Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: N+rBSo2+IZMysoW6i+VB4nw6F5QVdldDJ4vbv/thQKQ=
Subject key identifier: B0:DA:18:7B:F4:73:97:35:99:15:09:C8:4C:DB:6B:D4:A0:58:A4:85
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019CAA58705D6540690FD38E369A0126FF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: zkzG0T2MqQXn0otpSiC86dGX64uGlXQqRIjlrd/C48s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:70:5d:65:40:69:0f:d3:8e:36:9a:01:26:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=b0da187bf4739735991509c84cdb6bd4a058a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:ba:7d:c5:21:d1:7f:7d:2e:cb:c7:cd:0e:
4a:ac:4c:36:df:7f:da:d6:1e:d5:04:ed:91:32:b8:
c1:d0:24:dc:0b:7c:02:2c:c3:43:a0:7b:a9:83:0b:
b2:71:5f:a4:7a:07:7c:7c:d1:b3:ef:d7:1c:9b:bf:
96:e3:f0:b9:57:08:f4:8d:10:a1:95:55:02:b1:ab:
1a:89:a6:3b:a7:32:b3:f9:55:c1:fe:39:7d:75:b3:
d4:95:2c:da:8f:7a:0d:e4:3b:44:59:b3:77:2f:84:
e3:12:ff:04:27:e7:26:5d:79:da:ec:b5:b0:89:cf:
b4:43:3c:ae:1d:76:c4:7e:b8:44:0f:d0:7b:13:65:
0d:1a:f7:61:a1:0f:a5:3f:41:92:55:4e:68:3f:0d:
bb:3c:fa:b3:78:95:dd:34:25:ca:89:a5:f9:e6:0b:
ed:a4:2c:1f:71:f9:c1:fe:a9:39:a7:67:02:69:18:
40:f9:14:89:eb:1e:4a:ab:e1:4f:7f:fe:3e:65:2a:
a4:cb:44:02:d0:c3:56:84:46:e9:09:c9:8c:95:40:
fd:48:3e:b8:1e:d6:02:d2:74:9e:12:22:b5:14:ca:
c4:14:41:28:6f:fe:dd:e1:41:65:bc:5d:c8:e6:a2:
ed:1d:39:10:65:16:a1:ae:14:6a:49:e5:80:21:e6:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:18:7B:F4:73:97:35:99:15:09:C8:4C:DB:6B:D4:A0:58:A4:85
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8e:d7:e1:62:3a:93:53:a1:4d:1b:7d:23:d4:19:07:a6:40:
05:42:e6:1d:3f:2b:2a:38:8f:02:1c:9d:da:68:61:4f:65:7a:
9b:3d:cc:03:59:5e:21:91:6e:23:16:ed:81:1b:06:27:7f:1b:
fa:75:39:e0:33:30:e3:d9:d7:17:eb:5f:ad:c4:8d:d7:1f:8e:
1b:4a:b5:44:c5:fc:88:25:07:6a:11:88:29:24:d0:92:9b:bd:
e2:34:06:4f:ac:bb:b4:51:4f:57:30:58:c1:36:25:97:e2:cb:
e6:47:08:51:14:19:be:e7:05:db:fc:dd:84:ed:37:ff:37:ae:
fc:ef:b6:a8:bb:57:f1:92:09:70:82:15:d3:ae:a4:22:91:be:
80:d4:bb:5e:76:7c:bf:5d:0b:98:c6:1d:ed:8b:74:ea:ec:42:
23:ce:cd:f5:4c:d9:6c:1b:21:ca:be:cf:cf:3d:33:8a:df:2f:
99:96:9f:22:f0:31:f2:d4:97:8d:a3:ba:6e:6d:fc:57:75:92:
9f:64:a4:d3:17:63:4d:b2:62:c5:c3:83:65:d1:f2:e4:f6:45:
80:d7:67:c7:0a:9f:f2:d5:6f:6e:01:4d:5a:58:c5:25:d8:51:
44:bd:21:19:6a:cb:46:67:24:51:b7:8c:21:cc:12:c8:2c:29:
d8:99:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:31 2026 by rpki-client