Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: xI/SSrmiaOk4BT6qh7FJ2OSU/n2lL7R2MjkGr4lo/SQ=
Subject key identifier: 20:23:22:48:D4:5C:6C:E8:62:69:3F:2F:92:9A:B6:CA:0E:C0:0B:8C
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 019FAD1AE5BBFCF1609C3B7A965E8B274BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 1161
Signing time: Wed 29 Jul 2026 09:00:48 +0000
Manifest this update: Wed 29 Jul 2026 09:00:48 +0000
Manifest next update: Thu 30 Jul 2026 09:00:48 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: vmhhJE/bVR80XObI56Wu2fz675IcW/5CzWsKPjUeaGU=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e5:bb:fc:f1:60:9c:3b:7a:96:5e:8b:27:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Jul 29 09:00:48 2026 GMT
Not After : Jul 30 09:00:48 2026 GMT
Subject: CN=20232248d45c6ce862693f2f929ab6ca0ec00b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:01:04:33:cb:c1:67:c1:78:cc:a5:7d:94:
35:3e:44:84:28:d1:71:da:63:5f:e4:a3:15:61:0e:
77:b0:d9:8a:6b:3d:c5:11:52:bc:f3:f3:e9:a1:81:
e2:5e:21:c0:01:58:20:50:1c:d1:1e:9b:0f:93:e2:
a1:84:fd:55:f6:7d:64:9c:93:04:ba:c0:ce:6e:85:
bc:e6:c4:81:61:1f:56:28:a6:93:d5:15:9c:88:8a:
0f:2a:86:22:15:72:b8:e3:b8:21:9f:e6:a6:c5:75:
b9:1d:36:69:51:ed:c2:11:c9:3b:c8:f5:12:89:bb:
c8:e7:66:93:a0:9c:2c:79:d6:53:a5:5d:02:5c:e3:
a7:57:54:05:3c:78:67:8e:b1:ca:25:68:23:bd:03:
e1:58:cb:66:25:32:30:ba:30:c0:29:ff:02:08:82:
1e:24:fd:6c:d6:9b:43:d9:46:d5:1f:21:53:45:ac:
f4:b4:6a:e4:8c:9a:95:a6:40:4e:af:2e:78:e6:0d:
8c:7b:36:eb:0d:b9:c6:69:38:15:ce:9b:7e:02:2d:
60:9e:2e:7e:ee:71:54:c5:eb:a2:84:a1:d2:d6:89:
de:9b:61:a3:ff:9d:ae:27:c8:0e:3b:f3:e8:e4:e2:
e8:d1:66:54:47:40:6b:cd:59:dc:1e:fd:ca:db:12:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:22:48:D4:5C:6C:E8:62:69:3F:2F:92:9A:B6:CA:0E:C0:0B:8C
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:00:fb:b3:9d:e7:07:9e:f0:6b:33:3c:fe:bc:c4:64:00:3a:
40:e7:e0:35:37:ec:52:9a:0e:9b:18:d8:da:a2:6b:77:e1:f3:
25:b4:b7:57:22:0c:de:39:da:ef:66:41:b6:bb:87:99:7c:81:
58:c6:44:df:c3:b3:cc:c8:e5:a0:8a:3b:cc:84:24:59:eb:e5:
fd:96:84:15:99:a9:12:30:79:33:89:4d:19:d5:4f:e7:b1:af:
32:44:9d:31:3c:6f:28:e6:a0:5d:39:5f:9d:59:b0:c4:07:c5:
6a:b0:bd:6e:dd:da:23:d6:dc:31:4e:56:a8:43:fa:bc:a2:b0:
6d:ef:eb:90:51:16:4a:15:e8:e4:69:45:64:dc:97:89:90:e9:
f9:a9:98:68:ec:76:5a:ae:9c:9d:98:ff:53:f1:da:5d:7e:2c:
11:d6:61:ab:ac:31:cf:a9:25:6d:90:f9:6c:bd:91:37:1c:7b:
62:e9:12:b0:3c:f8:47:14:66:c3:ae:dd:c5:fa:bc:fe:a7:2b:
17:c7:c1:87:0f:04:3c:8a:07:33:8a:da:ab:88:32:0e:92:89:
fc:31:4a:87:23:3a:fb:89:f3:87:64:b7:2d:88:96:cc:b5:c6:
88:09:96:e8:11:95:87:dd:8e:a6:79:f7:5b:13:ce:0f:86:4d:
72:86:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:30:49 2026 by rpki-client