Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: wqmy4LgkHJ8hvuTWjNv3bixVRWu/MIjGZdgpG6Wm2gE=
Subject key identifier: 6E:FC:7A:D4:8B:17:10:A0:E6:16:AE:B2:DC:4F:63:2A:1B:5B:07:CD
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019D2929374102582DCD0178B1665B233FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0D3C
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: Lx3kSTB8cPwi2F0zi8APX0Mms_s.roa (hash: f2ZlkqWb/qQdpjOOf0CV8hzupX2VUl1uaY/K5mbuupg=)
2: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: ucQ+dU9qqmsZjhkaOCBlvAXTWvr0oJenJ+5PG9UDPAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:37:41:02:58:2d:cd:01:78:b1:66:5b:23:3f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=6efc7ad48b1710a0e616aeb2dc4f632a1b5b07cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:c6:6d:3b:fb:69:81:87:1a:72:c3:63:b6:
8b:df:90:21:06:c8:3f:ab:42:e9:e1:c2:12:4c:18:
b4:17:9b:dd:71:cc:b4:8d:61:49:59:5b:31:26:bd:
f3:29:bb:54:a2:6a:99:52:6f:d5:30:10:b3:21:ab:
df:c9:e8:18:34:f8:35:8f:1a:4d:68:cd:7e:cf:54:
33:ca:37:6a:fd:8d:39:c3:f0:9f:3b:2d:4c:f6:30:
ac:d6:00:ea:cc:4a:09:23:18:1f:24:61:9f:f2:0e:
c1:fa:ad:dd:e5:6e:32:02:fd:94:f8:aa:5d:34:f0:
a9:26:e3:0f:a3:c0:99:71:d7:1b:04:df:cc:c5:7e:
40:7b:85:48:3a:89:30:36:af:71:46:b2:52:19:55:
35:ce:12:05:08:55:6d:65:e3:27:b9:ea:b7:fe:f9:
2c:9b:e1:a2:81:7e:49:6d:2e:d7:f6:04:52:cc:45:
6c:67:d5:a4:ef:88:d8:59:dc:d3:e2:ab:26:f1:29:
bd:d7:9c:69:58:ed:17:fc:e4:48:39:2d:b6:36:08:
05:bb:74:e8:1e:e9:02:8d:9a:fa:ca:6c:53:84:fb:
2c:66:5b:82:c9:38:44:7e:88:f5:a8:57:2d:23:52:
c8:97:ac:3e:70:bb:f4:29:23:cd:0c:60:b0:3b:3b:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:7A:D4:8B:17:10:A0:E6:16:AE:B2:DC:4F:63:2A:1B:5B:07:CD
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:9b:43:63:ce:61:3c:54:96:89:16:1a:23:56:29:86:a2:
f9:87:aa:95:ec:94:8d:a4:06:2c:05:99:59:02:1e:68:f0:45:
4b:eb:d6:4c:da:6e:42:be:8b:21:bf:2f:60:d2:94:92:1a:56:
f7:f6:23:6f:92:c4:7b:ad:fc:ea:b6:25:c8:07:ee:3f:1a:16:
9e:44:86:39:52:77:6d:f5:be:35:63:13:b1:72:37:d9:bf:42:
df:03:2d:36:62:0d:f8:ee:e2:c9:52:83:54:c3:5b:c7:cc:5f:
df:b6:6e:bd:85:cc:6c:a2:31:6c:59:09:d9:d2:b7:4b:5f:df:
ac:83:87:3c:bd:58:82:23:f8:2e:21:37:9a:46:d8:b2:ab:b1:
8a:ec:c6:e9:df:a0:6f:4e:6f:c6:40:7b:dc:01:1e:c5:a3:e3:
d1:c2:c7:db:ae:8c:89:4e:f0:1b:05:d8:5a:8b:6f:f0:ca:a2:
a4:35:ca:2b:a5:b1:bb:b2:35:8b:5c:79:17:43:f9:24:19:32:
32:2f:32:80:7c:c8:a5:6a:03:2f:00:c6:36:42:03:8f:9c:66:
be:88:b1:cd:06:5f:9e:f9:3c:34:d6:aa:74:c6:7a:a6:b8:29:
62:1d:ea:17:d0:99:55:3e:6d:cb:c5:99:2f:fa:db:2c:ce:64:
5d:9e:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:31 2026 by rpki-client