Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: +5xxmdMsMoapsDMVPCtcJt1WND3lLfYs7IGY1j5KneA=
Subject key identifier: 71:59:26:22:FF:F7:5E:A5:42:C2:A6:13:02:76:CA:27:F0:5D:FF:B9
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019D98F47902207BEB7C99CF02D87AC48C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 14D4
Signing time: Fri 17 Apr 2026 01:00:51 +0000
Manifest this update: Fri 17 Apr 2026 01:00:51 +0000
Manifest next update: Sat 18 Apr 2026 01:00:51 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: VxbiaA1AXpeJLSGxaEaQOGm/i3mxwSleuYjlaT0KniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:79:02:20:7b:eb:7c:99:cf:02:d8:7a:c4:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Apr 17 01:00:51 2026 GMT
Not After : Apr 18 01:00:51 2026 GMT
Subject: CN=71592622fff75ea542c2a6130276ca27f05dffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:04:67:4c:d5:d8:ac:5b:ef:81:a5:47:84:
a3:a2:bd:0f:80:2f:e9:4d:39:7f:2e:16:1a:ed:d7:
a7:1a:fd:83:0d:4f:cf:91:0d:e5:18:f7:ee:e2:15:
46:d2:ec:4f:87:1c:e5:a0:7b:82:f9:52:eb:98:82:
d0:fb:29:fe:f7:64:ca:8b:72:bd:5c:84:c0:06:52:
e5:ca:ea:02:09:9c:ad:e9:b4:8d:08:b6:c1:bc:ff:
eb:d8:1c:16:62:4d:24:ef:b2:05:39:2e:37:b3:4e:
04:12:60:15:e9:99:db:1c:52:eb:5a:f8:68:41:b7:
22:75:8a:c9:fc:1a:b7:68:74:1e:6e:a0:9d:ce:dd:
68:ad:9c:80:8f:f3:97:e6:1b:cb:c2:4b:a2:fa:fb:
23:bb:e8:51:bb:43:85:16:b9:b9:24:4e:c9:a6:df:
59:09:0d:91:ab:6f:95:e9:14:b5:11:cd:45:bb:14:
81:65:90:5d:f9:03:5d:24:b2:10:15:83:01:72:be:
f2:c2:cb:0e:bd:a5:52:14:fd:f0:6f:92:02:d6:4e:
a8:ca:cf:37:66:0d:75:3c:d5:8e:1a:2c:e6:4b:8b:
66:65:b3:26:d5:9f:75:62:4d:c2:76:79:45:45:ec:
d4:19:9b:a5:5b:94:95:96:d1:99:b1:6b:04:69:ca:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:26:22:FF:F7:5E:A5:42:C2:A6:13:02:76:CA:27:F0:5D:FF:B9
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:48:ee:a1:cc:e8:61:30:42:c0:f0:08:c8:20:3f:19:56:
cd:77:e1:5f:d0:1d:e5:41:67:4f:d1:3c:2b:21:a5:17:dd:e6:
8a:ff:23:ee:59:b9:0e:c2:1a:e2:d5:51:bc:8a:2a:a3:fe:ad:
fe:c2:c5:6f:67:b6:7a:ba:44:cb:46:b3:dc:17:97:50:b8:b5:
2b:4a:f6:4e:dd:f2:02:e0:24:d6:76:57:3e:7c:23:f5:64:b0:
cc:ef:2a:d5:a9:1b:96:7b:eb:65:cf:de:33:62:21:ef:4d:c4:
cc:42:a2:6a:f0:af:dd:6a:bd:eb:39:e6:2e:81:3a:8d:14:b2:
eb:c2:fe:d5:30:27:a7:1f:6a:11:25:21:26:94:58:a3:98:ab:
86:e1:3a:e4:e4:d9:aa:ee:81:b7:df:39:3f:8d:80:da:c3:73:
2e:04:84:5f:0a:00:3c:db:4f:b0:7e:1a:28:a1:10:19:59:80:
c0:bc:8b:3b:a6:ff:c0:53:a2:d0:44:2e:4f:bd:cc:13:45:3b:
a0:16:12:db:de:1f:73:ca:58:6c:42:cc:d0:ab:eb:7f:14:30:
11:3c:7a:04:03:6f:7d:83:5c:84:68:9f:71:c3:85:15:9f:6c:
0f:30:9e:02:27:54:cb:ca:eb:9e:45:e9:16:f4:52:a9:78:d5:
ad:ae:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:07 2026 by rpki-client