Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: L2ZY1LQecEdEFbm/jymFKBadxsEmeglYdb5yml10Uhc=
Subject key identifier: E1:77:3D:F5:BA:7B:F3:C5:49:95:DF:D2:7A:F3:54:93:3C:87:42:92
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019D3941AD22BA4F80B180F51DA12FD7B950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 11:01:38 +0000
Manifest this update: Sun 29 Mar 2026 11:01:38 +0000
Manifest next update: Mon 30 Mar 2026 11:01:38 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: Qz5FlEQANg8SVJ5C4+fUOZ7N9StGN6CWRKQeemuqNw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:ad:22:ba:4f:80:b1:80:f5:1d:a1:2f:d7:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Mar 29 11:01:38 2026 GMT
Not After : Mar 30 11:01:38 2026 GMT
Subject: CN=e1773df5ba7bf3c54995dfd27af354933c874292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:dd:f3:f0:af:42:8b:b4:0e:24:5a:5a:45:
e6:41:27:0a:44:6b:d2:0d:3b:dd:d6:8e:ff:67:40:
34:55:73:ea:b4:98:2e:49:cf:70:05:39:dd:64:f7:
7a:d1:ef:f1:a5:98:ab:19:8a:f3:f0:80:a5:54:34:
d1:4d:b6:1d:60:c1:41:e0:8a:a4:0b:f5:04:40:15:
65:1b:c7:03:7b:92:2b:47:60:69:0d:1d:6c:b7:0c:
5e:af:68:d5:58:ba:87:c0:f7:e8:d4:f3:aa:e8:21:
28:6c:c1:c7:82:fc:26:4b:aa:a0:a3:ab:a7:c0:88:
a9:a3:5d:80:4d:77:c6:11:5f:05:f8:8b:4f:53:7d:
11:ac:4b:3c:2e:ab:6e:de:11:02:ff:4c:ab:15:2a:
4d:a6:29:e5:32:0f:50:b5:02:ea:ce:b7:79:77:7e:
7b:7d:1d:0f:45:f6:85:d3:4a:e6:77:d8:16:95:14:
22:ec:37:ff:d0:e0:3d:f3:99:f2:64:25:87:b6:2b:
71:54:d7:38:98:ff:17:2d:1d:ed:bd:f4:bc:45:74:
1b:35:a1:31:ab:3c:84:27:ce:89:b0:f7:ab:bc:3b:
33:09:dd:3a:ac:fa:22:08:25:3e:41:27:41:77:6b:
43:41:d8:30:0c:d6:c5:a2:de:5e:3b:3d:d3:6b:08:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:3D:F5:BA:7B:F3:C5:49:95:DF:D2:7A:F3:54:93:3C:87:42:92
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:b0:c3:82:d3:71:eb:b4:4a:27:14:df:eb:c9:c1:ad:1d:
37:e6:00:5e:77:6b:ca:da:f4:c8:62:63:cd:f4:37:fa:72:94:
31:8f:69:84:6c:30:be:4a:c1:4e:91:6c:bc:dd:2c:7f:38:ee:
04:f6:87:8f:63:a5:27:70:ca:73:2a:9e:88:eb:58:ab:ee:87:
1a:27:0f:5f:23:f1:e4:d4:58:fe:fc:9a:55:f1:a6:82:2a:87:
5f:c8:db:84:41:8e:64:e3:8d:68:7d:cd:fb:cb:50:d3:5f:81:
02:fc:11:2c:04:ea:7f:96:7c:34:fb:45:b8:54:66:a3:e5:ce:
e2:dd:23:f1:f9:89:75:97:58:1f:29:fa:af:f9:38:b2:cd:75:
3b:64:da:41:0b:22:1c:2d:a8:b8:c2:90:7f:61:df:fb:7a:b7:
54:d9:4b:13:ca:f2:5a:11:bd:1b:11:c8:ab:5a:1c:29:b7:3e:
4d:8d:a8:13:13:19:44:1d:ca:71:b6:9f:11:82:f5:ec:cf:8e:
b6:0c:72:b5:83:97:58:d6:6c:93:fa:ef:db:e5:e8:2a:0c:ed:
49:0f:67:04:82:3c:0e:d3:09:ba:32:d7:bb:2b:01:57:48:c0:
2b:31:cc:a5:dc:03:c5:7b:e9:b2:9d:77:d8:09:06:d3:17:39:
06:ef:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:55 2026 by rpki-client