Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: hKcPzycK8nXqeGRpBURCT+LbJwQQjO85W7zryt0gylc=
Subject key identifier: 67:C1:A7:4D:A0:1D:E6:4B:C6:01:22:EA:0C:2B:4C:2B:61:0B:0F:5E
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019CE635D43352F6434A1C8E91F8E08649E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0EE1
Signing time: Fri 13 Mar 2026 08:00:13 +0000
Manifest this update: Fri 13 Mar 2026 08:00:13 +0000
Manifest next update: Sat 14 Mar 2026 08:00:13 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: AKC5pEB25OFw2ox5Z/RJdcjT/kdfWEtOzLF3h5K2PUQ=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:d4:33:52:f6:43:4a:1c:8e:91:f8:e0:86:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Mar 13 08:00:13 2026 GMT
Not After : Mar 14 08:00:13 2026 GMT
Subject: CN=67c1a74da01de64bc60122ea0c2b4c2b610b0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:22:62:c5:28:b4:0f:83:37:9a:37:8e:ca:
9d:67:e1:a0:26:bb:56:0e:6a:34:c7:3d:f7:0a:f6:
0d:0d:05:34:43:d0:2f:54:1f:c9:5e:6f:0a:95:79:
58:35:71:25:d6:02:ff:ea:9f:eb:87:d9:2c:2d:6d:
a3:73:43:2b:6e:e1:67:e3:f9:0b:e8:ce:88:96:64:
96:eb:27:ac:74:ce:df:86:5c:bb:a5:75:b9:01:1d:
f7:fa:52:05:97:55:fa:e4:9f:f2:6e:dc:84:35:38:
d1:bc:70:5e:8f:31:5d:a6:d2:1f:35:43:2b:46:cf:
81:bc:db:93:f8:2b:b6:14:97:d6:b9:7f:b6:d4:d7:
56:e9:7e:63:4b:83:b1:ac:e9:14:82:d1:9b:bb:17:
9f:a8:7b:54:c0:1c:1b:46:ef:a7:43:cc:0d:55:fd:
60:b0:26:d8:b6:6a:b3:76:72:f8:34:51:e5:90:fe:
eb:f7:57:12:d5:bb:56:f0:18:bd:c5:ea:96:30:9c:
af:7a:34:bb:3a:0d:c1:78:78:42:08:83:cd:b7:ff:
29:a7:53:38:23:21:af:be:42:4b:0f:da:14:89:af:
7d:e9:b0:68:d4:28:e6:09:28:5f:3d:dd:87:b9:d9:
02:4b:dc:0c:ec:a7:64:45:13:9c:1c:3a:70:2c:df:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:A7:4D:A0:1D:E6:4B:C6:01:22:EA:0C:2B:4C:2B:61:0B:0F:5E
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:da:4f:e9:72:91:90:c7:be:71:d5:26:57:1e:6a:87:a0:54:
22:b1:47:23:da:7c:f3:b3:52:ac:19:3c:96:9b:60:4c:eb:ab:
08:30:69:cd:9d:4c:86:ca:13:45:cd:c4:be:ea:1d:5a:dc:d1:
aa:e8:9d:8b:39:4b:c7:fd:21:dd:bc:d2:f1:17:d0:21:15:6f:
8c:91:88:4c:e5:90:05:ca:c5:9c:7d:22:1e:11:17:02:a3:a6:
be:e9:a9:ef:62:af:69:0c:0a:57:e1:3c:d3:dd:7b:f8:14:32:
63:e5:fb:98:97:11:4b:48:cd:15:c4:42:69:4a:46:4a:4f:76:
ea:21:1e:88:cb:43:d1:b6:c4:ae:02:ae:ae:37:18:6c:7f:ea:
cb:6c:af:0b:55:65:42:e3:c1:df:0a:8a:d8:c9:b1:8c:64:68:
a2:10:15:78:51:47:1b:7a:f2:d8:d6:8a:4b:08:0d:3d:28:7a:
79:8a:0e:a8:d1:1f:da:d6:4f:7c:31:d9:96:28:f8:27:3b:ec:
01:bc:c8:51:49:33:8b:ea:90:37:ac:2e:33:9d:32:b5:e2:61:
e6:0d:f1:fd:f9:ae:58:ed:86:74:51:90:d5:e6:b1:47:98:85:
a8:4e:01:f4:19:59:6a:0b:1e:da:6e:82:ff:de:82:b1:ce:d9:
3c:35:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:01:06 2026 by rpki-client