Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
File: ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft (raw, json)
Hash identifier: LXcXqOIxg/vBXP/bNC2Tmq22O4LtSbp2e7mRLWVSABk=
Subject key identifier: D3:B3:71:D0:3D:08:D2:05:F4:DD:9B:67:C5:7C:26:17:C5:F5:67:C5
Authority key identifier: 89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
Certificate issuer: /CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Certificate serial: 019D33764C68800E593D7CE2A3D5FCB6B4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
Manifest number: 1189
Signing time: Sat 28 Mar 2026 08:01:23 +0000
Manifest this update: Sat 28 Mar 2026 08:01:23 +0000
Manifest next update: Sun 29 Mar 2026 08:01:23 +0000
Files and hashes: 1: ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl (hash: AIAriB6RgjEWo+0gc9xBwXhMK3BGxvHW2V0JWjoyc7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:4c:68:80:0e:59:3d:7c:e2:a3:d5:fc:b6:b4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Validity
Not Before: Mar 28 08:01:23 2026 GMT
Not After : Mar 29 08:01:23 2026 GMT
Subject: CN=d3b371d03d08d205f4dd9b67c57c2617c5f567c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:33:a7:28:c8:44:08:3e:7b:2a:7e:65:ca:
2a:1e:e0:05:c4:43:86:54:ea:d7:9f:16:27:86:4a:
cb:11:eb:4e:0c:ab:c1:c4:78:75:f3:e8:59:1c:a9:
ea:40:51:49:dd:6c:cd:7a:ac:5b:2a:e9:7d:61:c5:
89:80:f4:7b:3d:69:a5:e7:c0:a3:9d:f7:23:4c:89:
d0:be:c3:1a:7f:cf:2d:77:7b:53:de:09:aa:77:03:
95:24:f0:82:cd:bd:60:0c:13:dc:43:9a:78:f0:79:
d5:f1:55:f8:b9:45:1b:40:2e:ad:4e:fc:3e:26:3b:
0e:62:58:21:98:41:d1:7e:ef:46:20:dc:3e:1a:78:
7a:47:86:a4:48:ea:c2:6c:32:47:fa:fb:78:97:ae:
cb:34:19:a3:6c:a4:23:7e:0b:90:5e:21:a2:d8:cb:
73:93:c3:8e:10:be:83:5b:73:81:0d:e4:3b:5f:b3:
83:57:8b:49:95:c4:2e:33:29:02:56:78:89:e8:55:
bd:90:14:55:c8:d0:99:42:f5:75:ec:53:86:03:95:
57:6a:c3:7d:a5:cb:6f:02:df:a4:43:fb:f6:27:9f:
75:2c:a2:a4:07:40:4b:fd:bf:bc:96:fc:d2:de:d5:
8b:b9:4c:ff:81:51:d8:8a:ae:82:a8:49:29:b0:23:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:71:D0:3D:08:D2:05:F4:DD:9B:67:C5:7C:26:17:C5:F5:67:C5
X509v3 Authority Key Identifier:
keyid:89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:29:1c:04:ef:45:75:75:0c:b1:ca:f0:84:09:53:ff:db:70:
42:c6:df:24:e5:cb:06:f0:c7:25:21:8d:49:12:b5:9a:ab:94:
6d:fa:e6:3d:13:9b:20:8d:da:42:b6:8a:ce:b5:84:7f:20:3e:
4e:40:76:f8:e4:7f:df:c8:65:1b:53:58:5c:6d:4b:36:62:b6:
f1:9f:16:f2:f3:6d:5e:63:04:85:7f:f2:46:7b:ac:85:b0:19:
1f:c7:87:1b:f8:b6:42:d1:2c:2d:12:ed:fc:d8:0a:75:59:72:
54:c5:e5:32:40:57:90:86:65:97:eb:b2:35:c9:3c:2f:d5:9a:
f8:de:c0:d5:99:87:e3:dd:30:96:10:44:48:fe:d6:5c:1a:27:
e7:6f:ca:67:7d:61:c0:d6:f5:92:9d:77:97:e8:55:67:24:83:
fd:6d:45:6d:4b:21:f4:4e:41:b6:41:da:c0:0f:c5:c5:f3:83:
35:33:94:78:63:f0:ad:04:0d:9f:70:12:4c:f5:b4:78:38:8c:
13:bb:29:39:bd:20:93:c2:da:73:ce:58:e7:8f:72:b9:b1:21:
c6:3e:a2:3e:20:71:4a:1c:23:b9:77:92:e9:f0:7f:5e:0e:a6:
b3:7f:c7:1e:83:bf:4f:c4:f5:6b:01:6b:6f:84:02:18:2f:c3:
9d:f0:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:27 2026 by rpki-client