Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: wZR+vjV+7Lua3O+tmYwX0+by7zOE+dd9jd/RBaKMV54=
Subject key identifier: AC:89:6C:5D:53:06:72:8F:9A:D0:2D:E2:7F:40:B9:66:B6:A6:10:39
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019D27DF6FC7DE64A1C5B61F1F5E919C0CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0F03
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: /HaVvESlQhyI3hn/CX7QMmumgC42a0CS5pyeo6VPjA8=)
2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6f:c7:de:64:a1:c5:b6:1f:1f:5e:91:9c:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=ac896c5d5306728f9ad02de27f40b966b6a61039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:c3:5b:67:9e:fb:aa:0d:7e:9a:b6:d2:bc:
a0:fe:04:6f:46:a7:e0:a9:fe:37:0b:04:13:30:b0:
a2:67:74:2a:cb:61:32:59:5d:ae:8a:b7:ab:2e:c5:
19:ce:f1:85:61:ae:5a:bd:15:a7:ae:1d:cb:97:1c:
9a:14:22:17:bb:01:7f:07:98:cb:9f:56:36:09:09:
14:09:a6:28:74:be:b8:d9:37:7e:a8:71:4f:b6:4b:
b6:d2:52:6e:7e:e8:4c:4a:11:ff:82:ac:50:d3:95:
bb:b2:a4:29:2e:12:82:36:15:38:a5:11:4d:c8:24:
53:4b:5c:9b:64:90:99:14:31:5e:a0:7d:44:a6:d1:
95:37:e9:5f:71:67:73:9f:e4:a9:40:fa:3f:4d:36:
fa:f3:aa:9e:f4:8d:b3:d6:9f:b7:bc:6e:b9:a8:75:
c5:39:c8:79:16:1b:74:bf:fb:fe:4f:bc:72:0f:22:
c4:54:f7:c4:5f:44:2e:99:3c:76:93:e2:5c:5e:28:
b2:90:52:46:fc:6b:ec:f0:bf:c9:f2:8c:fa:c8:ba:
da:58:29:c8:b4:1d:5a:f5:40:57:6f:d2:f5:85:b6:
c4:5d:ca:18:67:7b:0e:1e:e3:a8:76:f8:84:99:41:
c8:0f:ad:77:27:5f:fd:bb:54:b6:42:35:40:cf:72:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:6C:5D:53:06:72:8F:9A:D0:2D:E2:7F:40:B9:66:B6:A6:10:39
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:8a:cc:52:0d:ad:2b:56:9a:c0:04:ad:3e:8b:66:66:55:
17:5a:44:81:27:9c:dd:9e:7e:3a:8f:c7:23:cb:1d:80:c6:8d:
a0:56:1c:9c:d2:9a:1a:50:af:e9:1e:27:12:17:12:8a:d4:b4:
a5:f8:02:bb:7b:07:83:1d:ee:6c:d2:ec:20:57:3c:62:b1:fe:
68:dc:eb:a9:ef:45:b3:70:d0:98:d5:b9:3e:5e:57:92:0a:0d:
43:47:6d:2c:bd:c3:a6:36:11:c3:7d:c4:d8:ce:22:8a:40:5c:
25:07:1c:5e:57:6b:87:29:12:ac:3b:3a:a0:f9:a7:cd:e0:0b:
96:8d:89:7c:34:de:9e:10:d5:ef:59:cb:b3:ae:34:65:28:03:
2e:c4:d5:22:68:86:79:7d:0f:07:b5:20:d2:d8:02:e7:37:31:
22:a8:ea:0e:e6:d4:71:60:10:3b:9a:42:4e:1e:c1:d8:7a:37:
0b:45:6c:dd:b5:05:a4:4a:40:55:93:4c:2d:cd:0c:85:ca:47:
37:6b:57:b5:f6:a9:30:f2:5e:44:62:19:6b:34:4f:1d:c4:5c:
9d:d2:8a:ee:17:02:9b:ff:17:d0:9d:32:9c:69:ed:d8:6f:90:
da:7b:c7:ee:7c:24:7f:01:ec:76:1e:49:23:24:1b:1a:ff:bd:
b0:8c:f3:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32/H3mShxbYfH16RnAzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwMzI2MDIwMDQ3WhcNMjYwMzI3MDIwMDQ3WjAzMTEwLwYDVQQD
EyhhYzg5NmM1ZDUzMDY3MjhmOWFkMDJkZTI3ZjQwYjk2NmI2YTYxMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUTDW2ee+6oNfpq20ryg/gRvRqfg
qf43CwQTMLCiZ3Qqy2EyWV2uirerLsUZzvGFYa5avRWnrh3LlxyaFCIXuwF/B5jL
n1Y2CQkUCaYodL642Td+qHFPtku20lJufuhMShH/gqxQ05W7sqQpLhKCNhU4pRFN
yCRTS1ybZJCZFDFeoH1EptGVN+lfcWdzn+SpQPo/TTb686qe9I2z1p+3vG65qHXF
Och5Fht0v/v+T7xyDyLEVPfEX0QumTx2k+JcXiiykFJG/Gvs8L/J8oz6yLraWCnI
tB1a9UBXb9L1hbbEXcoYZ3sOHuOodviEmUHID613J1/9u1S2QjVAz3JdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyJbF1TBnKPmtAt4n9AuWa2phA5MB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8qKzFIN
rStWmsAErT6LZmZVF1pEgSec3Z5+Oo/HI8sdgMaNoFYcnNKaGlCv6R4nEhcSitS0
pfgCu3sHgx3ubNLsIFc8YrH+aNzrqe9Fs3DQmNW5Pl5XkgoNQ0dtLL3DpjYRw33E
2M4iikBcJQccXldrhykSrDs6oPmnzeALlo2JfDTenhDV71nLs640ZSgDLsTVImiG
eX0PB7Ug0tgC5zcxIqjqDubUcWAQO5pCTh7B2Ho3C0Vs3bUFpEpAVZNMLc0MhcpH
N2tXtfapMPJeRGIZazRPHcRcndKK7hcCm/8X0J0ynGnt2G+Q2nvH7nwkfwHsdh5J
IyQbGv+9sIzzng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:13 2026 by rpki-client