Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: d+lJ7zNQtzCp7b/TOaxSVgmYI9KQcOXCIZgM3td4DMg=
Subject key identifier: 77:AB:77:7B:7F:8E:2C:31:27:D2:9F:6B:6B:52:89:81:13:24:4A:B6
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019D9B87FD4046462C8DE52A2F944729F425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:13 +0000
Manifest this update: Fri 17 Apr 2026 13:01:13 +0000
Manifest next update: Sat 18 Apr 2026 13:01:13 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: KDjz60xxlf+nyRD/x+lVgNxQZzBHozMjJUr44eRdO78=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:fd:40:46:46:2c:8d:e5:2a:2f:94:47:29:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Apr 17 13:01:13 2026 GMT
Not After : Apr 18 13:01:13 2026 GMT
Subject: CN=77ab777b7f8e2c3127d29f6b6b52898113244ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:c5:4a:85:d7:0a:f6:3f:e5:7a:75:fd:c1:
9d:4f:8f:22:f9:7d:2b:ab:ab:f2:dc:22:fe:b6:2b:
fe:cb:d7:ea:d5:b7:bd:24:26:c6:08:d2:c6:05:b5:
1d:1e:df:f8:a9:b9:85:8a:f9:43:1a:8c:b1:56:85:
c2:6c:0c:bd:67:6c:ad:04:fc:43:cc:bd:1e:76:b9:
5a:5d:11:6a:bb:ad:04:9f:d8:15:1f:d3:db:83:b4:
13:76:87:62:3d:50:39:9e:b4:66:dc:e4:02:55:70:
53:41:f2:d5:1d:b0:fb:9a:3e:81:41:1e:61:69:76:
53:7d:79:60:97:da:41:aa:f1:32:3a:b3:e2:3c:40:
63:e9:40:84:45:36:fb:01:f8:79:bb:ef:6f:ac:31:
f1:92:8a:36:32:60:9a:5c:1d:00:d6:a7:d8:20:f2:
dc:ce:e3:44:02:2f:1b:94:c1:49:80:2b:39:c0:19:
73:5a:d3:39:ed:c7:12:4b:43:f3:7e:07:19:1a:04:
bf:ec:58:8e:28:95:d7:1f:48:a5:3a:30:c6:22:7a:
d6:c9:1e:38:36:16:77:8e:29:ff:5e:ac:fc:15:3b:
bc:5f:f2:e9:f6:23:9c:38:34:44:cf:7a:97:75:63:
3f:9f:07:95:60:dd:d5:0b:6a:f1:f9:0a:9d:eb:cf:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:77:7B:7F:8E:2C:31:27:D2:9F:6B:6B:52:89:81:13:24:4A:B6
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:ba:41:e2:5f:40:ab:a3:6d:ca:e0:6d:78:65:9a:e9:08:
95:29:b2:d5:97:ac:fe:03:76:08:07:ff:55:be:17:d6:fa:fa:
b3:99:c1:ad:4a:7e:46:be:d2:25:23:6e:5f:5b:ba:48:35:9e:
a3:54:13:f7:b5:88:98:7b:bb:64:d8:63:38:08:3c:96:a5:19:
ef:d1:22:2c:fd:d3:ea:77:2b:8e:bd:e7:68:9a:dc:f4:d8:62:
e1:f7:12:13:a4:19:35:b5:14:fc:d1:02:53:31:3a:42:ce:42:
c5:d4:18:20:14:9c:c8:ec:bf:25:5f:6f:91:05:4d:aa:26:cf:
af:5f:4d:5f:a5:0d:62:ea:7d:13:72:0e:7d:c8:ea:74:cb:43:
99:b2:24:83:86:15:51:c3:34:ca:cb:02:9d:cb:07:60:fa:0f:
7a:66:c6:c0:3a:21:04:87:92:6e:27:b1:8f:48:2f:4e:37:e2:
ed:a0:16:70:76:b8:6b:ef:c1:ed:ea:2d:c9:3b:2b:72:94:cf:
ff:70:43:e7:49:8a:86:40:6a:c5:8d:a5:b2:81:85:4f:9a:f3:
51:f7:2c:5a:c1:d4:3e:e8:04:bb:0c:ca:20:51:53:35:1d:b1:
90:40:72:b5:bf:f2:ba:8f:fb:42:d6:d0:c0:8a:43:ea:e3:89:
ef:fb:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:14 2026 by rpki-client