Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: bLAqTndxTU83jMHs1NvBXZc0EwYPsmeY/vXydmZ18Eg=
Subject key identifier: 66:4F:E8:D1:AE:DD:D5:B9:71:3F:C8:BA:47:C6:C4:C2:BF:E5:DF:3E
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019D25BA752EA51AD44593EAD60FC93A9BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 10F8
Signing time: Wed 25 Mar 2026 16:01:09 +0000
Manifest this update: Wed 25 Mar 2026 16:01:09 +0000
Manifest next update: Thu 26 Mar 2026 16:01:09 +0000
Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: Qpy1LHVivMRqtJ37GFYiFWmOz4s9JPGw+vgDzB8ZdIo=)
2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:75:2e:a5:1a:d4:45:93:ea:d6:0f:c9:3a:9b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Mar 25 16:01:09 2026 GMT
Not After : Mar 26 16:01:09 2026 GMT
Subject: CN=664fe8d1aeddd5b9713fc8ba47c6c4c2bfe5df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:57:ff:5f:a6:14:8f:90:c0:6b:86:ce:ed:
6d:b5:b7:f4:ed:c0:12:bc:77:cc:f4:6e:36:17:3b:
0b:34:b4:3e:bd:9e:89:89:fc:db:f7:88:cd:10:50:
14:f0:31:a0:c4:d1:63:b9:aa:91:31:0f:a9:51:0a:
02:2a:a8:13:44:2a:cb:0d:96:a4:a0:a7:06:c0:5a:
d6:6a:18:60:af:df:a9:dc:b9:b7:45:a0:e5:c8:6f:
83:7a:1d:3b:f5:18:a3:dc:99:f1:19:05:f7:c9:8b:
7a:44:c6:f3:2c:12:c6:f2:08:2e:6a:8a:86:9a:60:
04:9b:6e:c5:05:9e:94:d7:11:fb:67:06:e5:a0:45:
26:b8:82:73:92:2e:25:e1:8d:62:57:ab:3e:70:b6:
ce:2f:5a:53:b8:13:ce:0d:9a:38:82:f9:b1:cc:61:
1d:98:39:cf:71:e6:a5:2a:b7:1c:79:48:04:bc:5a:
80:bb:b2:1c:86:25:13:2e:08:f3:34:e1:96:b4:4d:
95:83:da:62:57:c6:41:36:54:d5:79:f8:5b:01:49:
79:06:3e:14:24:f8:35:97:08:0a:69:b7:83:a2:43:
56:fa:5a:21:55:3a:c4:aa:db:09:62:61:09:1d:6d:
3c:0e:38:80:74:90:03:13:66:36:35:55:b1:25:16:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:E8:D1:AE:DD:D5:B9:71:3F:C8:BA:47:C6:C4:C2:BF:E5:DF:3E
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:5c:57:d9:19:0b:e7:76:a7:6b:e7:fa:9a:a9:4e:90:42:
0b:95:10:db:de:fa:60:17:22:81:a0:bd:35:df:a5:9a:dd:8f:
16:9a:e5:89:39:bd:5a:8b:96:a3:33:53:da:68:db:bc:95:2b:
1d:b3:5b:da:d1:d9:b4:33:8f:e2:6e:8c:96:3d:d1:76:66:e4:
23:61:2d:ef:63:39:d7:a6:b2:ef:42:b3:a5:16:c0:09:10:d1:
d0:78:68:13:23:ce:c4:e9:8b:43:b7:69:31:bc:99:f3:3d:4e:
2d:76:47:b7:bd:4e:5c:d6:7b:d2:71:48:88:59:b6:b6:fc:fd:
04:09:95:bf:d0:66:81:e8:34:ca:53:a7:88:bb:58:f6:76:6b:
4d:47:02:59:33:75:47:50:88:08:1b:56:ca:90:fd:cb:56:98:
af:ce:04:6d:68:ea:25:21:cc:b8:98:6d:c1:e2:c3:98:37:c1:
fa:03:c7:7e:36:12:b6:c5:a4:6f:d5:e2:65:95:ee:75:46:9a:
75:86:87:fb:96:df:23:8d:6d:bf:b7:84:ff:35:a6:16:56:b2:
de:34:ee:24:0a:ac:7b:a9:2b:0a:1c:00:dc:cf:80:13:a6:e5:
0a:bd:35:b1:51:3f:c3:f8:d3:b1:c0:21:fa:16:04:08:64:89:
89:63:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:46 2026 by rpki-client