Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: o+o1ttPidhlDKDrHS5IOj/qIMFZJWmEo0DVzGQ0Pxw4=
Subject key identifier: DA:BF:C2:2B:45:33:F2:92:2E:3B:70:CC:04:77:12:A5:8A:EE:03:45
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01A0E4079300C64ECB89D3901EF582544250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 1202
Signing time: Sun 27 Sep 2026 18:01:36 +0000
Manifest this update: Sun 27 Sep 2026 18:01:36 +0000
Manifest next update: Mon 28 Sep 2026 18:01:36 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: SSeLDpZqPSV9asBwnQ4FvBvL1I4dj0p7KaXX3lNchSY=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:93:00:c6:4e:cb:89:d3:90:1e:f5:82:54:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Sep 27 18:01:36 2026 GMT
Not After : Sep 28 18:01:36 2026 GMT
Subject: CN=dabfc22b4533f2922e3b70cc047712a58aee0345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:b6:9e:93:5a:be:09:53:b9:7b:13:23:3c:
67:78:ac:80:a0:59:6a:f5:9c:8b:93:3c:3e:ac:46:
f7:6d:dd:5f:8a:12:28:98:8a:65:10:1e:35:04:99:
68:2f:58:05:aa:3f:70:59:98:97:93:23:94:ec:8b:
5d:f3:a2:06:7d:0f:f0:a5:4d:89:5e:10:56:bb:f4:
69:3e:d6:95:46:d0:cd:ea:db:1e:ee:b1:de:d0:22:
99:c9:dd:88:53:68:04:8c:1e:a2:45:fa:f0:e0:af:
fa:10:88:be:40:29:cf:89:21:55:e7:33:ce:ba:a8:
23:2a:c1:12:23:78:02:56:f8:df:7c:f4:6d:15:72:
0a:28:6b:a4:1e:9a:53:a9:e6:55:76:84:c3:8d:9a:
ab:bb:36:53:63:52:83:6a:42:9c:bd:2d:bb:17:2a:
8a:64:42:5d:ee:36:79:2a:54:3c:ad:63:88:24:66:
69:52:ac:ad:40:ec:ef:dc:b7:65:61:cc:0e:f2:bd:
e4:7a:1a:79:52:28:7f:9e:2b:a9:bd:cf:78:e1:86:
2d:2a:0d:bc:0f:5b:4e:02:da:bb:c5:08:0d:16:77:
2b:f3:41:54:f1:16:97:ea:9c:ee:50:f9:4c:b6:0b:
4e:ee:97:4b:14:c7:0d:2a:24:1d:07:be:ea:b2:d0:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:C2:2B:45:33:F2:92:2E:3B:70:CC:04:77:12:A5:8A:EE:03:45
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:7f:85:c1:2b:1f:34:35:c9:0f:7a:c3:11:80:8a:7c:9c:
66:cb:0c:ba:64:a6:7e:1f:78:10:94:b1:59:93:62:0a:f0:28:
b5:57:9d:b6:b7:50:e7:17:2d:aa:de:22:02:fc:46:f5:18:7d:
ce:ae:a0:53:4b:cf:aa:c7:c8:d1:df:25:ce:17:8b:0a:bd:55:
03:48:aa:ba:66:38:21:6c:a0:08:08:41:f7:70:28:34:67:6f:
ee:83:5b:13:36:cf:24:c0:b7:c0:10:e7:65:cb:e1:57:a0:36:
05:19:9c:c7:70:50:94:45:55:6a:4a:01:9d:40:20:28:26:0d:
75:91:fc:bb:d9:7a:4f:eb:04:0b:6e:5e:4d:b6:94:ce:cd:0d:
ab:c6:7e:f9:65:cf:10:d7:64:1c:aa:09:af:b5:c1:50:f5:1d:
fe:dd:5d:43:60:b4:25:62:47:bb:51:19:4a:ab:c7:70:0f:e5:
99:49:3c:ff:ec:09:96:11:c6:4d:d2:12:a3:73:be:10:cb:b5:
8f:b1:52:7c:0f:bd:a2:9e:de:3f:10:30:6d:8a:83:0d:6f:b2:
67:22:a0:68:de:13:14:05:3b:15:4a:26:30:98:4c:22:81:3a:
60:29:ba:23:36:39:d2:e1:30:84:59:a2:75:ba:2c:8e:1b:7c:
db:a1:56:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkB5MAxk7LidOQHvWCVEJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjgyZmM4ZWQ4OGY5OWNhYjU3ZDc2ODAzMTc2ZWIyN2E5
ZjBiZmEwHhcNMjYwOTI3MTgwMTM2WhcNMjYwOTI4MTgwMTM2WjAzMTEwLwYDVQQD
EyhkYWJmYzIyYjQ1MzNmMjkyMmUzYjcwY2MwNDc3MTJhNThhZWUwMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsje2npNavglTuXsTIzxneKyAoFlq
9ZyLkzw+rEb3bd1fihIomIplEB41BJloL1gFqj9wWZiXkyOU7Itd86IGfQ/wpU2J
XhBWu/RpPtaVRtDN6tse7rHe0CKZyd2IU2gEjB6iRfrw4K/6EIi+QCnPiSFV5zPO
uqgjKsESI3gCVvjffPRtFXIKKGukHppTqeZVdoTDjZqruzZTY1KDakKcvS27FyqK
ZEJd7jZ5KlQ8rWOIJGZpUqytQOzv3LdlYcwO8r3kehp5Uih/niupvc944YYtKg28
D1tOAtq7xQgNFncr80FU8RaX6pzuUPlMtgtO7pdLFMcNKiQdB77qstAbBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq/witFM/KSLjtwzAR3EqWK7gNFMB8GA1UdIwQY
MBaAFCG4L8jtiPmcq1fXaAMXbrJ6nwv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMt
YWU1ZmE1M2I5M2IyLzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMtYWU1ZmE1M2I5M2Iy
LzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWx/hcEr
HzQ1yQ96wxGAinycZssMumSmfh94EJSxWZNiCvAotVedtrdQ5xctqt4iAvxG9Rh9
zq6gU0vPqsfI0d8lzheLCr1VA0iqumY4IWygCAhB93AoNGdv7oNbEzbPJMC3wBDn
ZcvhV6A2BRmcx3BQlEVVakoBnUAgKCYNdZH8u9l6T+sEC25eTbaUzs0Nq8Z++WXP
ENdkHKoJr7XBUPUd/t1dQ2C0JWJHu1EZSqvHcA/lmUk8/+wJlhHGTdISo3O+EMu1
j7FSfA+9op7ePxAwbYqDDW+yZyKgaN4TFAU7FUomMJhMIoE6YCm6IzY50uEwhFmi
dbosjht826FWCQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:45:54 2026 by rpki-client