Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: I3JmNAWXuwtvg8Y+e+z5PvFXRrJ+Ry3aAza/B0DPjSc=
Subject key identifier: BF:83:98:83:89:04:D1:45:0D:DD:E9:9E:8F:C0:3F:63:02:C8:F4:92
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019D273ACF6B6DF02348AAE4CE9E0CBBB53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 189A
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: Tu7UlRmQfqpCHZR49kOahacWvpRVuKJy/vnwR0Wi8JY=)
3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cf:6b:6d:f0:23:48:aa:e4:ce:9e:0c:bb:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=bf8398838904d1450ddde99e8fc03f6302c8f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:aa:25:05:d9:08:44:e4:ca:67:bc:d2:e7:
a6:06:44:33:bd:a4:d2:7e:6b:31:6c:a3:7b:6b:4d:
ab:02:29:cd:e9:16:db:16:1d:fd:8c:43:89:43:92:
7b:0e:54:7f:d2:57:b1:5f:28:d3:63:99:d3:5d:c7:
7b:25:b7:96:82:87:06:3e:f2:10:31:99:a2:47:d5:
81:c1:54:d2:82:e9:d3:22:81:ab:f6:0b:6d:1f:32:
6e:9a:8f:24:3e:3b:b4:8f:80:6d:f2:32:e3:ca:dc:
76:db:19:9c:8f:18:43:cc:4b:8f:17:2b:b7:88:f1:
8e:61:cd:a4:27:3f:55:f4:86:4f:68:8c:66:d5:35:
98:f2:9f:87:bf:61:2d:f5:d6:9b:b2:73:44:75:77:
62:79:41:de:d0:7e:c7:a5:69:11:51:0a:3c:57:71:
ef:97:35:bb:42:5a:b5:99:b3:aa:48:63:eb:17:4c:
5e:30:55:9e:fe:89:26:97:97:fb:9d:2d:e0:30:f5:
4d:b6:53:88:86:23:34:1c:dc:04:8f:01:93:fe:f7:
37:3f:1a:44:ce:c4:57:4a:ec:68:a4:cd:c5:a6:48:
03:81:0e:83:ef:60:88:c4:f8:1e:88:76:e2:c0:28:
97:14:4a:8a:ea:12:aa:dd:ba:ab:99:0f:1c:58:d1:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:98:83:89:04:D1:45:0D:DD:E9:9E:8F:C0:3F:63:02:C8:F4:92
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2a:22:68:a3:ed:fe:5a:6e:68:5a:0e:92:ed:b0:46:26:d4:
76:bd:e3:a4:48:69:cb:4a:fc:b0:e0:92:b1:13:c8:3a:06:3e:
1c:fc:74:0c:f2:b6:03:7d:66:5e:f7:2a:3e:3c:5e:08:31:35:
42:44:eb:6c:e8:56:d5:aa:cc:6a:46:62:95:59:c5:23:d9:16:
38:7a:84:e7:52:a1:3d:dd:40:a6:be:48:ce:19:e5:ab:3e:66:
bd:4c:99:a9:fe:cb:10:c1:a5:04:84:26:0f:4d:31:31:32:0d:
01:9b:6b:3d:93:7c:74:1c:79:97:20:61:4f:da:ec:59:54:9b:
e1:45:b9:c6:13:1e:02:25:34:f5:ce:56:04:2f:c1:9b:ff:a8:
30:c5:19:c9:67:78:a6:f2:37:bd:3b:68:32:b9:64:2c:5c:2a:
52:76:1c:30:1d:a9:0e:c5:52:16:33:2a:18:d1:3f:73:d2:27:
de:a9:41:13:cf:e7:7f:9c:85:48:c8:0b:24:27:82:21:68:eb:
81:a2:d5:05:61:ec:a2:24:f7:70:37:16:7b:d9:85:24:6c:05:
c9:d1:66:89:23:c7:64:28:a1:54:f6:3d:26:9f:cf:ed:83:0f:
cc:8a:6c:56:d0:b4:59:d5:2c:1e:b6:b1:50:f7:4e:79:78:ff:
b8:ab:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:27 2026 by rpki-client