Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: zBSd+ol4hMSS+H2PdgAYisJvT+c0Rn00tGaT0LnHKDA=
Subject key identifier: 33:BA:65:BF:D2:D6:4D:0C:0A:6B:FB:69:57:FE:75:24:64:10:58:5C
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 019D98F4DA01A6EB63659202FA7E63921288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 07AF
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: StBUV36auZUYaGt6/G+eiH3VrpxppMVSuOlgfWN87ko=)
2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:da:01:a6:eb:63:65:92:02:fa:7e:63:92:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=33ba65bfd2d64d0c0a6bfb6957fe75246410585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:dc:3e:35:5c:2f:f2:c3:f5:02:e9:db:5f:
77:e4:c2:81:51:ad:40:fa:7c:e6:c3:10:7c:b3:9a:
e0:2a:39:7e:6e:49:43:46:e3:f6:d8:5c:22:a6:15:
12:57:2b:e0:43:06:7c:03:5c:14:84:f7:d3:e8:c2:
03:ce:27:e7:9a:14:33:93:68:7b:b4:a2:6d:72:ac:
9f:5e:db:1c:0b:d6:e4:30:ee:1c:8c:f2:f8:51:59:
fb:1b:72:a6:2c:20:22:f4:35:aa:b7:8b:7f:31:c9:
91:cc:0f:4f:44:a5:42:fc:dc:8d:28:76:4d:7d:b6:
8c:0a:5e:9f:a3:8c:c6:b7:7d:a0:b8:47:e5:92:7d:
cb:a5:53:90:bb:1e:79:38:30:81:d0:88:21:7c:70:
e8:ef:8a:f6:de:8a:93:3e:3a:56:a8:19:d3:c9:9b:
4b:c2:18:73:71:10:3c:5e:a9:2d:7d:e2:dd:59:19:
65:50:eb:8b:c0:68:1f:e6:cf:72:83:0c:ac:20:58:
ff:10:df:e1:54:b2:1f:e7:37:79:c6:6b:7d:27:18:
34:9b:43:2f:f8:8c:a9:03:33:c2:01:48:dd:c3:37:
c4:1e:a4:08:ea:02:4c:78:49:39:16:f4:aa:28:fd:
b1:e5:b3:6f:5b:91:2f:cf:9e:11:a0:5a:56:c7:b7:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:65:BF:D2:D6:4D:0C:0A:6B:FB:69:57:FE:75:24:64:10:58:5C
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b4:ed:70:49:f1:71:2e:76:e5:41:48:9a:4a:f9:81:c0:51:
f3:67:36:6d:0b:8d:19:08:d3:02:31:14:2f:4d:15:b8:3a:35:
51:f3:67:7e:44:00:66:af:8c:44:fd:ae:ac:a6:16:d4:8b:7f:
be:8c:32:ab:fc:b1:8e:90:d6:ce:c0:3f:ee:d1:3e:f0:6b:17:
06:fc:e5:c3:83:a9:33:b5:7d:a4:14:f9:08:4f:04:41:44:c6:
c4:ee:f0:dd:cb:92:1a:f4:5f:8d:9a:61:4a:08:1b:1e:4a:d2:
e3:ac:0f:13:57:1f:f3:bb:b5:2a:53:2d:22:30:d2:41:e2:fd:
40:4d:09:9a:6a:c9:cb:cd:24:96:cb:52:38:d3:03:e5:5d:20:
7d:f2:c3:f3:55:8f:82:03:51:85:f3:d3:fc:10:2f:34:55:26:
d2:0a:28:dc:be:a9:a7:69:d9:5b:1a:1f:5a:7a:a6:fe:b1:57:
7a:af:19:68:96:4d:38:e2:3c:e7:95:d0:d0:65:22:8d:5a:af:
9c:fa:d0:b6:69:9b:df:1d:ba:f0:84:d4:51:1b:d2:8f:2b:45:
98:89:c2:56:94:56:67:dc:5b:0d:e9:aa:20:49:7b:33:9d:e2:
1e:29:be:ea:8a:e6:aa:92:44:db:33:66:7d:6d:42:08:d4:40:
d5:f0:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:38 2026 by rpki-client