Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: 1s8dxHWF+JELCN1uQBk8kugMQWrYUIDOy+yOLWDwss4=
Subject key identifier: A8:33:2B:E4:BA:DE:F6:E2:2B:EE:AC:84:80:6E:6E:29:A7:BF:13:20
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 019D9B87674DF6D11EDD884BE3DEEB819094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 0CC8
Signing time: Fri 17 Apr 2026 13:00:35 +0000
Manifest this update: Fri 17 Apr 2026 13:00:35 +0000
Manifest next update: Sat 18 Apr 2026 13:00:35 +0000
Files and hashes: 1: AxWMb-RIhBw5hV_JO9SLKcU6yco.roa (hash: /HaJVLFsKyL7mDEWbu8HH89GlOQ19AzPy757mbj2uuc=)
2: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: uYTrsTvs7QWDveO+rt/QmfH7ViMUtCBmQDS1Hgolpcw=)
3: taFcjRRxNjWMa2ZcPBZUQO-J9u4.roa (hash: +8G61MgWw0xZ35qL6ScwA1WWLYha1fTrijpnO0davS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:67:4d:f6:d1:1e:dd:88:4b:e3:de:eb:81:90:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Apr 17 13:00:35 2026 GMT
Not After : Apr 18 13:00:35 2026 GMT
Subject: CN=a8332be4badef6e22beeac84806e6e29a7bf1320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:f3:69:90:c4:0e:ba:7c:70:09:16:65:98:
95:82:5d:2e:ac:0d:25:f3:c1:70:f0:a7:02:ff:73:
ff:01:67:63:6b:e1:4e:aa:22:df:61:ec:55:1f:20:
c7:d5:71:fd:2d:5b:5d:98:01:7a:e2:33:62:52:85:
91:ca:c5:4a:93:ed:35:de:e3:92:26:dc:97:6c:36:
3d:54:82:43:5a:2d:ec:80:b0:e3:92:6f:26:c6:c8:
e2:43:28:8f:99:b9:cc:fd:b8:eb:19:9b:8f:7d:1e:
4b:88:fc:5f:64:5a:b1:5e:23:9d:45:cd:08:f6:04:
74:44:0e:3a:a7:ad:04:c2:8b:e8:f9:fd:35:3c:e9:
a6:08:12:05:8a:6d:79:70:fd:ea:72:03:46:e4:e4:
b8:35:86:23:d4:21:74:3f:c6:b6:49:65:6e:93:ff:
5a:ee:dd:5e:ba:03:7e:37:bf:58:04:e3:f4:d7:62:
da:b4:88:67:c4:fa:a1:d8:5c:95:6b:e0:6c:d9:24:
a6:cb:a4:e4:69:49:c1:7e:76:3c:b2:c2:4a:bd:15:
ed:f2:d6:76:e4:20:3f:53:45:65:da:f8:10:f9:42:
db:3c:73:a6:75:c7:63:7a:04:93:88:84:f6:4c:d4:
39:59:ad:4d:2f:ef:8d:10:65:23:c1:22:96:0d:28:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:2B:E4:BA:DE:F6:E2:2B:EE:AC:84:80:6E:6E:29:A7:BF:13:20
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:e2:09:27:d9:17:bb:a9:2d:5c:fc:dc:61:59:9b:9f:1f:
9a:94:e3:a1:e8:2f:ee:26:d0:42:dd:6c:7a:b7:ff:de:f4:f3:
0b:67:0a:65:ae:ad:7d:06:66:cc:47:4a:d5:e0:02:fe:7b:7e:
00:70:01:40:20:7a:a4:1a:6e:17:c3:7e:0c:5b:90:ac:76:f2:
49:74:4e:eb:15:f1:3b:62:88:d2:5b:79:7a:f6:f6:e0:3a:0c:
25:36:8a:6f:87:f2:1a:cc:51:e0:04:f6:b3:59:ce:11:54:f0:
e2:86:27:7b:7b:b8:09:58:d0:4d:b2:9d:2b:59:5a:87:c9:7f:
b6:12:17:50:79:f8:36:b0:03:db:b5:ff:1d:0f:a5:03:de:ba:
d2:bb:a7:02:54:0a:78:3a:eb:84:4f:f7:f6:61:23:11:e5:53:
f6:35:ac:ef:8f:8c:77:b7:73:e4:1a:7a:2c:66:ef:16:38:d1:
22:32:34:0d:d2:b9:c9:f3:a5:f9:25:68:6f:cf:c9:20:cd:f0:
1a:8c:42:ed:27:d6:eb:d8:ae:ee:29:06:37:63:47:be:23:0f:
64:aa:1a:d8:6a:ab:29:68:d6:ff:e4:d7:f1:00:21:2c:57:cc:
c1:8a:df:17:b8:83:a2:02:61:99:87:76:83:d4:9d:bc:d7:0b:
5c:84:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:31 2026 by rpki-client