Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: 4non+dyJX/LCzRL0OK65Z+ZKHl3f68lC6NknhJ1/PoQ=
Subject key identifier: D5:D8:25:37:AA:A9:9B:29:1F:A7:DF:A8:42:2B:36:94:6A:60:80:9E
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019D38664CB56CE18E3F99F7FC6C39AEDB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 14A2
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: pejEJsM+aFEij3boliuZpGb7YGkV4AtDcrMCK4lQINY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4c:b5:6c:e1:8e:3f:99:f7:fc:6c:39:ae:db:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=d5d82537aaa99b291fa7dfa8422b36946a60809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:0b:48:64:17:dc:9a:97:19:5d:3b:f4:96:
df:d1:64:94:c4:1a:5c:a1:b3:4d:8d:55:c4:39:57:
1a:a1:1e:67:09:52:6f:e8:d5:9b:9c:2e:4e:d4:53:
68:7a:9e:7f:fa:39:86:55:df:08:91:bf:78:e7:81:
24:19:46:0a:08:a3:dd:c7:9c:f6:3f:da:94:d5:99:
52:9a:7d:27:a0:14:e7:9a:ce:69:9f:f5:29:a4:72:
b0:c4:e8:ea:1b:88:4c:db:5e:d2:e9:d7:eb:7d:1c:
3f:be:ef:0d:19:e7:e8:2a:bc:19:85:89:1e:80:64:
2c:0c:34:85:ef:3b:7c:e3:98:16:8f:11:35:58:6c:
ed:3f:7a:bc:39:de:d2:a1:64:30:dc:aa:c8:00:e8:
36:15:2d:21:d5:26:87:2f:b7:c7:89:07:d0:44:99:
b6:8c:d2:91:9a:a4:dd:30:07:ac:99:81:36:17:32:
2b:8f:8a:47:53:15:7e:28:bb:95:f5:4c:3e:8d:3f:
e3:08:4e:cc:42:0c:b9:6e:37:14:1d:41:7c:bc:a3:
74:2f:de:ac:08:3d:e3:29:04:3e:9f:d1:d9:45:c6:
1c:79:bb:36:45:25:0a:fc:24:85:56:b5:dd:b0:69:
53:38:44:54:0a:4b:3e:18:e2:63:7a:f9:6a:b6:7c:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:25:37:AA:A9:9B:29:1F:A7:DF:A8:42:2B:36:94:6A:60:80:9E
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4f:db:9f:e4:43:16:f3:a3:a8:de:ed:f9:8c:cd:3a:23:bb:
68:5e:68:c3:7d:ca:20:08:10:03:d2:53:e7:5d:d5:bb:b8:ef:
67:ff:5d:25:a1:18:55:07:84:13:eb:3c:21:ac:c5:31:3b:c5:
81:3f:5a:7b:c2:b9:bb:1f:de:c8:15:72:aa:e6:62:84:76:a3:
25:34:b7:1f:41:c7:b6:38:c1:c7:5b:e9:26:ef:8f:75:a8:af:
76:86:87:21:eb:d8:0f:d9:a2:78:2a:81:72:87:4c:04:35:b4:
f6:f7:9f:4c:ef:88:8a:6b:8f:fb:67:37:59:21:22:63:58:db:
a9:b8:f0:ff:56:9d:e4:1f:b1:06:78:44:8b:c5:06:66:62:49:
5e:96:94:01:63:a3:35:07:14:ad:85:a9:8a:d7:8c:46:97:d4:
0f:99:f2:d8:30:41:f0:80:83:2a:bf:fe:b5:f8:dc:e3:29:a4:
27:07:7e:a8:4b:97:2e:81:fc:6e:66:0b:ec:1f:29:3d:26:8b:
64:4b:13:ff:72:a2:b9:f9:fa:22:37:fe:47:4a:ca:82:d0:d7:
b9:45:1e:f5:22:99:c7:9b:be:dd:ca:91:93:4e:a7:05:d7:6a:
21:53:5c:16:01:f5:93:22:b0:26:84:fb:54:67:b7:9d:3e:c1:
ac:b8:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:26 2026 by rpki-client