Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: itL8D4jD8yLYZzDjbwaKqofLYRveU5/hzBpGL8FgblY=
Subject key identifier: 1A:D2:03:91:7E:C6:29:7F:76:C6:28:53:4E:00:6B:BE:E5:C1:F0:8E
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019D992AFFCB77A5678051E30F00B121A94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0D76
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: 8F/uMldipX43uekKu05vWbjN4pg51S+O5MyzRrW6inY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:ff:cb:77:a5:67:80:51:e3:0f:00:b1:21:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=1ad203917ec6297f76c628534e006bbee5c1f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:9c:54:b3:87:e4:66:a1:2c:62:56:21:ab:
8c:27:c6:69:e6:f4:dd:65:86:d4:d0:68:eb:fc:b3:
29:6a:c2:af:d3:88:c6:4b:c8:ec:b7:40:c3:72:61:
24:46:38:70:12:c8:91:42:47:78:57:e4:42:cf:50:
c1:f9:93:84:68:29:4b:70:14:31:a2:fe:de:c9:26:
4f:fb:2e:44:80:4e:8e:29:29:35:34:cb:3d:76:e1:
17:1f:70:61:77:d3:48:58:3d:69:35:19:3b:5a:42:
d8:f4:da:1b:2b:88:98:ca:8b:70:d8:a6:c2:aa:e3:
02:33:b2:25:c2:63:0b:43:7d:0e:a5:09:f9:88:8c:
3d:35:19:53:2d:21:61:2a:df:59:51:20:02:c8:bd:
7b:fb:40:e9:82:f5:56:c3:aa:42:10:92:61:5b:37:
30:cb:ac:47:46:fe:cf:c8:44:d7:0d:6d:c5:82:00:
37:5c:a8:c0:09:8c:8d:ad:9e:1a:b7:ab:87:a7:26:
11:5b:5e:f3:8b:f4:d8:e4:06:40:67:fa:5d:15:c4:
a6:b2:88:79:e0:a9:fa:f0:2c:f8:8c:61:d1:06:e0:
87:fd:96:44:03:ae:09:c1:b4:fb:7a:2c:09:8f:41:
e7:fa:93:1a:f1:66:67:fd:87:b3:97:15:ba:48:78:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:03:91:7E:C6:29:7F:76:C6:28:53:4E:00:6B:BE:E5:C1:F0:8E
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:4c:c3:dc:ca:02:42:83:8e:35:25:cd:2d:db:06:3c:06:
37:ca:13:7f:3f:8d:dd:06:4b:3d:41:d8:ff:05:c1:3a:68:29:
6d:a6:43:7c:2b:e1:c7:60:03:2f:8b:9f:8d:cf:94:37:c9:29:
a9:88:97:d3:f1:17:c4:8e:0c:06:c2:1e:91:c4:c1:b3:e0:cc:
d6:ab:61:d6:8d:a5:34:74:6f:9d:49:eb:5f:ff:9e:91:2e:06:
fe:7f:46:08:e4:58:4c:cf:4d:c1:f5:60:19:3c:81:5e:26:34:
af:7a:3e:20:88:21:9e:8f:0a:1f:16:f3:c1:bc:b0:4e:05:9c:
b5:a4:0c:c5:6c:4a:09:2f:50:a1:3d:27:52:f9:26:c1:28:43:
fc:55:0d:a3:be:05:cb:41:c9:a4:04:16:28:5c:4e:e6:90:a5:
35:02:e2:44:37:5c:bf:38:6c:8b:8b:26:f0:55:a5:44:24:f2:
fd:f2:6f:f9:9a:c1:79:4c:c0:89:e3:49:a6:d4:89:8a:11:c0:
80:f9:42:bb:0d:84:af:e0:9e:42:da:f6:fb:cd:36:54:a9:92:
49:7f:02:75:19:00:48:b2:86:b3:e7:d9:95:ef:dc:74:ab:29:
d1:b2:68:36:53:0e:6f:e1:e6:5b:a7:93:e4:af:7c:b9:f2:e2:
e7:71:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:00 2026 by rpki-client