Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: 9UsFlsWPDY7B3+tBn4xqKCERolDlF4GE/aDsXmvCUac=
Subject key identifier: 85:DA:02:DD:E1:6A:76:D2:F1:DC:9F:86:DA:83:5B:C4:DF:85:06:A2
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019EC3374C1222ADCCAA9086D073C2B4A52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0FD8
Signing time: Sat 13 Jun 2026 23:00:41 +0000
Manifest this update: Sat 13 Jun 2026 23:00:41 +0000
Manifest next update: Sun 14 Jun 2026 23:00:41 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: bzRpWJrcnezOVYzuAz3fgp7P+AnOzYjWeCwk6oxtXGc=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:4c:12:22:ad:cc:aa:90:86:d0:73:c2:b4:a5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 13 23:00:41 2026 GMT
Not After : Jun 14 23:00:41 2026 GMT
Subject: CN=85da02dde16a76d2f1dc9f86da835bc4df8506a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:f1:58:d2:27:01:62:72:ef:fe:fd:4f:ed:
b1:0f:97:1d:1c:ff:2e:9f:5c:c8:f1:32:3b:96:16:
c2:e2:09:ea:3d:58:c4:d0:43:04:9b:b9:75:5d:9e:
e5:d1:58:35:7c:fc:2e:92:93:3a:96:2c:0e:28:27:
ab:86:f4:05:72:fc:4a:ca:32:b2:55:af:79:a3:da:
57:61:28:f0:53:66:3a:db:5d:45:8f:2f:ed:5b:a3:
f5:16:c3:04:71:b9:e2:5b:05:ac:fb:30:10:b4:3b:
58:20:f7:8e:71:50:27:39:a4:ea:f7:a5:af:02:a1:
69:5b:2e:c2:c3:3f:80:47:7d:14:84:54:90:9d:d8:
04:49:72:7d:60:bc:75:3f:d9:78:7e:dc:e0:2c:22:
41:d9:e0:58:f8:4d:b7:d8:80:97:b0:dc:c0:4e:14:
ed:6b:9a:03:f9:ac:23:d3:de:c3:ae:ec:9b:62:44:
56:0f:14:fd:eb:97:c4:a3:53:af:9b:0a:a6:17:14:
1a:e5:90:39:b2:57:0e:29:62:e0:fb:b5:82:d1:59:
34:4b:cd:5b:f4:3a:48:c7:c8:f5:3e:32:18:1e:67:
1e:d2:af:86:1e:be:7d:69:ca:01:68:30:3b:ba:b9:
33:29:f1:31:40:58:a5:dd:e4:5d:25:d3:53:35:f3:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:02:DD:E1:6A:76:D2:F1:DC:9F:86:DA:83:5B:C4:DF:85:06:A2
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:8f:d0:62:25:d5:94:bb:c3:bf:49:1b:5e:90:ae:42:10:
63:86:03:cd:46:54:b1:21:c5:c2:b5:d9:53:6a:41:7f:88:f8:
f6:6e:c1:6f:40:6d:ae:b3:5b:cd:8c:99:d1:1a:f8:4e:af:f0:
2a:be:43:df:62:0a:45:18:71:b1:70:11:0d:47:30:b5:73:42:
f5:b6:1f:e6:c2:15:b5:f9:3e:ea:c4:e5:8c:18:eb:1c:4a:95:
bd:bc:29:36:c7:82:f8:75:72:59:fc:22:4c:3a:87:06:ad:e7:
db:91:db:42:07:39:cf:41:85:f5:b9:46:88:1f:47:35:89:f3:
4c:14:61:6e:40:5e:82:35:e4:61:3d:51:53:2d:e8:64:b1:8a:
db:2b:2a:81:63:23:79:61:4a:de:16:a0:b1:b9:8f:30:de:05:
86:5a:ac:75:4a:8c:b0:8c:6c:c9:27:bd:0f:86:63:34:7a:93:
e3:5d:78:01:6e:b3:d2:d7:92:60:f7:11:ca:ae:f8:9d:3a:e2:
7f:55:8d:d4:dc:74:55:e6:fc:de:bf:6e:0d:f1:07:a1:0b:01:
3c:6a:28:59:d6:e4:9d:45:5f:24:ac:57:68:ab:0d:95:b1:70:
5c:cf:33:84:35:18:f7:22:72:00:37:83:8e:b6:8c:fe:e3:d3:
a3:f4:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:12 2026 by rpki-client