Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: Y9L0CueTUMH4bbdvJtzDZUX476XA+q8A+uePb4U3Ags=
Subject key identifier: C4:21:7D:5C:41:B2:DC:12:6B:DC:97:C2:86:51:C7:69:36:D7:34:12
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019E1ED9D3155F6B094B7504F2ED0FF99FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:52 +0000
Manifest this update: Wed 13 May 2026 01:00:52 +0000
Manifest next update: Thu 14 May 2026 01:00:52 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: wqJgq1CBpjeu136e4sZP+aVuVP39Ju7e3nDHDffsuOI=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d3:15:5f:6b:09:4b:75:04:f2:ed:0f:f9:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: May 13 01:00:52 2026 GMT
Not After : May 14 01:00:52 2026 GMT
Subject: CN=c4217d5c41b2dc126bdc97c28651c76936d73412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:49:8a:4a:ee:9d:cf:7a:d6:e7:04:56:3a:
21:3e:49:47:f2:2e:e1:b2:4a:c3:54:2d:e0:84:02:
e3:a8:9b:b9:27:87:37:c9:02:86:b9:00:47:98:58:
93:9e:c3:b3:70:0e:8e:35:b1:98:c6:32:15:1c:98:
ce:81:60:77:19:b9:7e:40:29:b6:4d:df:f6:9c:a7:
b8:33:a6:25:46:7c:62:ee:77:85:1f:3a:64:ae:07:
e9:90:88:2c:00:79:34:1c:6a:4b:c7:e3:44:26:33:
76:48:30:95:22:ec:52:1a:d5:51:44:fd:9c:70:ee:
28:69:0d:0d:4b:25:ad:e5:0e:33:78:ba:fe:7d:68:
3b:c1:2b:f9:a2:ee:56:2f:ea:59:97:e6:27:f0:74:
cf:58:c0:6f:c5:1e:aa:dd:86:65:57:bc:37:6e:bb:
44:ab:a0:0d:72:6f:e9:3f:51:87:4d:0f:15:07:fe:
80:2b:a2:da:d2:7e:48:d0:26:4a:01:5d:29:46:53:
25:6b:89:d3:b6:cf:92:2e:5c:6a:46:ac:71:33:cb:
d6:28:5a:6c:fc:11:71:e6:40:c9:09:47:71:08:1f:
2e:b7:ee:8f:22:7a:e5:e0:d3:26:bf:b7:d5:13:cc:
0e:78:cf:f7:2a:ef:71:15:46:1c:82:6e:97:50:7f:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:7D:5C:41:B2:DC:12:6B:DC:97:C2:86:51:C7:69:36:D7:34:12
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:a4:f0:cc:b7:11:8d:da:b1:3a:87:2c:9c:ee:6b:a5:5a:
30:06:2c:2d:5d:39:62:f8:1a:f9:41:5f:e5:d7:b2:75:37:a5:
b3:e5:f0:e9:45:bc:7d:93:92:4d:3a:70:ee:ed:05:5e:f1:94:
7e:0f:23:ef:1f:cc:82:e4:39:2f:a2:af:85:a5:63:2b:3f:eb:
fc:1c:bc:12:06:9c:77:ee:70:38:93:08:d9:1a:6d:b3:ed:58:
db:96:76:c0:25:d4:03:a0:60:2e:ec:a5:92:7e:d6:b1:28:48:
c7:4c:1d:20:59:4d:34:78:a7:3e:27:aa:94:d9:2d:0f:00:f8:
a9:a3:82:e2:7a:ed:b1:81:33:14:e1:01:84:69:4a:1b:e1:e4:
01:d5:d9:e6:b8:d6:8a:86:c0:71:fb:50:0d:16:89:7d:39:94:
6e:2e:f5:52:fe:75:3a:38:8c:0e:ba:29:d6:32:6e:a3:db:56:
e3:9e:16:e4:d5:9d:c8:30:28:39:6a:80:04:2e:da:09:39:ee:
4f:da:9b:cf:af:cd:e9:78:9f:0e:16:45:c6:c8:ef:e0:16:a6:
7c:6c:d6:80:2c:7c:78:7d:05:3f:18:a6:8c:4d:3e:09:48:78:
1e:a4:a6:6c:1e:37:5e:4c:d8:16:ed:3c:80:d3:d0:c3:6c:dc:
d1:08:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:27 2026 by rpki-client