Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: mEpi+jT+R640nlP1k17vMvXGUhVYQ6Y4af0ra4tCkXE=
Subject key identifier: FC:BF:A6:E9:DD:E9:1A:F3:EC:60:A5:49:46:59:4E:18:73:49:10:AE
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019CAD90DA1406EEE0F8E676ECB909BDDDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:01:17 +0000
Manifest this update: Mon 02 Mar 2026 08:01:17 +0000
Manifest next update: Tue 03 Mar 2026 08:01:17 +0000
Files and hashes: 1: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: XfRIcRhTz4gZNpqoECBUEEOv13rOKaoqPp5bPtkEVbk=)
2: unrdcZbrdHFGkYI2NvQ0Uuo8iuQ.roa (hash: CvLqQM5rLi1faTdwSBeTlBwQCQBbSATUvwP2tHqg/FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:da:14:06:ee:e0:f8:e6:76:ec:b9:09:bd:dd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Mar 2 08:01:17 2026 GMT
Not After : Mar 3 08:01:17 2026 GMT
Subject: CN=fcbfa6e9dde91af3ec60a54946594e18734910ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:68:ae:3d:a7:4e:98:15:b1:e0:52:d3:bd:
49:f1:73:e5:d2:ea:02:33:b6:7f:2d:69:94:4e:34:
64:d3:9a:6d:dd:db:eb:31:23:28:d9:cb:8d:39:72:
95:18:26:a7:59:94:b5:1d:3b:e7:3b:7a:68:b2:be:
f4:6e:ec:4a:0b:0f:c2:73:16:5d:16:19:66:69:65:
38:b8:8e:39:44:11:4c:b7:5b:9d:cb:07:7d:19:e0:
a5:48:80:14:ce:ad:8d:d0:ee:d5:03:a3:24:57:ce:
c6:1d:c3:39:01:f6:e9:fc:43:0f:38:f9:f9:97:95:
b5:ed:67:42:0c:ae:1f:d4:64:0a:b3:fe:db:fc:7a:
c7:2b:74:f2:28:79:e8:f2:42:6f:c8:d1:f4:9d:10:
2b:5b:ca:76:0b:4d:a4:99:13:12:00:15:d7:78:50:
b7:ec:87:66:cb:19:6d:3b:44:76:cf:12:63:39:cb:
53:f9:8d:4f:27:35:97:08:36:85:4a:cf:24:22:a6:
3a:1c:78:23:f5:19:39:f1:38:4c:7a:9d:7c:4a:ff:
c3:af:79:ee:5d:3a:ed:31:96:e8:b5:46:82:d7:7b:
73:22:ec:54:74:bd:8e:1a:c0:34:f6:b5:0c:18:e2:
4c:9d:13:58:fd:a5:a4:52:18:0f:dc:5f:96:d0:49:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:A6:E9:DD:E9:1A:F3:EC:60:A5:49:46:59:4E:18:73:49:10:AE
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:fb:d8:39:4a:0e:70:7a:65:b8:6c:80:56:eb:6f:31:67:
bb:db:09:8b:62:74:2c:ba:70:a4:4f:c4:8e:b0:3a:f1:c5:b9:
7e:b4:6c:5c:f4:2d:78:6d:a5:dd:e8:2b:b2:7e:8c:01:98:9e:
f5:0d:8a:bf:e5:1e:1f:95:f0:85:fa:48:dd:c3:d3:8a:be:a5:
c5:7e:0e:de:6e:98:7f:b8:af:ac:ee:ef:a4:cb:b4:28:fe:4c:
53:20:1c:a8:d5:7d:93:fe:b8:bb:bc:85:a3:28:0c:52:00:7f:
56:40:ba:75:ed:84:ad:13:9f:4d:da:95:20:9a:2e:71:28:7f:
0e:77:ba:aa:d3:e8:5a:82:09:46:39:f4:b2:10:34:8d:ab:c4:
b0:57:c7:8b:3b:66:7a:d6:dd:d3:15:8c:ac:87:89:dc:91:36:
4d:08:dc:8c:ec:04:8f:79:7d:37:e1:19:e6:fa:15:e0:ed:04:
53:d0:73:6c:f7:0b:21:e5:75:f9:94:70:2b:e4:38:dd:2d:ee:
db:bb:d9:a3:54:65:3b:dc:19:17:94:d7:3b:43:c9:36:46:64:
f6:e9:24:63:fa:72:bd:42:2d:eb:3f:46:5c:c6:ea:2f:f6:1e:
ba:60:03:97:e6:38:db:a8:93:c5:8f:a6:e2:ee:21:33:6f:31:
f0:b0:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:06 2026 by rpki-client