Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: IvgkzEQWfEgNCqpuwVQeUZvmrvqpwRneGPQeAvJ8mW4=
Subject key identifier: 8C:0A:68:0C:7E:49:D5:D3:42:50:DD:BA:60:E0:A3:08:41:71:15:91
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019CAD5955EB4ABE45A2352EA28E59669E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 145A
Signing time: Mon 02 Mar 2026 07:00:38 +0000
Manifest this update: Mon 02 Mar 2026 07:00:38 +0000
Manifest next update: Tue 03 Mar 2026 07:00:38 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: vpgZvjAntUychm0xiN9JcUcsDQ85YVa3246QvKQ5yVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:55:eb:4a:be:45:a2:35:2e:a2:8e:59:66:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Mar 2 07:00:38 2026 GMT
Not After : Mar 3 07:00:38 2026 GMT
Subject: CN=8c0a680c7e49d5d34250ddba60e0a30841711591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:25:2a:a6:d4:25:e7:90:61:4b:d6:d8:55:
24:71:fd:62:d5:29:56:c3:ca:1c:e6:7c:9f:5d:86:
a1:fb:ba:ba:96:bf:5a:8b:89:bf:74:13:d9:17:74:
97:96:3d:f7:e2:ea:52:ff:53:07:1c:d4:1d:a7:87:
19:6b:1e:2c:30:b6:88:2f:bd:83:2a:47:34:30:08:
d2:a2:65:6b:a2:30:35:84:5d:e2:06:ca:14:f8:87:
ab:fa:48:c8:83:73:85:e0:52:fc:88:fd:b0:40:10:
8b:b0:ac:30:77:b7:ee:87:14:29:90:3e:9c:b8:dc:
e9:ff:cb:d4:d2:84:ca:b1:97:56:2b:0b:db:ef:2d:
f4:18:03:76:a7:7a:cb:e0:1e:84:95:64:ff:99:65:
28:d0:41:7e:96:15:66:eb:0e:d9:6d:cb:b7:35:53:
85:9c:0b:19:45:4c:31:f0:d5:bf:85:44:2d:ba:d9:
37:3b:16:67:ab:35:f0:a7:ff:cf:ee:bf:f8:7c:d2:
85:3c:6e:33:2a:82:a1:ce:f2:f5:20:b3:17:d3:45:
7a:af:9e:c9:99:4b:07:d2:c9:24:f1:af:5e:37:a3:
04:66:89:d8:60:13:97:34:41:64:57:45:fb:d0:9d:
5a:d4:49:b5:d0:c1:f7:7d:fb:d4:71:6b:7f:de:d1:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:68:0C:7E:49:D5:D3:42:50:DD:BA:60:E0:A3:08:41:71:15:91
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:a5:72:6f:23:ee:f1:58:b6:61:e3:bc:2a:be:cc:c4:11:
c8:7d:83:5e:6d:68:a9:dc:02:35:03:13:36:35:08:9a:e6:98:
7f:a5:d8:5a:89:72:e6:83:a7:ae:28:5b:fe:f0:14:0d:47:e0:
cf:23:1c:a5:e7:6f:92:12:9f:eb:c1:0b:2b:7c:19:0d:45:e8:
3c:e8:e6:2e:35:ed:1a:dd:1b:aa:9c:0a:5a:e5:93:6d:54:60:
d7:82:ce:3a:13:ac:14:9d:7c:74:40:a8:08:f0:0f:30:20:58:
f0:d8:9b:ee:1a:ad:d5:73:82:59:01:3f:1f:cd:06:3d:65:d1:
33:3e:25:e4:5f:cb:3f:b8:f1:23:b0:17:20:de:c7:6f:de:4f:
7f:d3:37:01:f4:fd:3b:f9:0f:dc:05:11:dc:fb:3d:2b:f1:d6:
95:77:85:44:5f:19:50:4c:ab:ca:87:24:36:9f:f4:af:00:8b:
2b:f7:c1:84:97:f8:45:fd:51:0a:35:1c:c5:ba:d5:78:81:02:
39:d7:c8:02:8d:f1:03:4f:ea:07:1b:83:9f:e7:4d:34:81:80:
34:13:3f:6d:f5:ff:80:f7:69:43:e8:9a:df:e4:91:6a:51:ad:
fd:35:38:c8:e1:45:25:20:f2:c7:1f:a0:f2:6e:80:be:88:b5:
d4:ab:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:19 2026 by rpki-client