Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: 6fMN55zCLNGPI2rPKcqcao7Wvv3wi1gD1ZUd9VPGv/s=
Subject key identifier: 95:AA:8B:9C:F4:84:9F:50:DD:A6:80:AB:E1:F2:1C:0A:4D:89:A9:50
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019D29CE70DE74F5F88DB067ABAB6CE199CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 11:01:28 +0000
Manifest this update: Thu 26 Mar 2026 11:01:28 +0000
Manifest next update: Fri 27 Mar 2026 11:01:28 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: UfKwgYOMEDFsi4/Efr30VFUvCKDa8yy0l27fzeKA2aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:70:de:74:f5:f8:8d:b0:67:ab:ab:6c:e1:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Mar 26 11:01:28 2026 GMT
Not After : Mar 27 11:01:28 2026 GMT
Subject: CN=95aa8b9cf4849f50dda680abe1f21c0a4d89a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:43:fd:2d:03:1a:11:04:bf:6f:21:26:bc:
8d:91:01:73:4e:80:a4:08:54:b2:f2:8e:b5:14:a1:
15:a7:45:6a:0c:6a:a7:d3:d8:5e:94:ee:10:e8:b8:
69:47:b6:ea:12:9a:57:38:4a:18:d2:07:fe:13:da:
c9:81:7a:74:6c:20:71:be:22:1b:5b:30:f0:b7:d2:
4f:26:d6:98:ee:a5:3d:75:a7:0d:cf:a7:38:1d:8d:
58:31:2a:18:e7:0e:58:4a:b5:37:b8:83:f4:09:9d:
25:a7:30:a8:c3:97:13:c9:05:4e:31:d0:cc:10:c8:
82:38:2f:6c:a3:8b:da:cc:1e:05:ae:9a:45:92:67:
97:62:83:c5:2e:02:ba:d1:d8:58:3a:4a:6e:a3:db:
30:b8:81:54:9d:10:6c:8f:bb:17:fb:ef:f2:9c:f9:
09:10:78:fb:a9:1e:51:79:4e:62:40:a9:18:8f:35:
95:8a:b9:f3:8b:16:32:19:43:1d:35:18:f9:72:c4:
75:c3:b6:12:4f:0c:a7:2b:5e:96:c0:01:f8:37:dc:
38:69:23:d0:4a:65:54:5b:48:b0:af:13:a1:98:b3:
0a:be:38:12:b5:18:09:1a:e4:bb:60:0b:15:c2:dc:
28:4a:49:25:f9:86:19:a3:3a:62:9a:cf:64:92:6b:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:8B:9C:F4:84:9F:50:DD:A6:80:AB:E1:F2:1C:0A:4D:89:A9:50
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:e1:de:4f:c9:08:e5:71:66:56:e5:e2:7a:2f:8e:2b:df:
95:f8:9f:ce:3a:a1:ee:91:1d:dc:25:88:59:6d:e8:ec:bc:e6:
30:81:38:7f:38:92:87:94:87:c8:36:6a:1a:b7:f1:9e:b1:0b:
7d:80:95:22:91:ea:b0:7e:9b:10:7f:82:df:a8:48:6d:33:8b:
6b:8f:95:72:a1:67:4b:24:7b:70:d3:54:6b:0c:93:9d:79:8c:
c1:fb:ff:8e:03:a8:fd:c0:6b:03:d5:1f:3a:49:be:25:da:bd:
1e:96:2b:c2:02:a1:c9:f6:98:cd:15:aa:81:b2:4b:34:45:aa:
80:23:6a:c5:ea:48:c0:55:fc:07:c5:20:6a:5b:bd:9d:9e:2b:
d1:0f:b9:4a:36:b7:23:f0:c4:dd:62:54:c7:f8:0f:04:8c:4e:
17:e7:28:4f:b3:b3:76:22:d0:7f:b1:7b:a5:0c:cc:96:af:4d:
58:5d:b6:fb:4a:2a:2e:26:34:84:c6:e8:ba:10:e2:e1:e1:30:
5e:f3:2d:a1:41:59:0b:71:9d:49:20:c7:c8:23:cf:7a:61:f7:
a5:6a:91:46:16:12:79:09:99:97:1b:7e:41:55:d5:c9:71:b0:
fb:22:c4:b0:51:21:bc:2b:c4:0e:8a:1b:e8:52:99:29:a1:d9:
87:d1:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:06 2026 by rpki-client