Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: AtdjQ6KM3insYVYPC08RpUFzCX6pMlgBinTcIz4Sv70=
Subject key identifier: F1:2D:60:41:11:91:D9:DD:DD:F9:FE:38:5D:42:4D:F4:97:B8:C3:31
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019EBAA1E89679BA4BFD8FB9811AE06610A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 156A
Signing time: Fri 12 Jun 2026 07:00:33 +0000
Manifest this update: Fri 12 Jun 2026 07:00:33 +0000
Manifest next update: Sat 13 Jun 2026 07:00:33 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: D2Z/yUbg+7kEdU4DY2R0gGiP4ra3w+Wm+lhHRwBzE5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a1:e8:96:79:ba:4b:fd:8f:b9:81:1a:e0:66:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jun 12 07:00:33 2026 GMT
Not After : Jun 13 07:00:33 2026 GMT
Subject: CN=f12d60411191d9ddddf9fe385d424df497b8c331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:98:22:4e:51:75:a2:a3:1c:e4:62:7b:53:
05:bd:69:34:75:fb:07:8a:e9:22:7b:1f:01:34:d0:
52:b2:8a:52:7b:b8:63:4c:5f:3b:27:a6:23:b6:b4:
8b:f5:38:b8:f5:14:bf:b6:5d:f4:69:ef:1c:d0:82:
7d:5e:9b:16:f3:66:a2:78:fe:b7:ca:ba:3a:6f:ef:
fa:0d:30:93:39:50:f7:44:c2:74:89:ea:f5:e8:30:
c0:24:3e:d3:38:7f:26:b2:40:e2:fd:1f:07:36:c0:
80:43:a1:cc:c9:0c:9f:00:5f:30:6c:b1:b9:45:9c:
9a:ae:b9:d9:96:e0:b8:06:f7:0f:d6:af:f3:1b:5c:
b7:03:c4:2b:e4:05:8e:aa:0a:d4:76:d0:80:b0:0b:
48:f0:f4:c5:cb:c9:a6:d8:88:f5:35:9b:dc:b7:5c:
25:b4:02:f3:2e:9c:3b:5c:23:1a:ce:82:5f:93:b5:
9e:0d:41:da:47:98:b0:d8:d7:76:d3:49:c3:b7:3a:
95:bb:a5:18:48:0a:d7:9f:e7:bd:44:b2:ca:ae:d3:
87:41:55:3c:82:fb:95:b7:86:13:4e:fd:61:28:3c:
15:6e:cf:af:76:aa:4d:a2:8e:f3:c6:07:91:8c:c1:
f3:bd:55:70:b2:40:1d:5c:d7:9b:ce:a3:4a:7b:cb:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:60:41:11:91:D9:DD:DD:F9:FE:38:5D:42:4D:F4:97:B8:C3:31
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:88:08:12:05:a9:12:fd:1a:39:a5:5c:1e:45:96:be:62:2a:
66:8d:58:48:a4:05:a1:c1:37:41:eb:a9:47:d7:16:19:56:b6:
3c:cb:8e:7e:ed:9e:bc:01:e6:e1:ff:1d:a4:81:b4:77:9f:44:
04:ea:46:b9:98:62:f6:ac:3c:46:c2:6b:bd:05:3a:8a:5b:57:
3b:d5:3b:f8:c0:7d:74:1d:68:63:15:4b:d8:8a:f8:58:36:81:
6e:10:43:58:d0:eb:ef:77:f7:45:46:3b:1f:44:ac:28:8c:35:
a7:40:88:41:1b:15:89:7a:62:ad:bc:b0:de:52:62:34:24:23:
f1:8e:99:00:08:b8:63:56:9c:a6:76:4b:00:b8:22:ff:58:b9:
9d:c4:05:93:d0:da:aa:ce:d9:d9:4a:d9:5d:a8:f1:15:38:58:
24:51:b9:67:03:6a:de:56:be:59:64:bc:bd:f8:4a:1e:11:67:
62:23:e8:1c:21:a1:4a:7d:ca:2d:ca:75:86:5f:a4:86:32:68:
2f:ff:00:30:7b:16:3c:8b:1a:42:3a:53:75:88:66:c8:82:c6:
3b:23:e9:eb:58:38:65:3b:9b:cd:d6:a1:03:15:1d:95:00:9c:
a9:df:1f:76:a5:b5:d7:2f:bc:74:80:a9:27:d3:2a:64:d8:1e:
f7:d6:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:55:00 2026 by rpki-client