Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: E/C8LwzS1dlLOUOke32ePKQDxln9SzfajLVQS9Aa8Mc=
Subject key identifier: D6:51:64:39:8E:64:A6:CE:53:00:B7:AC:47:5D:B7:93:AF:1B:D7:B2
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01A0C8FD77AFB826B80C1BC2175D5809DEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 11F4
Signing time: Tue 22 Sep 2026 12:00:49 +0000
Manifest this update: Tue 22 Sep 2026 12:00:49 +0000
Manifest next update: Wed 23 Sep 2026 12:00:49 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: gjqAbZvt9AfgZkuHpx573o8ropswWZVbns1pBFCZYCI=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:77:af:b8:26:b8:0c:1b:c2:17:5d:58:09:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Sep 22 12:00:49 2026 GMT
Not After : Sep 23 12:00:49 2026 GMT
Subject: CN=d65164398e64a6ce5300b7ac475db793af1bd7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:0e:d2:c0:96:47:11:01:eb:3c:34:ea:f4:
93:7e:88:64:0f:09:6b:ed:cc:be:40:d7:b2:a6:70:
b4:e2:48:11:70:60:5e:24:0c:66:31:53:c8:6c:62:
15:b3:a8:9f:b7:7a:a6:80:c2:ee:fa:bb:53:09:a2:
69:a1:ea:70:80:b0:6e:d8:17:5b:88:71:ee:e8:15:
9f:c6:c4:fc:ec:4f:53:76:4c:5c:e8:ca:12:57:51:
50:e8:67:58:f9:9c:19:28:ba:56:24:66:8d:65:00:
15:9a:02:28:8a:c5:10:8f:af:99:91:86:1d:9e:ff:
9e:09:ea:f6:ab:a9:40:b3:4e:dd:43:c4:8e:b5:ae:
7f:9c:50:7e:ee:3c:d2:92:33:ca:32:a8:c3:e8:5a:
ce:5c:1f:41:05:1d:6d:7d:eb:b5:3c:70:52:62:ed:
4b:46:b3:dd:1b:1b:a1:82:9c:85:88:e8:b0:2c:cf:
f8:68:62:40:10:29:ab:fd:4a:d7:0d:86:c9:9a:fd:
03:83:b9:6f:32:83:18:2d:28:d4:76:e4:14:ad:bb:
b7:61:fa:2d:cc:6d:ae:ae:22:b3:6a:8f:9b:7a:e7:
42:cc:42:06:62:ac:6b:bb:58:30:71:d6:48:c2:23:
e1:ab:3d:dc:02:ed:21:7d:4f:65:df:09:bf:d2:a7:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:51:64:39:8E:64:A6:CE:53:00:B7:AC:47:5D:B7:93:AF:1B:D7:B2
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:18:41:03:54:9b:da:ab:98:c8:4f:48:b4:8c:49:2b:7c:
1f:d1:59:42:7f:88:fc:6e:2d:84:c8:f0:c7:cc:e8:ba:80:5b:
cd:f5:9c:49:45:d2:25:74:18:a6:fd:74:d3:d2:46:e0:88:72:
74:c3:dc:5a:ce:7b:d0:28:59:31:ab:65:26:6d:19:78:c0:05:
97:4b:89:36:dd:19:e2:88:fb:c1:ce:6e:2d:0c:a4:e7:bb:82:
b2:c2:8a:ff:8f:81:f6:0e:c8:d7:87:7a:e0:f5:71:d1:bb:fe:
f5:df:0f:94:69:93:e2:4f:75:2f:5a:56:c8:c9:81:28:1e:f1:
01:78:09:e8:b8:55:81:a8:93:d3:09:3b:0f:c1:7e:ef:14:ab:
93:d2:d0:d2:c3:63:73:bf:f7:5c:f4:f9:06:08:29:71:84:1b:
d5:ac:4c:93:72:c9:e4:e8:39:da:0d:80:9d:ef:a7:b2:08:ed:
d5:20:76:70:75:43:b9:fd:b0:e6:8a:d1:a7:36:78:b3:92:ff:
de:8a:6e:e5:27:14:4b:e5:c9:b7:12:dc:6f:ad:df:ce:11:d9:
dc:25:1c:07:d1:18:28:ba:9c:0b:76:da:7e:af:54:a6:cf:d8:
c6:ee:ef:39:6d:72:48:bd:32:e8:cc:b4:ba:22:80:f8:f7:f3:
ee:e3:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:37:49 2026 by rpki-client