Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File: IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier: AHRD71a8fVF1INyvq0zH1B4mhRKXpRITIQOhG07B6mo=
Subject key identifier: 3D:17:36:26:65:A2:FE:22:3A:61:B1:13:91:72:28:7B:3D:35:53:F1
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial: 019D27A8CB318B098D99633D494A5285917E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number: 0429
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 90vvtkrkAMGYzz8QxxavAe6DrCY.roa (hash: TG20gZKtR2MxO/jwaweSu/ZIE48KIk206vldUHECSqQ=)
2: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: MIMpHRkhxTb5aq3ApMRhst7vU336Tjj3bcJhD9y3DCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cb:31:8b:09:8d:99:63:3d:49:4a:52:85:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20105484f187f2087d120cad971d682db3159965
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=3d17362665a2fe223a61b1139172287b3d3553f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:27:ab:48:ef:17:ef:6c:3e:b1:5e:56:f4:
e3:c1:eb:c6:85:fd:d2:fa:b3:ae:c8:96:76:d6:b9:
b6:39:5a:a0:90:a0:a0:48:6b:70:47:3c:d4:0d:d9:
0a:d9:d4:d8:dc:2b:c5:7f:0f:a1:51:f2:e7:41:33:
58:f4:1c:d9:fb:1a:77:14:88:92:90:6f:1a:89:d2:
45:31:a7:fe:37:86:48:0c:24:73:46:81:c3:16:88:
ab:e7:7c:e7:ee:a8:62:f2:4b:14:77:ef:9e:45:c5:
75:e0:a3:23:d1:de:c6:26:cc:39:bd:38:7f:26:7b:
86:37:cd:21:0d:61:fe:1d:b1:79:ee:31:11:5c:02:
a6:95:fc:68:1f:09:e3:04:2f:15:b0:50:59:f7:f7:
cf:51:31:e4:d3:42:2c:e6:2c:49:10:d6:b5:94:1f:
45:51:03:9e:ea:f2:6c:73:f3:8f:e8:6c:76:80:fb:
81:1f:2c:f8:f0:47:cd:31:22:c7:9b:85:c1:e5:6d:
2f:21:70:c7:6c:a3:9f:9b:89:af:01:92:94:14:ed:
10:af:84:25:60:f7:e8:50:3a:58:ba:0d:a7:fd:cf:
83:b6:fd:a1:62:0a:60:50:f1:e8:91:79:43:ea:16:
d0:42:49:63:56:f1:a7:c1:f2:2e:a9:c3:6b:5a:5e:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:36:26:65:A2:FE:22:3A:61:B1:13:91:72:28:7B:3D:35:53:F1
X509v3 Authority Key Identifier:
keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d4:03:26:cd:88:1d:36:e6:f0:52:16:a6:b2:88:5f:e1:24:
83:6d:05:0b:56:2e:97:c9:62:63:e1:44:fa:ba:f2:8d:71:8f:
a8:2b:f7:a9:a9:0b:bc:e0:dc:db:05:34:b7:7a:9c:87:4d:ff:
1e:f8:e5:ce:44:d5:b9:a5:01:54:b5:83:32:2c:b7:41:f9:27:
38:65:c3:06:e9:9d:85:fc:c4:a1:9e:bd:0d:cc:34:26:b1:5c:
b9:d6:cf:8b:de:8e:60:b8:bf:b3:d8:b8:62:58:ff:cb:3a:f2:
f9:9e:d7:f1:13:ff:28:7b:04:23:d9:07:57:84:cf:1c:ad:19:
e5:3c:2c:0f:35:f3:36:3e:c2:6d:cf:cd:22:63:2a:e1:19:92:
45:af:aa:fe:fb:cc:14:ea:14:a2:ad:17:8e:48:8c:0e:db:7e:
e0:18:23:f1:42:6b:bd:ef:bc:d0:0f:4f:9d:43:ca:e5:66:f9:
ef:cc:aa:c5:05:c4:08:88:a0:23:ea:45:c3:e9:60:5a:bb:79:
93:61:57:20:b4:8b:19:49:b0:71:6a:3b:9a:7a:f1:65:ee:66:
b4:d6:6d:cc:2d:1b:46:e2:ff:f9:38:21:68:b6:bb:0f:cb:ec:
b7:c4:e4:88:1d:1b:ef:55:0b:50:a9:dd:34:ea:af:95:85:62:
47:59:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:13 2026 by rpki-client