:D3:1D:96:3A:88:AD:54:A9:79:66:A5:92:5F:9B:71
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019DCFE3F165641597610CED89A49686DDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0F5A
Signing time: Mon 27 Apr 2026 17:01:55 +0000
Manifest this update: Mon 27 Apr 2026 17:01:55 +0000
Manifest next update: Tue 28 Apr 2026 17:01:55 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: NQFChQ2+26vRfUD0Id47unQTREO2hoZrgat/UWf6d0A=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:f1:65:64:15:97:61:0c:ed:89:a4:96:86:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Apr 27 17:01:55 2026 GMT
Not After : Apr 28 17:01:55 2026 GMT
Subject: CN=257b64f10bd31d963a88ad54a97966a5925f9b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:01:f3:77:12:a7:cd:cf:d3:76:86:fc:01:
ff:94:d5:ad:21:ba:44:e1:e5:ab:51:27:30:aa:6f:
31:72:b5:cb:d8:68:1f:82:7f:cf:d5:95:aa:64:74:
78:5d:e9:b7:67:2f:6a:ef:6d:08:e8:20:fc:a0:b6:
b0:69:28:79:11:bb:b2:e5:ba:ed:c2:bb:c0:03:43:
f5:ca:e7:2c:48:52:df:f6:d6:4a:63:3b:a6:7b:56:
44:c9:53:34:f9:7a:9d:65:8f:95:e4:13:0a:ba:83:
9f:81:6f:c1:4d:f6:1f:b9:2f:84:e6:3e:61:9b:5e:
d7:ba:32:9b:39:75:cf:ed:84:90:ae:eb:37:6e:9c:
ae:87:07:95:ff:37:23:5b:17:ac:17:d0:eb:b8:6c:
1b:3a:cd:9e:96:2a:cd:8e:31:e3:aa:a7:13:59:31:
d5:bb:32:0e:78:c2:fe:d1:7f:9a:ac:07:8d:0d:f3:
dc:51:6f:93:e4:12:b6:d8:5f:ef:6c:07:5e:44:8d:
5d:31:82:60:9d:54:c3:26:ed:18:3e:c9:be:25:df:
d6:2e:12:ac:98:2d:01:8a:ae:a2:e9:89:39:af:aa:
ec:33:70:1b:4c:ad:03:09:df:d6:b5:e8:15:d5:e7:
34:28:4e:f9:3c:b8:a7:d7:9b:eb:e2:06:27:ff:68:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:64:F1:0B:D3:1D:96:3A:88:AD:54:A9:79:66:A5:92:5F:9B:71
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:9c:48:48:88:2a:2e:28:72:3e:51:ab:e9:e6:b6:37:fe:
e2:ce:27:8f:de:51:e9:de:00:4e:eb:77:44:f2:6b:93:b0:ef:
49:d2:8a:8d:c9:88:6c:6c:a0:68:11:96:80:7d:67:46:18:43:
bf:e1:0f:fe:fc:03:70:93:88:7b:18:f3:e9:04:0e:dc:da:b8:
ad:5a:47:09:01:a5:a1:1f:57:0c:67:ab:f2:e7:a8:b1:7b:52:
c3:12:fe:e8:e4:51:3a:d9:d7:4c:2c:8a:8e:d3:b7:50:1b:c7:
a9:e2:a9:df:9b:ae:96:ee:09:fd:81:84:4c:f0:be:8c:a2:da:
6f:e2:9d:2b:e6:26:f5:2e:f4:6d:0f:3e:dd:18:36:77:a3:35:
c2:eb:c8:8d:c6:f5:10:90:01:87:1f:de:a5:56:3a:42:69:88:
51:d1:1c:e3:25:8e:e9:c7:fe:6f:a6:00:70:f6:47:2a:6b:88:
f4:59:6e:9a:08:e1:4f:16:4f:1c:49:5a:a3:a3:39:c4:1f:75:
4c:2e:d6:d0:56:d2:f3:96:2a:a9:64:10:72:01:18:23:bd:90:
db:cb:eb:96:8a:cc:45:83:c3:8a:28:38:3a:f0:d2:b5:8e:b8:
e0:4e:0b:95:1c:6f:9d:8b:d3:fa:df:f4:7a:9f:2c:ab:d2:09:
b8:78:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:11:55 2026 by rpki-client