Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: j/wGcOnfXlW25tePqsnsZ69mCFEy8lNv3GEMEm/Gq2U=
Subject key identifier: 8F:8E:9B:74:9D:7C:9D:9F:A3:B0:1E:46:DF:11:B6:D8:44:55:C4:BD
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01A1DD272FBA71D9E3DFA2D3FE05633BA1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 1283
Signing time: Sun 15 Nov 2026 03:01:35 +0000
Manifest this update: Sun 15 Nov 2026 03:01:35 +0000
Manifest next update: Mon 16 Nov 2026 03:01:35 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: xmD1sPHFnoZ38YIiBcJQG/sp4pYgMLKwp8fyPHFGCRg=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:2f:ba:71:d9:e3:df:a2:d3:fe:05:63:3b:a1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Nov 15 03:01:35 2026 GMT
Not After : Nov 16 03:01:35 2026 GMT
Subject: CN=8f8e9b749d7c9d9fa3b01e46df11b6d84455c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:bd:5c:57:14:0b:c4:51:ca:e4:99:c3:a8:
88:7c:96:18:25:f9:42:7e:4a:37:ab:00:5a:95:92:
6d:6a:fd:d2:1b:c7:20:60:8a:46:99:7f:28:5c:1b:
9a:8b:c9:16:3c:17:15:85:7b:09:b9:90:a3:de:84:
7d:19:26:87:a3:bb:5d:b3:11:79:c5:a7:80:72:73:
2b:73:ef:99:cb:dc:0c:a3:10:32:78:7f:1d:f4:05:
9c:79:e5:c8:8b:d7:c0:42:02:24:93:04:7e:33:93:
6a:10:d4:d0:ce:87:cf:cf:27:40:33:79:22:08:92:
09:a4:97:96:f1:bc:74:54:5c:96:70:5a:b2:b3:06:
49:89:77:97:e8:8e:b9:fe:0b:7b:6c:a1:08:75:17:
fb:f4:1f:2d:06:09:c0:d7:83:11:64:23:22:3e:50:
a6:dc:53:8f:d6:2e:b8:c3:7d:9e:29:40:6e:07:43:
b8:2f:3a:e9:cb:c1:a2:b0:cc:7b:dd:b1:68:91:b7:
c3:50:ef:0f:8b:d9:44:5d:e3:74:19:dd:af:92:18:
07:96:ef:5c:c8:de:62:3a:d6:2f:1c:50:1e:b5:5c:
89:01:a4:99:e3:16:84:e1:07:0e:60:cb:f3:ab:19:
73:8d:57:3a:5c:da:3e:01:46:36:0a:d8:7b:1d:44:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:9B:74:9D:7C:9D:9F:A3:B0:1E:46:DF:11:B6:D8:44:55:C4:BD
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d6:b2:ff:a5:87:22:71:a3:09:ee:51:74:dc:f1:26:d6:0a:
6e:5c:2b:a8:b7:15:e1:de:90:78:f9:91:40:2c:13:be:88:8d:
d5:cc:c2:03:e5:1f:42:e0:50:c3:c4:ed:5e:a1:e2:3a:88:1b:
25:15:78:37:2f:6d:4e:d5:b4:47:52:b5:4d:a1:f3:cf:c6:1d:
a9:03:ad:a0:72:e9:aa:1c:b2:f8:35:78:b0:a7:70:91:ac:e5:
3e:fb:43:33:68:41:be:5b:2b:91:6b:15:b3:11:54:8e:16:c6:
eb:45:b0:5b:a4:e6:1b:ca:d8:c0:5a:66:5b:60:54:8f:f9:1b:
fe:79:49:5e:33:97:e4:21:09:71:f6:35:40:3f:d4:30:13:b4:
4e:be:f4:1a:cb:6f:04:cd:99:72:09:74:b5:41:c3:7e:8d:18:
e2:d0:af:56:e7:a0:6f:ba:cd:d7:c9:f1:9f:24:69:0b:77:75:
63:de:7f:a8:93:02:93:0e:36:1c:4d:f7:be:a7:eb:bc:48:6b:
00:ce:72:4c:ff:49:7d:a9:f7:3c:0e:42:d3:e6:d6:c7:8d:20:
cb:59:4c:c9:96:3a:0e:24:23:08:56:a1:13:e0:93:66:c7:e7:
81:6d:e6:b9:e4:34:f9:25:7c:70:5b:98:51:90:38:b0:01:b6:
09:7e:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:16:27 2026 by rpki-client