Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: NwKiw967lXS28QmoUJveEHSsQF+bQLoCZoL7aSyy2DE=
Subject key identifier: 1E:EE:33:87:5A:F7:F6:02:9C:76:A0:5A:55:E3:AA:82:14:38:A4:E0
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019CAD90BE574D2245C1BF0694081350FBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 185B
Signing time: Mon 02 Mar 2026 08:01:10 +0000
Manifest this update: Mon 02 Mar 2026 08:01:10 +0000
Manifest next update: Tue 03 Mar 2026 08:01:10 +0000
Files and hashes: 1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: c9c/rCT5ZsgPMnAj3bLx6eOTtckeZPyKcRmj6w2PL3E=)
3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:be:57:4d:22:45:c1:bf:06:94:08:13:50:fb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Mar 2 08:01:10 2026 GMT
Not After : Mar 3 08:01:10 2026 GMT
Subject: CN=1eee33875af7f6029c76a05a55e3aa821438a4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:7e:36:3f:f7:45:fb:c2:6f:16:45:3a:c7:
6b:2c:5a:9c:c0:e9:66:31:af:31:9c:de:59:32:f1:
f9:a5:8b:2a:3d:aa:69:ba:1f:6e:40:d8:22:e4:ea:
f9:3b:a0:26:cd:52:d1:3d:12:3c:b8:ff:7c:2a:b1:
9b:6e:f6:a3:4a:ca:8e:88:6c:3f:fb:1b:ed:98:4a:
bb:99:ff:a4:20:57:fd:b0:a4:6f:da:60:d0:7f:ef:
e6:04:06:46:48:16:87:ab:38:05:31:69:a2:a1:0e:
2c:9c:f5:78:d9:78:4b:5f:0c:06:9b:24:b0:af:4e:
91:2b:78:b2:07:eb:5a:81:2a:4c:a1:fb:80:18:87:
ce:cc:52:e6:b6:ae:ce:18:a6:67:a3:7d:b2:22:63:
93:15:bb:be:fd:96:d8:56:16:6a:6d:0b:76:97:57:
e3:c1:87:a0:29:38:90:7c:46:20:96:88:41:4d:7c:
46:6e:7a:cb:1f:e0:8f:59:2f:34:43:b3:c1:1f:66:
a7:c6:3a:97:d1:10:02:ac:84:00:7c:71:bb:6f:69:
c9:51:a3:cc:09:42:28:1f:c4:cc:3d:91:51:19:6f:
54:90:03:cd:5e:95:18:93:c5:0e:1e:a2:4e:56:d4:
d5:d7:9d:29:38:da:f8:47:1a:d3:a8:ca:d4:0e:e6:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:33:87:5A:F7:F6:02:9C:76:A0:5A:55:E3:AA:82:14:38:A4:E0
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:78:c9:9d:38:5f:79:b4:d7:dc:2e:bf:34:0e:45:af:e6:
f2:90:89:9e:5b:02:44:f9:99:9d:b0:34:e1:e3:58:4d:9a:6e:
9d:38:00:b4:f7:c7:89:c6:f3:aa:28:ec:50:10:1d:9a:07:2c:
08:72:c9:14:b4:a9:b6:ac:de:78:ed:97:a2:76:e5:0f:db:9f:
bd:39:e1:5b:a8:88:22:80:8e:91:c9:5a:6b:ce:b4:39:e3:36:
67:c5:44:3f:2f:1f:9c:e9:2c:26:2b:47:59:a1:8c:b7:cd:4d:
57:70:5c:54:72:cf:f0:d9:7f:00:47:71:0d:5b:ab:89:3e:dc:
b1:b7:b5:f3:85:58:66:7f:96:8b:3f:fc:3a:b7:0b:a1:e4:26:
e4:b7:65:f5:54:80:8e:1a:7a:19:96:23:13:1e:0f:d3:12:f2:
42:6c:dc:54:37:cf:ce:64:e2:22:dc:6d:86:dd:42:3b:d0:8b:
9f:21:a6:42:3f:75:46:fd:c6:91:20:22:5d:ca:4d:83:28:81:
a7:a0:54:85:71:b9:7e:a5:94:e0:ad:a4:d3:6b:85:65:62:8b:
92:66:35:8d:c2:22:10:bf:21:ed:87:f0:80:1e:5a:ef:3e:6a:
b1:37:78:bf:06:f8:67:7a:3b:1f:52:0c:00:e1:41:46:f0:55:
2f:f6:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:06 2026 by rpki-client