Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: ZwFgULqp5o49ZR0dww3zt/Ex0oomuO2wairxjkqSgiw=
Subject key identifier: 9B:59:C7:66:D7:DC:14:4A:94:C8:E6:CB:B9:2B:C5:06:D8:95:AD:66
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01A0D20051D1E14307C784D1D9112138D4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 06:00:31 +0000
Manifest this update: Thu 24 Sep 2026 06:00:31 +0000
Manifest next update: Fri 25 Sep 2026 06:00:31 +0000
Files and hashes: 1: A4VD151cCaGStZi1tukFaQlx8Ko.roa (hash: u0G3+aUNE8LU9u0mjX95yrd3NTvmpbcaXH6CpeKYAUI=)
2: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: WIG5WxhhTKfh9U9ZaJzYB8D1MbrVtLGGR6ZAXMo/kVk=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:51:d1:e1:43:07:c7:84:d1:d9:11:21:38:d4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Sep 24 06:00:31 2026 GMT
Not After : Sep 25 06:00:31 2026 GMT
Subject: CN=9b59c766d7dc144a94c8e6cbb92bc506d895ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:a3:cf:24:4b:21:e3:f9:88:34:ad:7a:90:
f6:12:6e:ef:be:77:5c:99:16:05:ed:7c:8b:34:05:
cd:a0:18:ca:1b:16:7c:90:2f:8d:be:af:76:f9:df:
4b:d9:1d:fc:93:33:77:ba:6b:c8:32:a4:c1:59:aa:
98:6a:e5:e5:40:6a:be:b2:43:cb:2b:92:5d:81:96:
28:fd:fa:84:c0:c2:03:f4:15:7d:1f:2c:d7:3b:13:
51:9b:86:93:13:ed:23:f6:87:b2:9a:40:cb:6d:9b:
d7:56:4c:ff:97:6d:d0:87:51:c9:0b:b7:60:f1:d0:
c5:35:9a:7d:26:6c:5c:17:ee:56:e5:14:51:91:62:
c5:80:f8:ba:ee:d4:b2:13:93:3f:df:79:7e:97:6f:
ee:93:5c:d2:d1:ba:cc:a8:16:3f:2c:eb:13:bd:72:
96:90:2f:eb:96:9a:58:97:56:05:e1:19:c0:85:80:
53:92:ab:33:eb:54:20:58:b2:48:e2:56:15:f4:79:
43:e6:fc:5a:b9:f5:3c:4a:d6:62:bf:0b:3d:1a:73:
d0:6f:17:13:99:a2:95:38:42:c9:e3:65:ce:18:98:
4b:ff:85:e8:d9:22:c9:57:ac:47:d8:a9:7f:e6:93:
85:30:93:b3:e0:85:f8:01:99:90:f5:2e:ee:98:22:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:C7:66:D7:DC:14:4A:94:C8:E6:CB:B9:2B:C5:06:D8:95:AD:66
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:a4:7b:21:a7:e5:14:74:2d:6b:d9:6d:4f:d9:90:98:f5:
fe:ce:1c:9e:ab:f3:0a:ae:1d:24:44:75:c8:de:c3:90:f3:52:
01:fd:6e:e7:02:3b:ca:4a:d2:10:a5:aa:aa:2b:da:b2:06:ee:
9d:8c:4c:19:33:6c:9f:cd:48:4e:95:8f:60:14:9e:18:f7:74:
8a:b0:ff:cb:51:c4:60:35:7c:16:50:4f:4a:5e:60:6e:70:6f:
db:0d:5c:b7:9f:aa:6c:e5:2a:5f:71:7e:98:57:14:8b:7e:71:
63:57:7c:bb:55:98:4d:80:bd:9b:36:58:c2:dc:10:95:3c:37:
fe:f5:67:f1:7d:a0:e1:f4:9d:2d:51:61:aa:4d:aa:3d:85:bc:
ac:ad:6b:f6:be:64:ec:e1:3e:b8:f0:e6:af:e1:c9:af:d9:09:
16:be:fe:bb:27:22:92:aa:d7:97:b2:33:a6:25:4f:81:56:83:
63:e1:c3:7c:4c:b2:cd:04:2d:e2:ca:38:59:3b:ae:60:3f:68:
69:4a:7b:0f:ec:32:3e:0d:27:2b:9e:c5:e1:ec:e0:37:a6:0c:
39:6d:c5:80:89:fd:36:a9:ac:e4:a3:98:fd:84:3c:9d:96:8f:
c7:17:d2:7e:19:ac:9e:b3:2b:d4:09:fe:26:f3:76:42:68:34:
50:f6:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:26:50 2026 by rpki-client