Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: Z/ptf1Xbldbk2WQW+y8Pmm3Q+lZ0r4bNkVWXfvYVbNw=
Subject key identifier: 14:0A:D7:96:58:C8:18:37:B1:3B:39:C4:CE:A5:E0:F4:F2:A8:A6:3C
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019CAC468EDA9741372630672664D1FC7E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0EC3
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: aDIoZ90IsQhauMXnLrmlBeYsZIEc02EaUWsI3OA0m80=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8e:da:97:41:37:26:30:67:26:64:d1:fc:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=140ad79658c81837b13b39c4cea5e0f4f2a8a63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:27:da:b3:02:9a:7a:0d:a5:8c:5f:b2:96:5d:
69:31:0e:03:ce:7c:a2:f4:b7:29:e2:cf:92:24:8e:
83:9d:54:77:c8:3e:8f:34:af:77:a9:78:2b:5c:56:
ae:c9:1d:c1:59:f8:1a:07:ca:ad:52:e8:98:83:65:
79:1f:b6:6e:72:2d:6f:cd:c6:91:ec:ae:4c:29:ed:
f4:21:ac:4a:86:4f:59:69:8a:06:73:76:74:c0:5d:
3c:20:e6:c2:31:7c:1e:13:6f:55:a0:fb:8d:55:a0:
f5:34:7f:e8:0a:b0:25:1c:ba:a5:1e:3c:d8:af:79:
53:2c:a4:2b:8a:fa:40:c7:2f:b1:39:39:a6:8d:8e:
59:db:af:35:35:1e:cd:57:8d:33:78:ea:1b:bd:15:
45:70:3b:ff:ec:95:79:b1:00:83:89:a4:0b:5c:f1:
63:d4:88:29:de:db:d7:73:59:0b:8e:9a:fb:f5:27:
9c:5f:75:bd:52:f2:42:00:31:0f:f4:64:86:eb:e2:
b7:90:a9:90:2d:30:10:cd:c7:e8:8d:5d:c6:55:74:
15:18:79:97:3a:ca:4b:6d:44:33:11:fd:a5:b3:65:
20:37:43:2f:43:fd:f2:94:dc:78:5b:14:3d:d4:57:
9c:23:de:0f:b5:38:7f:6f:e1:a1:4a:d1:93:8c:cb:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:D7:96:58:C8:18:37:B1:3B:39:C4:CE:A5:E0:F4:F2:A8:A6:3C
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:1c:ce:38:26:c6:9d:d6:4f:0e:f3:de:66:7b:8d:fc:ac:
66:46:2b:16:2f:c5:eb:d4:80:4b:88:3f:9e:e6:78:4a:5d:72:
90:e1:f5:40:32:73:d0:7b:48:0a:f2:8f:84:99:a9:d6:b2:ae:
8b:40:81:95:79:14:3e:22:ad:2a:60:d0:d3:5c:f8:44:17:63:
a6:fe:ab:9b:e8:78:75:b7:e6:38:90:13:47:d7:c6:bd:f8:78:
13:73:82:16:14:20:13:7b:21:e3:8d:d4:00:ca:5e:3b:bc:30:
bb:50:d4:0a:21:80:bc:8c:1d:60:ae:5d:83:28:1d:53:a2:f9:
d0:77:99:d5:53:82:33:63:0b:62:a9:58:4b:c8:6b:ea:3e:d4:
26:12:3c:b7:9b:c3:29:4a:9e:ee:8d:3e:6b:bf:83:a0:28:53:
0d:72:9f:22:6f:9e:20:a3:8b:08:c3:d0:91:e1:c8:e2:2f:e7:
a3:d6:e6:a2:95:8c:f4:b8:4c:97:73:fb:4d:c7:b6:75:9d:84:
a9:41:1d:f2:a5:f9:6f:35:1a:a6:3e:ab:d0:e7:ab:d6:36:9d:
a8:cd:15:1d:8c:a1:63:01:1d:88:9a:c9:83:ed:7c:ae:b6:13:
79:1b:34:43:f8:f3:29:f4:33:cf:aa:4e:a4:09:f6:f2:58:22:
58:36:05:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRo7al0E3JjBnJmTR/H5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
EygxNDBhZDc5NjU4YzgxODM3YjEzYjM5YzRjZWE1ZTBmNGYyYThhNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhifaswKaeg2ljF+yll1pMQ4Dznyi
9Lcp4s+SJI6DnVR3yD6PNK93qXgrXFauyR3BWfgaB8qtUuiYg2V5H7Zuci1vzcaR
7K5MKe30IaxKhk9ZaYoGc3Z0wF08IObCMXweE29VoPuNVaD1NH/oCrAlHLqlHjzY
r3lTLKQrivpAxy+xOTmmjY5Z2681NR7NV40zeOobvRVFcDv/7JV5sQCDiaQLXPFj
1Igp3tvXc1kLjpr79SecX3W9UvJCADEP9GSG6+K3kKmQLTAQzcfojV3GVXQVGHmX
OspLbUQzEf2ls2UgN0MvQ/3ylNx4WxQ91FecI94PtTh/b+GhStGTjMuAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQK15ZYyBg3sTs5xM6l4PTyqKY8MB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzQczjgm
xp3WTw7z3mZ7jfysZkYrFi/F69SAS4g/nuZ4Sl1ykOH1QDJz0HtICvKPhJmp1rKu
i0CBlXkUPiKtKmDQ01z4RBdjpv6rm+h4dbfmOJATR9fGvfh4E3OCFhQgE3sh443U
AMpeO7wwu1DUCiGAvIwdYK5dgygdU6L50HeZ1VOCM2MLYqlYS8hr6j7UJhI8t5vD
KUqe7o0+a7+DoChTDXKfIm+eIKOLCMPQkeHI4i/no9bmopWM9LhMl3P7Tce2dZ2E
qUEd8qX5bzUapj6r0Oer1jadqM0VHYyhYwEdiJrJg+18rrYTeRs0Q/jzKfQzz6pO
pAn28lgiWDYF5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:17 2026 by rpki-client