Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: tfLjLS7K08hXEV6G4sZildVCxJzd7sJa8YWl4XZquyo=
Subject key identifier: A7:49:8F:B8:6C:1A:42:34:15:EB:05:E7:74:F5:66:40:E3:A6:41:A2
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 019D37C02FB140D8C15435A826F779A1C477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: P4hz1ZQrEKY+s1yfRfNhsP4rrZsrZ8o7dMeBZhAsCuc=)
4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2f:b1:40:d8:c1:54:35:a8:26:f7:79:a1:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=a7498fb86c1a423415eb05e774f56640e3a641a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:3e:85:fe:ba:6d:52:93:10:77:56:8b:5c:
8f:d3:a2:9c:c8:1c:37:f2:7e:4c:29:93:9b:99:15:
12:16:ae:8d:1f:1b:91:83:01:34:4f:e8:d6:9c:e0:
6c:dd:42:2c:67:e2:a5:72:84:7f:91:d7:53:65:5a:
f7:9f:f5:0a:35:e7:6e:d4:92:f0:cd:a9:a9:3f:9c:
98:e7:8f:16:d5:c0:7e:b8:02:0d:b7:86:f0:4a:cd:
85:f6:d6:82:63:4c:1c:05:4f:4d:54:30:88:f7:8a:
21:ba:78:64:95:c3:09:5c:cd:9b:4f:13:de:1f:c3:
e6:06:7b:4f:bd:50:05:fa:09:83:04:59:74:88:8e:
e7:7d:85:86:c6:ad:ee:ae:61:c4:00:69:85:4f:29:
4a:00:fd:28:96:f3:5b:2e:4e:87:69:91:7a:1e:27:
e2:c5:2d:89:e4:d5:aa:be:7f:44:5a:4e:85:a7:3f:
ed:8c:9c:7e:f0:65:b5:a8:4a:7d:7b:23:dc:62:f2:
69:85:60:f3:60:24:0b:3a:8a:f6:1a:c4:b3:f1:bd:
72:3b:aa:74:4d:49:08:a6:f0:3c:b7:81:f3:db:35:
77:e7:95:7a:86:2d:6e:88:f8:12:01:f3:19:15:ea:
6b:66:d9:2d:2e:fb:83:0d:2c:28:70:db:75:84:af:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:8F:B8:6C:1A:42:34:15:EB:05:E7:74:F5:66:40:E3:A6:41:A2
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:77:98:27:26:e6:85:6b:bd:4b:64:57:0b:99:e8:83:c5:cb:
db:c3:be:98:59:52:c7:23:a8:fd:f4:46:71:59:06:7b:a8:15:
b5:13:f7:d5:0f:8b:12:75:69:0e:86:e6:5a:3c:63:84:99:26:
bf:b1:c1:30:41:51:65:d1:c3:9c:98:5c:00:f6:e4:84:42:ea:
ef:f2:c5:79:98:e7:8a:34:a0:c1:d0:41:68:55:5a:ac:0d:df:
21:ae:7a:f1:61:8d:6c:78:24:2f:67:fc:1b:4b:e5:43:f6:c1:
98:ae:3c:17:24:8f:66:4a:a7:a7:8d:b2:65:34:35:47:c2:b2:
03:20:ba:6a:3e:31:e0:13:69:16:dd:ec:e1:81:ba:51:e2:51:
53:36:74:f9:10:63:25:d9:92:40:84:d9:af:d6:9f:c8:ba:57:
2e:37:6a:e5:c8:61:7c:57:15:e8:8c:94:34:89:0a:15:de:41:
5d:f0:6d:73:c7:94:63:7a:66:ac:8f:8a:e5:3b:4d:d4:02:11:
b7:12:0c:88:86:09:25:48:c4:4f:d0:05:b6:6f:86:4e:09:24:
56:f7:4e:9a:ca:47:d6:e1:6d:cf:97:b6:f0:db:7c:d8:48:94:
68:5d:bb:2b:d6:91:fd:87:34:50:9e:8f:45:06:4a:71:5d:44:
87:ca:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:15 2026 by rpki-client