Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: pPF1dGKJnbXH/bm0gs96nugkbG7uIMwUj1uecyFk1+E=
Subject key identifier: DC:3C:FD:58:E9:41:38:11:AE:D3:47:7F:44:9F:96:A7:32:21:5D:3B
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 01A189AE13F584E7628E1E7D3C6E9397AC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0ED1
Signing time: Thu 29 Oct 2026 22:00:49 +0000
Manifest this update: Thu 29 Oct 2026 22:00:49 +0000
Manifest next update: Fri 30 Oct 2026 22:00:49 +0000
Files and hashes: 1: AxWMb-RIhBw5hV_JO9SLKcU6yco.roa (hash: /HaJVLFsKyL7mDEWbu8HH89GlOQ19AzPy757mbj2uuc=)
2: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: Ncmw3nSBLUt1NVxLbeRUN99SXdVvr6HeUzAiZQCar4k=)
3: taFcjRRxNjWMa2ZcPBZUQO-J9u4.roa (hash: +8G61MgWw0xZ35qL6ScwA1WWLYha1fTrijpnO0davS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:ae:13:f5:84:e7:62:8e:1e:7d:3c:6e:93:97:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Oct 29 22:00:49 2026 GMT
Not After : Oct 30 22:00:49 2026 GMT
Subject: CN=dc3cfd58e9413811aed3477f449f96a732215d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:28:53:fb:aa:88:33:f2:36:9f:fd:76:ed:
51:11:6b:e7:2b:b1:0e:65:ce:2c:9c:97:17:7f:ed:
1b:9b:6e:4b:b9:43:55:9c:63:55:65:a6:68:da:ed:
8a:c1:98:27:a0:56:95:a2:64:b5:d8:7a:48:e2:18:
93:7d:3a:64:cb:fe:94:e3:af:37:90:7e:1f:91:62:
10:93:cb:9a:7b:5f:b9:ee:02:a0:67:38:63:b8:17:
ec:e1:44:23:76:32:8e:a2:1b:2c:2b:62:10:c2:12:
37:62:6c:d5:8b:ca:f2:f9:59:cf:ea:00:39:79:27:
83:7c:98:c4:5f:d4:02:b5:e7:26:a3:e4:7f:07:52:
e2:67:8e:4c:18:9b:c5:23:bb:38:1e:0f:f6:c3:3d:
4c:01:54:72:20:4a:03:26:20:fa:f5:01:b4:54:fe:
b6:d7:be:55:38:11:48:74:70:1d:f9:49:9b:1a:00:
1a:ea:ea:20:a0:b7:18:f6:cd:e7:86:23:dc:ff:37:
80:f8:29:2f:91:fc:54:b6:4d:68:61:cf:6e:f8:a5:
43:5d:41:52:ec:47:b8:07:12:ea:cc:40:13:57:24:
28:89:82:5f:28:44:f5:dd:40:5d:c9:64:af:58:27:
1e:4b:37:b0:94:7c:56:42:3d:a2:df:28:c8:98:3f:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:FD:58:E9:41:38:11:AE:D3:47:7F:44:9F:96:A7:32:21:5D:3B
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:45:ff:50:f0:ce:36:6f:55:fa:1a:1d:bf:21:5f:e0:75:79:
80:27:d6:5f:50:a7:c2:ca:3a:d6:62:cc:3d:f0:12:8f:12:17:
19:cd:ba:4a:ff:d3:74:c4:df:16:83:9e:71:e6:bd:c6:d5:1b:
05:d0:b8:bc:05:dc:5b:c8:ee:81:b0:d0:d9:ca:22:34:6b:62:
61:74:6a:6e:c9:fc:f3:04:c8:32:be:04:18:ed:c6:3a:93:d3:
a1:b2:7d:ca:f7:57:13:0f:b5:6f:0b:37:f0:10:2d:e8:46:68:
ee:3e:87:c4:6f:40:9f:14:20:8b:c9:17:25:3a:d1:f9:f0:61:
7c:2a:bf:51:3e:00:af:b8:3f:d4:05:5d:f5:b8:c5:d9:cd:32:
cf:bb:e0:16:10:40:24:1c:30:99:b7:d8:4d:5f:bb:85:fb:56:
61:51:b4:f8:ac:16:de:98:a1:d2:98:6b:65:9f:cc:3c:2a:1b:
c6:b1:21:70:e4:48:de:36:17:55:22:ad:84:7d:ff:7d:ee:3b:
1f:9d:4e:2c:ee:a6:94:91:6d:5b:97:4f:ff:52:50:1f:82:2c:
f0:f2:46:c3:e9:5e:cc:13:7a:3f:e8:94:65:2d:40:b0:b3:a6:
66:93:1b:97:f1:c2:99:39:5d:ea:34:79:2f:47:f3:39:fe:85:
ee:7d:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:12:47 2026 by rpki-client