Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: tWBbTvNbP2gyWznxdC6UM3+DttYUctuzo1oS9RM5xqs=
Subject key identifier: DE:4F:81:ED:D8:4E:7F:C1:53:AA:16:D8:B6:28:61:E5:B1:79:4D:C2
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019EB98F29D59B65F6C080E2D2F74279BD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0FD3
Signing time: Fri 12 Jun 2026 02:00:27 +0000
Manifest this update: Fri 12 Jun 2026 02:00:27 +0000
Manifest next update: Sat 13 Jun 2026 02:00:27 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: Z31Nbi1AWTyZa4OWISPpSJoK96p48GYEqJyx/sEj+c8=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:29:d5:9b:65:f6:c0:80:e2:d2:f7:42:79:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 12 02:00:27 2026 GMT
Not After : Jun 13 02:00:27 2026 GMT
Subject: CN=de4f81edd84e7fc153aa16d8b62861e5b1794dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:dc:d3:75:13:bb:4a:92:36:13:49:f0:d6:
46:19:b4:70:99:f6:01:0f:a6:d7:56:25:02:fa:03:
6b:5b:91:e4:e9:0a:7e:e4:69:a5:a6:d9:ea:cc:b1:
c7:b8:54:8f:7a:f3:94:8d:11:33:18:ce:5b:16:64:
7d:59:cf:ee:10:c2:5e:39:9b:d4:d6:e8:eb:aa:6c:
8f:e8:fd:40:39:94:e2:e0:3a:eb:4c:23:27:03:f0:
45:a4:d3:20:bb:06:cc:16:09:f8:0b:e2:87:f1:bd:
e5:2d:0c:5b:a4:f5:48:d1:1c:83:44:d6:18:0c:94:
1f:39:f6:34:fd:0d:89:9d:8c:ae:f3:ae:3e:39:71:
fc:60:1c:e3:3f:f3:33:8b:d3:09:3c:e6:e7:6d:6b:
ad:3a:e4:14:c4:c2:10:f2:2e:d8:a2:27:5b:b2:43:
f3:eb:0f:55:b0:3b:bc:4e:48:74:36:be:c5:0d:42:
cc:3f:76:47:d4:b1:b0:19:77:3b:58:90:02:56:9a:
a1:b8:84:be:86:05:e5:c0:94:24:49:bd:1d:55:48:
c2:3b:a4:f6:8c:70:87:ee:9e:ed:a6:cf:79:3b:83:
da:5e:63:e5:9d:3f:68:1a:72:70:fd:bd:46:0d:a0:
37:7c:20:c0:02:40:fc:e1:d4:9a:4d:c2:dc:78:23:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:81:ED:D8:4E:7F:C1:53:AA:16:D8:B6:28:61:E5:B1:79:4D:C2
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:65:12:61:0c:f8:a2:6b:2a:ac:e2:4c:27:fa:60:32:63:12:
0a:15:22:6a:2f:63:27:98:02:7b:30:0a:62:6d:05:5d:2f:dc:
5c:ae:3e:31:e9:60:c1:dd:02:c2:93:4b:68:62:28:38:d5:a3:
56:3c:d7:94:20:97:a5:93:5d:a0:01:ce:f8:db:03:ce:ca:ca:
ab:b0:61:8f:5a:72:3b:9a:c0:6a:ae:2c:5b:50:00:53:bb:60:
1e:fb:1c:f7:02:14:a4:ff:84:9d:7b:22:69:e3:06:44:ff:dc:
cc:b4:ea:d9:ad:f4:09:ea:97:94:e1:eb:be:92:a1:7f:74:ed:
59:b3:54:51:4d:08:61:98:c4:f8:3d:ef:fb:de:1d:5f:87:67:
84:36:77:2f:fd:c2:0c:b7:45:ad:f6:60:ad:ae:74:74:58:fb:
56:44:13:f6:fa:3d:a7:1d:4f:b6:df:f6:39:0c:eb:4a:1e:97:
fd:6f:54:68:23:8b:51:f4:9c:2b:5b:47:7d:30:08:27:38:c0:
81:ef:f8:c3:60:5c:84:37:04:ae:8c:8b:11:92:57:e5:c8:8f:
8b:e4:4f:fb:f0:8f:a8:14:0f:41:1b:05:89:b3:39:15:2e:2f:
64:96:0e:d9:44:bc:0b:c7:68:da:54:04:51:94:fc:64:cc:e0:
50:43:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:36:42 2026 by rpki-client