Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: MPwCzoiw5s83N8RJL1teg+cirKGPz2ZXaoGuW7cJAto=
Subject key identifier: A8:53:A3:EA:64:C7:38:9B:BA:34:C2:CC:F1:25:11:2A:DE:88:2C:EC
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019D9D083C8506C7C36375675122D8CF3A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0D78
Signing time: Fri 17 Apr 2026 20:00:55 +0000
Manifest this update: Fri 17 Apr 2026 20:00:55 +0000
Manifest next update: Sat 18 Apr 2026 20:00:55 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: LJV7crSRMeFgLCMgP7GU+YMbBMmIgcnidhezRW71Fdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:3c:85:06:c7:c3:63:75:67:51:22:d8:cf:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Apr 17 20:00:55 2026 GMT
Not After : Apr 18 20:00:55 2026 GMT
Subject: CN=a853a3ea64c7389bba34c2ccf125112ade882cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:9e:dd:a5:e5:a2:fb:f5:db:6a:3a:ca:81:
ce:6e:17:f8:6a:16:83:e1:92:4c:2f:38:54:60:b6:
31:17:b9:94:df:ac:9f:e6:f5:25:f9:f5:a6:a0:03:
53:82:75:57:a0:0f:39:bd:35:61:01:ef:e3:28:7d:
fe:06:9f:43:31:95:24:2c:3e:39:d3:1c:0a:b6:1f:
b4:85:a4:f3:28:4b:d6:d4:73:9e:7d:39:1c:cd:d2:
1f:9c:39:64:02:ec:b6:14:13:81:18:ef:d9:19:81:
e6:80:e5:fa:92:ab:88:d2:fb:9e:61:2c:cb:15:26:
87:a4:37:0e:46:31:07:cd:c8:49:48:69:bf:07:1f:
36:9d:0e:dc:d3:87:ce:98:55:65:45:ec:42:47:78:
82:57:18:ff:71:e2:a3:2e:26:8a:cf:48:d8:27:78:
01:16:00:11:4c:c4:14:d4:86:63:50:56:98:47:b5:
45:1a:45:3c:6e:f2:77:88:ad:76:b3:d1:e7:ad:c0:
b6:8d:70:f8:73:de:a9:17:0a:3c:eb:af:b4:78:ef:
ff:6c:5a:7a:4d:60:fc:fb:03:1c:34:eb:90:5d:f9:
3b:10:e7:dc:7e:8b:a8:5e:2f:99:8a:bf:79:4f:ce:
c0:b9:55:2f:71:89:d2:c0:50:ca:f2:19:e4:7d:19:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:A3:EA:64:C7:38:9B:BA:34:C2:CC:F1:25:11:2A:DE:88:2C:EC
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:90:9b:f3:a3:40:19:28:99:cb:de:fc:28:76:13:1b:bc:b4:
e6:bf:17:77:df:14:ce:69:1c:f4:3e:60:93:e5:02:7e:3c:04:
bd:04:ed:eb:c5:b0:64:6f:ae:d9:50:1e:03:ad:cf:12:91:f0:
9f:a4:b7:83:c7:83:1e:e9:54:b8:33:43:da:45:1b:fd:cb:0c:
65:71:9b:b4:14:88:c3:ab:2c:30:16:9b:17:84:c6:ef:51:bb:
15:6e:0e:18:5f:fa:4d:f4:86:29:27:b6:70:b2:1a:13:9d:1f:
01:a5:76:03:74:8e:7b:f6:a6:39:28:fc:8e:5b:49:f7:ea:4b:
1b:8d:6f:fa:e0:63:a7:78:90:11:72:82:51:c9:03:11:28:ed:
cb:74:a8:ca:46:ff:d7:85:0c:cb:e9:59:1f:e4:98:7a:8b:a9:
5b:27:93:61:b5:b6:15:21:29:7f:87:c8:10:71:f1:c0:c7:d8:
dc:1b:b6:c2:3b:df:75:7d:4c:77:26:48:84:f7:f9:c5:5f:5b:
4d:f7:74:c5:b1:db:d8:d2:1d:31:f6:e2:e0:b0:96:53:ea:46:
92:df:9b:b4:50:5d:05:46:9c:fe:20:09:d2:31:5d:2f:b2:eb:
8a:d9:15:66:08:84:28:a0:0f:a1:38:7a:82:ab:dc:eb:b6:91:
47:d9:95:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCDyFBsfDY3VnUSLYzzo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw
YTJhMzkwHhcNMjYwNDE3MjAwMDU1WhcNMjYwNDE4MjAwMDU1WjAzMTEwLwYDVQQD
EyhhODUzYTNlYTY0YzczODliYmEzNGMyY2NmMTI1MTEyYWRlODgyY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJae3aXlovv122o6yoHObhf4ahaD
4ZJMLzhUYLYxF7mU36yf5vUl+fWmoANTgnVXoA85vTVhAe/jKH3+Bp9DMZUkLD45
0xwKth+0haTzKEvW1HOefTkczdIfnDlkAuy2FBOBGO/ZGYHmgOX6kquI0vueYSzL
FSaHpDcORjEHzchJSGm/Bx82nQ7c04fOmFVlRexCR3iCVxj/ceKjLiaKz0jYJ3gB
FgARTMQU1IZjUFaYR7VFGkU8bvJ3iK12s9HnrcC2jXD4c96pFwo866+0eO//bFp6
TWD8+wMcNOuQXfk7EOfcfouoXi+Zir95T87AuVUvcYnSwFDK8hnkfRkiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhTo+pkxzibujTCzPElESreiCzsMB8GA1UdIwQY
MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt
NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3
LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJCb86NA
GSiZy978KHYTG7y05r8Xd98Uzmkc9D5gk+UCfjwEvQTt68WwZG+u2VAeA63PEpHw
n6S3g8eDHulUuDND2kUb/csMZXGbtBSIw6ssMBabF4TG71G7FW4OGF/6TfSGKSe2
cLIaE50fAaV2A3SOe/amOSj8jltJ9+pLG41v+uBjp3iQEXKCUckDESjty3Soykb/
14UMy+lZH+SYeoupWyeTYbW2FSEpf4fIEHHxwMfY3Bu2wjvfdX1MdyZIhPf5xV9b
Tfd0xbHb2NIdMfbi4LCWU+pGkt+btFBdBUac/iAJ0jFdL7LritkVZgiEKKAPoTh6
gqvc67aRR9mVtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:57 2026 by rpki-client