Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: yHH3O0IdalsujyL07dlZVzoUWfz0Q3E5IRww9PMIOUw=
Subject key identifier: 55:56:F5:DA:BC:C8:C4:56:7D:F4:BB:74:53:5B:27:56:A1:EA:B0:69
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019CABA1C4E3DE3DC0A8F65DDE8073265FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0CFB
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: zwq46RQK4Vb1oftp8kqgW4d/NYyYHlQj3+ENn41V19E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c4:e3:de:3d:c0:a8:f6:5d:de:80:73:26:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=5556f5dabcc8c4567df4bb74535b2756a1eab069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:51:e6:47:fe:1d:2c:31:f9:65:26:d7:94:
9e:1c:91:13:6a:a8:09:7d:ba:3b:c7:65:aa:e9:2a:
6f:83:0c:a1:ee:60:17:66:4f:14:d6:bb:50:af:ba:
a3:1c:b8:33:8f:e9:6a:d6:52:50:a6:16:f3:e4:cb:
3c:d6:97:00:d0:4b:d6:33:8a:a9:08:24:87:b0:e2:
56:1d:a1:18:e7:14:56:8f:56:c3:67:78:ad:6f:41:
49:94:16:04:25:d4:49:73:59:6d:7e:43:68:32:fc:
b2:18:30:60:1f:a9:b7:d8:39:34:99:26:3f:c6:c9:
6f:fa:82:27:6a:15:78:65:93:b7:a8:be:51:ce:87:
07:5e:7b:81:0c:1f:e4:1b:fb:dc:47:4d:c9:e3:a8:
03:e4:fc:84:06:fb:ef:51:1b:e3:e3:32:19:b8:11:
ac:9a:77:b3:b1:fd:ca:24:e1:d2:07:84:8b:35:2f:
3e:c2:27:77:4b:7d:60:98:9b:98:8f:67:da:59:60:
c4:c7:cb:aa:c2:a0:1b:db:e1:28:4b:85:0a:0f:52:
c9:31:be:e1:c6:cd:1a:e9:cb:27:a6:ad:d2:63:46:
ef:3f:b1:90:97:92:7c:86:89:12:98:64:cc:4f:99:
59:ee:06:c8:23:bd:0e:27:a3:bc:a9:10:53:49:ff:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:F5:DA:BC:C8:C4:56:7D:F4:BB:74:53:5B:27:56:A1:EA:B0:69
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:ac:7a:1b:d6:1d:ce:ff:de:7d:9a:58:ef:88:96:74:40:
9a:d0:c7:7c:05:33:c6:fc:aa:ca:ba:f4:35:46:93:c9:e8:cd:
d3:a5:ca:de:36:26:9d:83:3c:7c:33:b9:13:7a:c5:70:2d:35:
1d:29:33:0c:53:b0:7e:20:78:64:f5:09:a7:95:f5:8e:d2:a9:
f7:d3:db:f9:12:1b:74:f9:d9:e7:91:4d:29:82:53:5b:73:05:
62:3f:2c:1d:e3:d8:48:a7:e7:b5:27:63:4b:56:0a:3e:ea:c7:
ef:25:05:1a:8f:c7:c5:b5:b3:9a:03:82:cc:15:a9:1a:13:df:
66:9f:3d:ee:d2:e5:99:b3:a2:0b:ba:2f:ea:8d:1d:10:f9:3b:
2d:8e:18:5f:cc:f0:33:44:98:d2:f9:39:d2:36:89:fb:a4:83:
27:fe:af:9e:d3:d2:58:c7:b1:08:fe:ed:42:d7:4b:91:bf:de:
c0:e5:e2:78:76:64:33:7a:09:e3:03:9d:06:b8:52:4d:a6:f9:
34:d6:0b:55:cd:27:02:c3:37:a4:96:6f:9f:c4:ec:3f:9b:e2:
9a:45:a2:a2:2a:fc:9b:f3:eb:63:10:5d:43:62:61:ed:34:2c:
1e:ff:8a:5f:36:8b:8b:92:6b:50:a1:db:ec:4e:3b:7e:43:6a:
c0:62:c8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocTj3j3AqPZd3oBzJl+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw
YTJhMzkwHhcNMjYwMzAxMjMwMDMxWhcNMjYwMzAyMjMwMDMxWjAzMTEwLwYDVQQD
Eyg1NTU2ZjVkYWJjYzhjNDU2N2RmNGJiNzQ1MzViMjc1NmExZWFiMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdR5kf+HSwx+WUm15SeHJETaqgJ
fbo7x2Wq6Spvgwyh7mAXZk8U1rtQr7qjHLgzj+lq1lJQphbz5Ms81pcA0EvWM4qp
CCSHsOJWHaEY5xRWj1bDZ3itb0FJlBYEJdRJc1ltfkNoMvyyGDBgH6m32Dk0mSY/
xslv+oInahV4ZZO3qL5RzocHXnuBDB/kG/vcR03J46gD5PyEBvvvURvj4zIZuBGs
mnezsf3KJOHSB4SLNS8+wid3S31gmJuYj2faWWDEx8uqwqAb2+EoS4UKD1LJMb7h
xs0a6csnpq3SY0bvP7GQl5J8hokSmGTMT5lZ7gbII70OJ6O8qRBTSf+LyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVW9dq8yMRWffS7dFNbJ1ah6rBpMB8GA1UdIwQY
MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt
NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3
LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN32sehvW
Hc7/3n2aWO+IlnRAmtDHfAUzxvyqyrr0NUaTyejN06XK3jYmnYM8fDO5E3rFcC01
HSkzDFOwfiB4ZPUJp5X1jtKp99Pb+RIbdPnZ55FNKYJTW3MFYj8sHePYSKfntSdj
S1YKPurH7yUFGo/HxbWzmgOCzBWpGhPfZp897tLlmbOiC7ov6o0dEPk7LY4YX8zw
M0SY0vk50jaJ+6SDJ/6vntPSWMexCP7tQtdLkb/ewOXieHZkM3oJ4wOdBrhSTab5
NNYLVc0nAsM3pJZvn8TsP5vimkWioir8m/PrYxBdQ2Jh7TQsHv+KXzaLi5JrUKHb
7E47fkNqwGLIGA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:20 2026 by rpki-client