Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: sOQ3M4QE79Y6E5tzmbtG/NVM7aeG3YKgvWMhR1Bh5b4=
Subject key identifier: DF:CB:92:4D:40:5D:AD:96:3D:9E:30:A4:74:0F:CF:CD:CD:EA:75:4D
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019D9B1A1178F4C0E0F7C17C690C4C4A489E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 18D6
Signing time: Fri 17 Apr 2026 11:01:09 +0000
Manifest this update: Fri 17 Apr 2026 11:01:09 +0000
Manifest next update: Sat 18 Apr 2026 11:01:09 +0000
Files and hashes: 1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: awunBjfFXGuDZ7Hfa5TgsH9Jk8cX87GcBb+fWDzy5eo=)
3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:11:78:f4:c0:e0:f7:c1:7c:69:0c:4c:4a:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Apr 17 11:01:09 2026 GMT
Not After : Apr 18 11:01:09 2026 GMT
Subject: CN=dfcb924d405dad963d9e30a4740fcfcdcdea754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:d0:fb:1b:bd:43:13:0e:82:0c:d3:0b:e8:
41:9b:3e:7e:13:e0:dd:c5:42:4c:cd:14:f6:58:c8:
e1:de:2c:7c:f3:9d:aa:3e:8a:ad:bf:11:d2:a2:d9:
0d:5b:4b:fe:53:4c:ca:c0:8f:5a:6a:a1:8b:56:d1:
8f:4d:5e:9d:19:70:0f:75:78:9c:3b:7e:68:e5:61:
eb:55:30:be:3c:e7:ac:d8:d9:8a:e6:6f:1a:db:5f:
70:5d:48:b8:cb:86:e0:9d:6f:ed:bb:8b:b8:68:58:
ee:77:c6:77:d5:f2:f2:4b:5b:77:20:c0:a7:32:f5:
68:0b:be:3a:51:23:c1:93:8e:c7:78:b2:46:a3:ad:
1e:e5:41:ad:8e:45:35:12:c7:6d:42:cd:72:ce:a0:
4b:ec:28:cf:dc:77:e4:df:66:26:71:f3:b7:ef:af:
98:be:66:58:a5:ac:8e:1a:6e:34:b7:70:c8:03:25:
02:65:3e:1f:30:ea:0d:cc:3a:6f:b1:df:50:d0:da:
f5:f4:4d:4f:c5:1a:41:ba:80:94:e1:93:f9:2a:1f:
3e:bd:ec:ee:69:02:d7:30:36:7e:4e:6a:1a:d3:1a:
79:a3:a6:58:02:23:11:0b:ff:c8:40:89:8e:b7:06:
e0:ab:d1:c0:81:d9:14:fe:c8:fd:ee:24:fd:19:13:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CB:92:4D:40:5D:AD:96:3D:9E:30:A4:74:0F:CF:CD:CD:EA:75:4D
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:16:9d:08:90:0d:d5:c5:60:6c:e5:b7:67:70:b0:48:92:
34:76:ff:0d:a8:1d:ec:e2:d5:b1:e2:61:fc:00:fb:79:9d:b8:
0b:f9:0b:ca:1f:c3:0a:f8:0a:fd:01:a5:6f:d3:e5:b1:ed:23:
7d:84:36:dc:64:90:a6:49:0d:7e:13:07:7b:d1:7d:f6:09:39:
34:89:29:75:9b:2f:0a:cb:71:9b:91:c4:9a:86:e0:b0:fe:f0:
6d:df:db:5c:ba:e7:6f:a2:24:64:62:25:6d:60:43:87:98:c5:
fd:00:61:cb:08:69:40:2e:e4:be:d5:50:4b:ff:6d:df:86:36:
aa:d9:d6:44:92:3f:be:24:e3:5d:16:68:42:4d:43:fb:a4:5a:
16:4f:d3:c4:ed:8d:d3:79:14:88:17:01:85:6b:04:55:50:ea:
72:a8:6c:7c:5c:91:b8:62:bf:66:be:c6:57:5a:d9:a3:e6:f9:
49:e6:11:2b:63:27:20:b0:95:7f:7c:59:12:b0:4a:93:5c:c4:
c6:9f:20:f2:d3:d7:e8:21:3d:d7:5d:ae:a2:38:01:ec:1b:a0:
14:db:38:7c:3c:a8:77:73:ed:be:66:e6:f6:be:1c:58:23:fb:
5a:47:bb:dd:3a:1b:d9:ca:1b:ad:65:58:0d:9c:f2:76:07:22:
be:fd:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:26 2026 by rpki-client