Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: DHr6zj0ZeBKNBhYXBKhR72QFnGOKBVY37qVk58fslr4=
Subject key identifier: 51:78:30:79:AD:C4:A3:FC:E6:D6:B9:E4:A5:1D:2C:CF:28:6D:B6:AA
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 019CA90EBC434F9082DADE4318CF7E92E0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: 0212
Signing time: Sun 01 Mar 2026 11:00:40 +0000
Manifest this update: Sun 01 Mar 2026 11:00:40 +0000
Manifest next update: Mon 02 Mar 2026 11:00:40 +0000
Files and hashes: 1: 4WrRqTDFyTm1szKwwV0Xhx_GeNY.roa (hash: UQqbqQfwwezREl+rf3IrXTGH3e9sOiVhZFDwlGOjLvE=)
2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: /Si1HlYqkxe99phUqhoEiAJ8jqjJGwMoGJdBbSOfmWA=)
3: VirJ4FMMufMBPFGmLTdS7NiM954.asa (hash: HtijruVhowZabFYLDxbWBFjC7DIj4rAofcdBe14FyKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:bc:43:4f:90:82:da:de:43:18:cf:7e:92:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Mar 1 11:00:40 2026 GMT
Not After : Mar 2 11:00:40 2026 GMT
Subject: CN=51783079adc4a3fce6d6b9e4a51d2ccf286db6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:80:a7:d3:71:03:b1:d9:8f:e9:73:dc:66:
7a:7b:31:e4:94:8a:c6:bf:89:f5:da:68:04:87:d1:
0a:e8:8a:f8:4e:4b:79:7a:59:3e:52:ca:f0:16:96:
cf:cd:d0:f5:57:ae:c3:e1:50:44:44:0a:91:69:2a:
3c:87:71:4b:b5:58:fd:08:1b:97:ee:47:14:e5:9d:
b9:34:d4:f1:e7:34:f9:de:55:5e:d2:30:92:92:05:
86:76:77:8a:b1:62:48:d5:24:a1:69:a3:e9:97:b4:
55:b3:8d:76:4b:36:2a:e1:58:aa:78:01:29:43:30:
df:e9:33:e0:ec:7c:b0:5d:73:31:48:05:22:a2:be:
4d:03:96:b5:7e:7f:3b:86:7f:e6:92:74:d0:97:ca:
4d:f1:24:0c:be:56:d1:20:e1:ea:ff:56:4c:cf:df:
6f:38:ea:9e:04:01:2f:99:e0:06:4d:05:9b:b4:aa:
ac:b3:35:19:74:bb:b5:38:b0:09:35:07:8b:80:40:
bb:c4:85:e0:cb:a8:93:09:a4:3b:94:89:be:03:01:
0e:5b:6e:cb:92:82:58:e3:46:c4:b4:24:27:ac:78:
b1:34:f5:b3:2c:92:43:e6:3c:4c:06:6f:39:bc:d6:
e1:b5:66:d0:2d:bf:e9:c9:50:4c:9e:ab:52:8e:e0:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:30:79:AD:C4:A3:FC:E6:D6:B9:E4:A5:1D:2C:CF:28:6D:B6:AA
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:96:9b:55:f4:00:42:52:88:82:77:45:6d:6d:5f:07:df:
e3:2b:d3:0c:f5:dc:3c:d5:27:18:51:34:97:bf:34:f8:de:22:
e8:84:9b:50:6f:de:bb:c2:f4:a3:48:88:79:41:e7:d7:fe:59:
9a:31:79:33:d1:bd:78:27:4d:ea:09:ef:01:29:d2:32:d5:e5:
61:f5:ba:6e:ef:d4:f8:1a:2b:92:b4:4b:bc:1b:04:1c:07:26:
56:b4:f6:eb:4d:76:09:d4:f3:59:be:c2:39:23:75:67:87:07:
d9:53:3c:26:60:5d:e2:1e:ec:db:83:43:dc:35:97:42:5e:1f:
24:74:1f:c0:1d:88:e0:71:b4:d0:74:f1:29:cd:8b:d4:f5:c8:
f1:42:70:11:12:a2:89:d6:c7:3c:75:73:42:39:72:ed:38:ef:
f4:4a:f7:90:8c:11:bb:af:5c:25:dd:b1:5f:30:49:eb:27:e0:
5b:e0:d7:50:e6:f6:ee:d9:31:a5:bc:aa:c5:d1:c8:be:5b:04:
33:64:79:ce:ef:2a:c1:38:0c:41:70:80:45:8b:e0:a7:7e:8a:
3b:24:54:65:c3:ac:90:6b:9c:73:fe:fe:54:51:f5:5c:0e:e2:
b9:2c:e8:21:2a:5b:9f:b3:29:37:37:13:10:ee:7d:c0:fc:4e:
7e:6f:a0:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDrxDT5CC2t5DGM9+kuD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm
ZDNjMWMwHhcNMjYwMzAxMTEwMDQwWhcNMjYwMzAyMTEwMDQwWjAzMTEwLwYDVQQD
Eyg1MTc4MzA3OWFkYzRhM2ZjZTZkNmI5ZTRhNTFkMmNjZjI4NmRiNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYmAp9NxA7HZj+lz3GZ6ezHklIrG
v4n12mgEh9EK6Ir4Tkt5elk+UsrwFpbPzdD1V67D4VBERAqRaSo8h3FLtVj9CBuX
7kcU5Z25NNTx5zT53lVe0jCSkgWGdneKsWJI1SShaaPpl7RVs412SzYq4ViqeAEp
QzDf6TPg7HywXXMxSAUior5NA5a1fn87hn/mknTQl8pN8SQMvlbRIOHq/1ZMz99v
OOqeBAEvmeAGTQWbtKqsszUZdLu1OLAJNQeLgEC7xIXgy6iTCaQ7lIm+AwEOW27L
koJY40bEtCQnrHixNPWzLJJD5jxMBm85vNbhtWbQLb/pyVBMnqtSjuBmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF4MHmtxKP85ta55KUdLM8obbaqMB8GA1UdIwQY
MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt
N2NkY2I1MGVkMGU0LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0
LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWSWm1X0
AEJSiIJ3RW1tXwff4yvTDPXcPNUnGFE0l780+N4i6ISbUG/eu8L0o0iIeUHn1/5Z
mjF5M9G9eCdN6gnvASnSMtXlYfW6bu/U+BorkrRLvBsEHAcmVrT26012CdTzWb7C
OSN1Z4cH2VM8JmBd4h7s24ND3DWXQl4fJHQfwB2I4HG00HTxKc2L1PXI8UJwERKi
idbHPHVzQjly7Tjv9Er3kIwRu69cJd2xXzBJ6yfgW+DXUOb27tkxpbyqxdHIvlsE
M2R5zu8qwTgMQXCARYvgp36KOyRUZcOskGucc/7+VFH1XA7iuSzoISpbn7MpNzcT
EO59wPxOfm+geg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:15 2026 by rpki-client