Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: fBeH2Q6H2VrGsRYqnI95VmIxnBaysGtC1nl2hk/HOY4=
Subject key identifier: EA:D3:1F:98:D9:DE:67:0D:80:D0:83:04:15:75:BA:E3:E5:97:01:C6
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019CADFE52BF60B70E3BDA8C19F4CD92F24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 9Y5EgTdBAVC4NzlSvPw+76TLmm5D+8i6Q0GOzvXLgTc=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:52:bf:60:b7:0e:3b:da:8c:19:f4:cd:92:f2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=ead31f98d9de670d80d083041575bae3e59701c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:1f:ec:a5:8a:40:1c:57:2f:95:5f:ec:12:
09:fc:07:8a:d6:c0:b4:de:8c:54:5a:e9:9b:01:da:
55:c5:3a:4c:87:8a:1c:f6:80:a9:e3:11:0b:81:53:
5a:d0:29:de:5c:03:7b:15:fd:58:00:55:66:d8:dc:
e2:70:00:e8:5d:61:1d:8b:e5:30:06:6e:9c:75:d3:
96:ea:8d:16:ae:11:03:e7:49:07:ba:c3:ec:21:bd:
65:a0:30:62:d4:b8:08:9c:9d:d5:90:5b:65:d8:34:
ec:98:a1:ff:48:6b:2b:f3:ac:3d:e4:24:ed:5b:1c:
c1:fa:9d:db:bc:da:e9:62:5a:42:a0:f5:64:c2:c4:
ec:c9:44:b1:45:b0:93:b6:a3:a2:d4:1b:d1:6f:b5:
cf:8b:39:8f:6e:ec:4a:32:5c:97:d7:e5:f5:d0:46:
2f:02:99:60:43:eb:5d:76:a9:7f:37:17:53:d7:90:
0a:a5:48:70:a2:ed:70:e6:82:bd:7f:00:f9:0b:94:
8b:4d:43:52:3e:14:90:e4:e5:8e:f0:77:49:4f:85:
47:a2:a4:2e:c1:f4:d9:55:19:a8:57:a8:c0:18:34:
a5:d4:a9:95:6f:31:74:4f:b1:7a:40:4c:a8:74:1d:
0e:4e:b4:74:4a:d3:3e:a9:ee:9d:57:df:2f:ab:a7:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D3:1F:98:D9:DE:67:0D:80:D0:83:04:15:75:BA:E3:E5:97:01:C6
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a2:8b:9e:d6:0a:5c:30:12:51:ea:42:84:29:f9:c2:e4:00:
cd:7a:92:d8:cd:fb:c0:15:ed:1f:cf:9a:c6:e9:a5:6e:c3:8a:
fa:de:61:0c:d6:30:cd:e8:82:0d:a8:33:c9:13:95:e0:8e:50:
53:44:ff:8d:6f:28:25:79:e1:fe:69:b5:40:09:f5:e9:cb:6a:
54:21:41:0e:f3:fa:71:a6:61:44:2a:3b:e6:4b:bb:aa:6c:2e:
0a:fb:c0:71:52:bd:d7:cb:58:58:bb:90:8b:65:92:1a:67:32:
5f:42:51:91:5a:4b:a4:58:bc:b7:b1:0a:f8:13:b3:7a:c3:cc:
7b:66:38:50:e7:17:33:75:49:57:05:72:1b:61:0b:04:73:f5:
d7:9e:b5:2c:5b:45:52:1b:69:b4:80:0b:03:91:63:23:d4:43:
a6:b5:37:47:59:31:30:13:1a:1b:6a:66:63:0c:0e:2d:0e:dd:
4e:36:b0:b9:c1:63:b6:db:0f:22:14:4d:3a:b0:a9:33:a2:b6:
bf:17:d1:73:88:0a:36:91:dd:e8:1c:af:d9:72:f3:d7:bf:7f:
a2:da:9a:04:0c:7f:d5:df:cf:60:5e:da:03:2f:95:7e:74:37:
af:eb:00:3d:28:37:04:5b:15:53:2a:5e:8c:02:f5:66:8e:f0:
06:ee:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:04 2026 by rpki-client