Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: GKw0ZZXp96lAea/J5KAxAQgSJuGLA/9NJzD26E6cQTQ=
Subject key identifier: 4A:66:23:F3:3D:A6:11:5C:43:E0:7C:10:44:E4:80:65:AA:A0:F4:AB
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019FAC3EEB2E43FAF6201F0EAF8FDE8DA5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0E89
Signing time: Wed 29 Jul 2026 05:00:32 +0000
Manifest this update: Wed 29 Jul 2026 05:00:32 +0000
Manifest next update: Thu 30 Jul 2026 05:00:32 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: d4EUVHLzfne7+C/uyLuwXYOk9/iv8SzPfxjySO6Q5NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:eb:2e:43:fa:f6:20:1f:0e:af:8f:de:8d:a5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jul 29 05:00:32 2026 GMT
Not After : Jul 30 05:00:32 2026 GMT
Subject: CN=4a6623f33da6115c43e07c1044e48065aaa0f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:b7:c6:f7:34:03:e0:0c:7f:00:aa:4c:7b:
88:7d:ec:af:5a:6c:64:aa:56:07:9b:49:df:9e:5e:
e2:93:cb:63:a4:91:2b:55:b3:5c:f2:65:39:45:04:
38:ce:9b:11:fc:6f:1e:43:97:8d:c4:0e:1d:5f:eb:
35:6d:2c:bb:31:cc:f1:d6:5a:3d:46:a8:70:0f:f5:
7c:14:8d:bc:a8:84:0c:05:4b:f9:16:a3:82:ab:10:
3d:84:0a:dd:9b:56:6e:28:0f:01:ae:7d:89:67:99:
0f:ca:11:1b:7d:60:b4:11:04:de:26:fc:d7:65:f0:
0a:42:e2:fc:9b:3b:d0:a5:1d:55:58:dd:dc:e1:f6:
7a:ee:74:91:83:5d:26:ae:09:28:20:b2:c5:48:f7:
25:46:09:35:1d:97:24:fa:45:3a:42:f7:a0:cf:19:
8c:4a:67:48:65:39:51:58:8e:d8:ba:37:56:87:7e:
55:99:d8:f9:f1:9c:4a:9f:1a:c0:6f:e5:12:f6:96:
c8:f4:6e:b6:ae:9c:7f:0a:c1:c6:01:89:de:58:f1:
d4:f9:36:58:e7:fa:16:2e:5c:7a:39:84:8d:ff:ea:
fc:69:8d:a1:4d:e8:7c:ac:ab:f6:7a:6b:c3:fb:5f:
60:c0:06:dc:16:df:8c:4f:9c:9a:e5:28:bd:d3:14:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:23:F3:3D:A6:11:5C:43:E0:7C:10:44:E4:80:65:AA:A0:F4:AB
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ad:5f:33:fb:fb:1a:ed:e9:11:a4:e6:62:85:96:90:5b:b9:
0b:1c:3d:34:9c:ee:24:f9:da:59:11:16:9a:60:13:5b:0e:c0:
26:fd:2d:e5:b4:20:67:64:f3:63:df:47:7b:47:e7:bb:0b:a1:
cd:36:da:3a:ef:36:99:88:9a:fe:66:f0:22:d2:ef:fd:7b:3b:
38:6f:28:85:90:7e:aa:0b:3e:d8:d5:ea:48:1b:5e:da:f5:34:
23:2d:30:09:f7:23:e9:aa:98:39:2f:e5:60:88:78:62:e1:21:
4b:b4:86:7b:94:56:ac:da:85:18:00:a7:d4:e3:6e:7a:06:43:
d9:a3:28:3a:13:be:43:1d:c5:47:ea:e3:06:d9:1c:3d:da:64:
f6:58:e2:9d:17:f6:0f:56:31:bf:ba:a5:18:a0:46:a2:ae:36:
27:88:21:5c:0e:38:14:70:64:ca:72:c4:8a:53:22:02:d8:0f:
27:de:ae:99:10:a2:ae:b6:42:ef:fb:18:a3:97:40:bb:da:0f:
d4:db:17:b5:14:a6:eb:0b:c9:01:49:1c:94:0e:ac:4b:bd:d5:
37:67:32:ce:f0:10:88:42:90:d4:18:93:8e:0e:88:a0:e4:a8:
71:d2:4a:fc:67:a6:26:86:a0:03:69:5d:dc:57:da:fb:b9:ee:
17:93:17:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPusuQ/r2IB8Or4/ejaXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw
YTJhMzkwHhcNMjYwNzI5MDUwMDMyWhcNMjYwNzMwMDUwMDMyWjAzMTEwLwYDVQQD
Eyg0YTY2MjNmMzNkYTYxMTVjNDNlMDdjMTA0NGU0ODA2NWFhYTBmNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs63xvc0A+AMfwCqTHuIfeyvWmxk
qlYHm0nfnl7ik8tjpJErVbNc8mU5RQQ4zpsR/G8eQ5eNxA4dX+s1bSy7Mczx1lo9
RqhwD/V8FI28qIQMBUv5FqOCqxA9hArdm1ZuKA8Brn2JZ5kPyhEbfWC0EQTeJvzX
ZfAKQuL8mzvQpR1VWN3c4fZ67nSRg10mrgkoILLFSPclRgk1HZck+kU6QvegzxmM
SmdIZTlRWI7YujdWh35Vmdj58ZxKnxrAb+US9pbI9G62rpx/CsHGAYneWPHU+TZY
5/oWLlx6OYSN/+r8aY2hTeh8rKv2emvD+19gwAbcFt+MT5ya5Si90xQYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpmI/M9phFcQ+B8EETkgGWqoPSrMB8GA1UdIwQY
MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt
NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3
LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq61fM/v7
Gu3pEaTmYoWWkFu5Cxw9NJzuJPnaWREWmmATWw7AJv0t5bQgZ2TzY99He0fnuwuh
zTbaOu82mYia/mbwItLv/Xs7OG8ohZB+qgs+2NXqSBte2vU0Iy0wCfcj6aqYOS/l
YIh4YuEhS7SGe5RWrNqFGACn1ONuegZD2aMoOhO+Qx3FR+rjBtkcPdpk9ljinRf2
D1Yxv7qlGKBGoq42J4ghXA44FHBkynLEilMiAtgPJ96umRCirrZC7/sYo5dAu9oP
1NsXtRSm6wvJAUkclA6sS73VN2cyzvAQiEKQ1BiTjg6IoOSocdJK/GemJoagA2ld
3Ffa+7nuF5MXWg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:45 2026 by rpki-client