Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: cgc91jTTOykMkiqShUFw+Sh7Gqvqwvp+bAaIuUeuwfI=
Subject key identifier: 60:E3:E3:8D:23:9B:AD:3B:09:15:F4:97:A4:D7:61:F6:3B:33:6C:20
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019D27A902E3C6D3A0C4EDFDC6329E277E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 5MJX3ACCigtVpxmXDJQpjBjAbxKNjrf1Vr3mXkA+Elk=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:02:e3:c6:d3:a0:c4:ed:fd:c6:32:9e:27:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=60e3e38d239bad3b0915f497a4d761f63b336c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:3a:85:0e:eb:33:98:04:f5:97:39:19:45:
f3:9e:93:cd:b2:bf:a5:39:43:c6:70:04:08:80:2e:
79:74:9e:48:26:9f:c9:1b:07:85:09:96:ca:86:c0:
f1:d0:0c:6c:58:16:1a:c1:3b:f2:1a:31:ea:c0:59:
f4:c3:a8:6a:33:e5:89:69:03:06:ab:5e:ae:fd:57:
a2:34:09:5c:cb:21:c4:cf:96:fd:53:86:23:a0:93:
65:0e:fe:1d:7c:d8:85:48:1a:9a:88:ef:b3:4a:f9:
c7:d3:cd:77:15:8f:29:0c:bb:bb:bc:89:ee:1c:cc:
3f:71:bb:25:29:e6:14:87:16:aa:c7:f2:22:98:48:
5e:be:0f:05:03:10:f6:95:cc:01:6e:5e:97:c3:2c:
b9:37:ff:d0:76:66:72:04:b1:2c:c9:e7:49:60:eb:
a6:75:18:d2:71:82:fd:b9:f5:db:75:4f:4e:ed:48:
0f:a0:f6:53:cf:f3:94:91:32:6d:4c:bd:20:23:63:
f8:33:80:3b:6e:92:b1:9a:8e:09:e8:cf:fb:26:9f:
4f:52:08:0b:a3:2e:07:b1:6a:d0:36:a0:8b:27:d2:
18:d8:33:63:38:52:5c:7b:f4:25:d3:c7:ce:70:86:
34:da:9d:ec:8b:c0:b4:18:60:07:84:3f:eb:eb:35:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:E3:8D:23:9B:AD:3B:09:15:F4:97:A4:D7:61:F6:3B:33:6C:20
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:14:b8:98:b7:d3:38:c8:ef:3c:c5:eb:b4:42:a9:6b:0e:
7a:35:39:5e:a0:e5:ea:b5:23:8d:eb:6b:d9:c9:fe:b4:7c:f6:
79:04:a7:55:75:b6:70:ec:a1:d2:54:46:0f:8b:83:e3:cc:6e:
19:80:a7:45:ad:9e:6e:5a:14:9e:e2:2a:5a:1b:1b:2d:52:bc:
bf:96:30:d2:c8:1f:d6:52:e0:eb:68:39:76:9b:a5:ba:02:bd:
c4:2c:0d:fa:d0:a6:8c:36:fb:79:59:d2:46:ed:6c:78:c6:3b:
d3:f7:d4:0d:58:f8:86:78:ce:94:6c:db:3a:28:2a:c7:a0:95:
6c:08:a3:cd:6e:b2:36:96:4f:5c:e7:68:57:0f:5b:33:58:3e:
ee:9f:5a:2a:4d:a6:61:14:a1:4a:54:8a:2a:70:0a:9b:76:3f:
04:45:11:82:ef:29:64:b4:aa:de:e1:92:9e:c1:94:12:96:51:
12:6c:a3:6d:d9:74:4f:95:43:77:b0:fe:1e:82:87:a3:e0:73:
43:90:bf:56:e8:7c:ba:14:32:5a:5e:d6:aa:30:37:cc:18:00:
2e:02:e2:b9:75:0a:0d:7a:37:65:b3:9a:00:bb:d5:5a:1c:d0:
8a:55:00:1b:ed:fb:ec:09:23:16:a2:fe:f8:2f:0d:59:9e:4a:
79:e1:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:29 2026 by rpki-client