Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: n4l1C14qmv5c82PwMZszUPaepdvqsqNbdCA7uFMom48=
Subject key identifier: DA:1C:C1:1D:6B:F8:30:EA:53:A6:39:3A:68:0C:A5:3A:A0:6D:BE:C7
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 019D390A18D45BA02C1E135758FE40E8E080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0C95
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: AxWMb-RIhBw5hV_JO9SLKcU6yco.roa (hash: /HaJVLFsKyL7mDEWbu8HH89GlOQ19AzPy757mbj2uuc=)
2: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: i+G1r068SVAdg0SvOV2qUSp6xdw0iHlCAFSv48di4fM=)
3: taFcjRRxNjWMa2ZcPBZUQO-J9u4.roa (hash: +8G61MgWw0xZ35qL6ScwA1WWLYha1fTrijpnO0davS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:18:d4:5b:a0:2c:1e:13:57:58:fe:40:e8:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=da1cc11d6bf830ea53a6393a680ca53aa06dbec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:1b:5d:54:2e:63:0f:35:6c:51:d0:cd:35:
67:ca:af:c1:94:79:fb:62:4e:8e:d8:b6:0a:88:55:
4c:1c:83:45:f3:8a:ed:79:bf:e0:4d:df:d5:e4:e7:
2f:1f:a1:30:69:4c:fe:e1:b2:0a:f7:b0:7c:9e:bc:
fc:d4:1f:d4:0b:68:fa:b0:77:a4:62:18:3a:36:0a:
a9:82:c0:0c:98:f9:1f:c6:a5:04:c0:26:84:52:a3:
e4:0a:70:bc:c0:d0:b6:bc:38:73:18:7e:9a:ca:45:
57:ef:61:c2:44:3d:fc:ea:f7:30:dc:fb:a5:d8:15:
13:5f:79:aa:69:2c:81:d4:bc:4a:12:14:26:a1:6c:
7c:7a:7e:67:6e:73:7a:5f:a4:9a:96:a6:0a:ff:c7:
73:9e:b7:2e:de:51:a9:3f:38:f5:46:e1:59:f6:05:
b3:3f:d2:05:73:5b:cc:e3:b3:52:72:b2:5f:9e:f6:
17:cb:1b:41:3a:02:c5:33:5d:a7:15:8a:bb:fe:78:
47:51:b9:ea:6d:4a:ed:58:11:95:d7:0a:ce:40:7a:
de:64:3c:38:b5:60:a4:3c:6a:81:9e:de:9a:2a:4f:
2c:2f:b9:cc:1e:17:ba:3d:b5:2d:56:e6:c3:8f:92:
82:aa:15:5f:c3:b5:34:aa:af:f6:a1:ec:3f:ba:13:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:C1:1D:6B:F8:30:EA:53:A6:39:3A:68:0C:A5:3A:A0:6D:BE:C7
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:3f:3a:93:0b:8a:4e:d2:3e:ab:c3:e5:a3:ed:08:3b:b5:
ff:0a:0a:63:8c:54:e0:ba:fd:83:73:b2:8e:cc:d6:d2:c7:5a:
f9:2c:fd:0f:6d:5a:1b:76:7f:01:58:25:a9:65:a2:7c:dc:21:
91:bb:97:19:96:94:fa:38:b3:d6:98:e2:61:93:34:ce:39:2b:
b5:f1:ef:b5:20:10:3b:96:00:63:92:f9:b5:8d:3c:60:83:77:
4b:7f:2a:e0:e1:02:9b:3d:d7:e2:3b:21:ed:6c:90:90:77:fc:
0d:8a:48:f7:40:9a:cb:77:09:0e:3c:6a:3c:db:ba:0f:e6:12:
12:b0:f8:0b:97:d1:96:2f:4a:fa:3b:71:70:f5:85:d3:22:00:
c1:a2:4c:62:ff:6d:d5:9f:a0:da:d9:58:81:d7:3e:e2:6b:82:
53:85:40:57:c2:b8:e2:63:ee:b0:66:10:80:13:b2:88:46:12:
a1:fd:54:fd:fc:20:0b:2e:ae:41:aa:2f:85:4b:97:41:aa:ed:
9a:2e:00:4d:1c:d3:5c:ae:ee:38:46:3c:1f:1b:7d:02:4a:57:
89:27:f6:4e:30:41:7a:29:2f:61:56:e6:f2:91:14:c0:26:5d:
e6:1e:2c:8a:62:58:c3:5a:0b:55:b1:8a:bd:99:84:d7:85:5c:
27:e3:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:23 2026 by rpki-client