Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: iJLMo+61IcsCYybLfGnDnMOMTOp4OhueZpaAT43BLb0=
Subject key identifier: 1C:CB:A6:45:AA:62:BE:39:4B:2A:2E:8C:70:05:EA:71:31:79:8D:4F
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 019CAA8FD7736276B86B5A72297617D8F990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0FD2
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: 2sFBOdjwEmxpvOBKx9fnA7LTJyKLGKOsgLZQEafPzZE=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d7:73:62:76:b8:6b:5a:72:29:76:17:d8:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=1ccba645aa62be394b2a2e8c7005ea7131798d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:2f:26:fa:68:e4:1d:84:ab:76:72:f4:00:
e5:3e:6b:62:2d:e8:d1:55:8d:0f:a9:e7:af:ae:14:
ad:ec:08:63:2e:a6:b4:e8:9b:bc:30:8c:7c:9f:f0:
c7:c3:31:16:d3:fa:62:99:9a:62:97:aa:83:ee:4b:
53:53:21:d9:37:2f:f0:5a:6b:88:46:bf:6e:1b:1b:
b2:87:26:8a:5d:e4:f2:41:c3:03:be:36:f4:2e:2d:
59:db:67:49:b6:df:9f:0b:96:db:ef:6b:ee:b4:67:
8b:e0:32:66:2b:de:10:04:48:d5:14:49:3a:2f:46:
71:ec:99:8e:31:1a:02:e3:18:55:24:e5:e4:3c:b6:
fe:1e:ec:d8:f5:a4:4a:43:23:3e:64:33:0d:6e:50:
a0:79:07:af:5c:37:6c:4c:c2:0b:95:f6:05:55:31:
72:79:aa:1b:f4:9d:7a:d6:c5:02:33:45:7c:ab:f1:
ee:d4:e4:07:ac:00:54:a3:e4:65:bd:73:5f:f1:02:
03:06:e7:15:83:71:97:4b:c2:1e:67:a8:89:87:e3:
7f:a9:87:42:b0:0e:d8:25:f7:39:fd:93:8c:d8:70:
03:ec:02:28:78:72:fc:b7:75:35:01:36:d7:f3:58:
41:44:71:f8:e2:08:e7:d5:c2:60:ea:3f:23:58:46:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:A6:45:AA:62:BE:39:4B:2A:2E:8C:70:05:EA:71:31:79:8D:4F
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7d:e6:3d:e4:7a:44:fa:dd:a1:f1:c3:3e:ce:79:41:22:45:
7a:e1:b2:28:b2:2f:f8:2d:90:93:f0:47:16:57:58:50:db:e4:
b4:c5:3c:0e:78:ff:ae:55:ec:8f:a7:cc:99:91:e0:8e:61:55:
96:7f:b0:3c:22:21:1f:8e:15:26:a3:32:9a:61:1b:b2:a5:0f:
83:cf:a2:d3:83:53:38:af:8b:cb:c8:81:d3:8f:f7:8e:4c:82:
71:b3:32:dc:49:27:e0:df:d2:bc:31:9c:70:48:52:51:ad:3e:
09:1e:c3:d9:90:5d:bf:25:11:c0:f1:9d:28:33:d1:cc:7b:97:
85:77:5f:87:5a:8c:4e:cf:bb:4e:fb:b7:52:7f:73:6c:58:02:
8d:e3:36:b1:fd:13:b2:ee:82:15:58:51:09:a7:c3:b6:ee:fc:
43:cf:b8:71:52:8a:91:34:a1:8e:d8:9f:79:4e:8f:96:31:ed:
65:cb:fc:d2:ea:9d:0e:9c:a9:84:75:7c:c8:b0:68:e8:56:a6:
47:75:48:7a:b7:59:78:5a:55:4a:51:3f:a1:01:74:94:21:0d:
b9:dc:68:db:05:01:e4:b9:f2:e5:04:5f:2d:58:cd:bb:2b:e7:
43:79:cd:c4:d0:94:c2:89:95:47:15:79:bb:51:f5:ba:0c:c0:
4f:b9:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:07 2026 by rpki-client