Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: U5ZNkyDQT4qEgIk/n6D/JjyAyxA/td4MsbrZtx6fET0=
Subject key identifier: 81:97:AA:0C:07:83:55:2E:62:14:74:EC:8F:D6:64:9C:8E:FA:15:75
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019E20FF26A6DD3F5714C932C60C7BAB8475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0F84
Signing time: Wed 13 May 2026 11:00:52 +0000
Manifest this update: Wed 13 May 2026 11:00:52 +0000
Manifest next update: Thu 14 May 2026 11:00:52 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: NF4IDTpoMF4GeHRilBDkPpLP3LsPFr8KYZ2BU/WuIFU=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:26:a6:dd:3f:57:14:c9:32:c6:0c:7b:ab:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: May 13 11:00:52 2026 GMT
Not After : May 14 11:00:52 2026 GMT
Subject: CN=8197aa0c0783552e621474ec8fd6649c8efa1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:0e:25:90:dd:01:c4:5b:bf:9d:33:a6:cf:
81:dc:f1:5b:21:91:38:d2:59:ac:fa:35:64:55:ad:
40:6c:56:7e:d9:d4:d2:bb:ed:21:78:c1:01:62:84:
ba:80:ca:4a:2b:61:4c:6b:cc:34:74:c2:17:30:fc:
48:da:86:5f:f5:4d:b5:36:60:01:73:d8:e8:9f:45:
f6:42:2f:b4:c8:b4:00:69:f6:36:fb:e6:f9:67:bf:
a1:79:63:3e:5c:9f:bc:1d:99:11:68:79:7f:38:5d:
22:28:ab:a9:47:69:df:f4:82:a5:ae:05:7e:f3:bf:
76:5b:ec:21:29:40:b1:f9:cb:df:92:84:99:10:88:
d6:70:70:29:90:9c:f7:f2:e1:50:3d:95:4a:79:c4:
1b:7a:58:40:ea:42:77:22:bb:c3:65:84:b3:2f:fa:
92:46:f2:3f:06:9f:41:75:b6:76:3f:62:8a:9b:59:
91:db:a2:34:48:10:18:eb:60:ea:5a:1c:c0:de:87:
66:2e:25:fc:26:3a:aa:57:4a:24:f1:ab:6f:38:f8:
de:04:83:21:49:3c:74:d8:9b:4d:7e:15:c3:9a:50:
f7:5a:e6:ff:1c:bb:4a:cc:06:44:27:cd:8b:56:0f:
d4:33:d7:f1:37:cf:26:59:ae:cd:fe:70:9c:71:1f:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:AA:0C:07:83:55:2E:62:14:74:EC:8F:D6:64:9C:8E:FA:15:75
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:b5:50:3a:bc:65:0f:7a:da:bc:6a:63:2a:7b:5e:ff:51:
e1:eb:25:4b:46:49:1a:8b:c3:53:4d:50:14:50:ad:8c:26:bc:
da:74:20:3c:a7:57:5e:d2:a3:92:75:87:22:e6:b4:0c:33:60:
56:06:49:45:0f:d2:da:b8:1c:71:68:14:ab:c8:ae:8e:b3:41:
d5:a1:1d:5d:de:c4:f8:87:51:ee:68:22:16:2a:2a:cc:e7:60:
0a:dd:e8:d0:11:1b:b0:45:eb:39:23:8e:78:76:5a:29:c1:85:
f5:2f:8f:2d:4f:b0:f6:0c:80:42:0a:ec:43:6d:56:d8:80:c6:
52:ae:cb:9e:4e:1d:29:c3:f3:11:01:61:e9:a8:9d:8a:b2:7b:
2c:9e:89:c6:7c:70:04:01:73:55:54:fd:b8:fd:7e:14:cb:ac:
03:0d:9a:28:7e:fe:60:b0:1f:5c:24:d0:39:b8:c1:cd:e6:4d:
73:21:1b:68:f8:b7:04:03:05:cc:61:b6:57:bb:a6:af:7a:7b:
78:5c:3f:59:87:9b:d2:4d:8c:fa:79:1d:1c:72:60:4b:47:ab:
02:a6:b2:57:92:f4:6b:99:25:d5:4b:16:c7:bf:0c:76:9b:4e:
dc:c4:51:4d:f6:3a:4b:0b:4a:5e:fe:b1:3d:45:30:17:a2:91:
a6:bc:82:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/yam3T9XFMkyxgx7q4R1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwNTEzMTEwMDUyWhcNMjYwNTE0MTEwMDUyWjAzMTEwLwYDVQQD
Eyg4MTk3YWEwYzA3ODM1NTJlNjIxNDc0ZWM4ZmQ2NjQ5YzhlZmExNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVAOJZDdAcRbv50zps+B3PFbIZE4
0lms+jVkVa1AbFZ+2dTSu+0heMEBYoS6gMpKK2FMa8w0dMIXMPxI2oZf9U21NmAB
c9jon0X2Qi+0yLQAafY2++b5Z7+heWM+XJ+8HZkRaHl/OF0iKKupR2nf9IKlrgV+
8792W+whKUCx+cvfkoSZEIjWcHApkJz38uFQPZVKecQbelhA6kJ3IrvDZYSzL/qS
RvI/Bp9BdbZ2P2KKm1mR26I0SBAY62DqWhzA3odmLiX8JjqqV0ok8atvOPjeBIMh
STx02JtNfhXDmlD3Wub/HLtKzAZEJ82LVg/UM9fxN88mWa7N/nCccR9LYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGXqgwHg1UuYhR07I/WZJyO+hV1MB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANju1UDq8
ZQ962rxqYyp7Xv9R4eslS0ZJGovDU01QFFCtjCa82nQgPKdXXtKjknWHIua0DDNg
VgZJRQ/S2rgccWgUq8iujrNB1aEdXd7E+IdR7mgiFioqzOdgCt3o0BEbsEXrOSOO
eHZaKcGF9S+PLU+w9gyAQgrsQ21W2IDGUq7Lnk4dKcPzEQFh6aidirJ7LJ6Jxnxw
BAFzVVT9uP1+FMusAw2aKH7+YLAfXCTQObjBzeZNcyEbaPi3BAMFzGG2V7umr3p7
eFw/WYeb0k2M+nkdHHJgS0erAqayV5L0a5kl1UsWx78MdptO3MRRTfY6SwtKXv6x
PUUwF6KRpryCgA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:50:00 2026 by rpki-client