Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: LYH/YNDB6zjh7AsNKuDhhQfmls7F54QhSsXvxErtU68=
Subject key identifier: EA:72:6E:23:9F:E1:CD:81:AB:1D:B4:1D:F0:84:0A:7F:81:FB:FA:A9
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019D9A3E73517D06BAFD6F59741C8A7805EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 14E5
Signing time: Fri 17 Apr 2026 07:01:17 +0000
Manifest this update: Fri 17 Apr 2026 07:01:17 +0000
Manifest next update: Sat 18 Apr 2026 07:01:17 +0000
Files and hashes: 1: CAMjcl2HiSdI0pS1UvD5u_OKX10.roa (hash: 3ezIC14oieGL5XhJBO1eJbl4cT1odhjw1Ygh4ZROgXE=)
2: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: g1gREFaZW4B9zg76yU1xq2wqnixt67FWJOuUV5qqj7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:73:51:7d:06:ba:fd:6f:59:74:1c:8a:78:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Apr 17 07:01:17 2026 GMT
Not After : Apr 18 07:01:17 2026 GMT
Subject: CN=ea726e239fe1cd81ab1db41df0840a7f81fbfaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:89:a4:22:cb:b4:46:01:39:b6:f6:ff:90:
a2:59:7c:d6:bf:75:59:c7:d6:71:08:a5:a3:29:4b:
e9:9b:6d:2a:53:7a:49:15:11:1b:48:ef:1d:8c:7a:
25:1e:c4:e0:5f:4f:c9:08:5c:fb:1d:bb:19:1f:45:
1e:81:cb:81:05:b6:eb:12:79:50:85:9b:f0:62:ff:
9e:11:77:19:8b:dc:d6:b9:d5:26:cc:c7:6f:5f:00:
a8:4c:e9:e7:ea:72:eb:5d:ab:a0:4f:53:f6:4d:f8:
b5:72:f7:98:c5:23:53:d3:30:d7:7e:cf:63:23:4e:
5e:25:2f:7f:dd:3a:68:71:97:6f:f3:f4:00:31:a3:
34:54:4c:36:f6:a4:76:68:9c:63:df:05:65:88:db:
89:3b:e9:69:a4:e4:69:bc:36:42:87:f9:30:0a:3e:
88:ad:d5:26:ac:e0:ad:4c:bc:2d:d6:69:83:6c:64:
a5:73:92:52:f4:38:5b:96:ee:c3:88:bf:0f:17:92:
5c:d9:7a:26:fe:82:46:4b:6b:16:62:c4:3a:45:36:
8a:37:33:ba:fa:e5:01:aa:90:d4:7c:b2:88:53:df:
bd:1c:6b:3c:30:a1:aa:f3:c1:73:6e:10:da:86:cf:
da:02:d3:ea:8d:92:cd:3f:b5:65:3f:9e:40:ea:6d:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:6E:23:9F:E1:CD:81:AB:1D:B4:1D:F0:84:0A:7F:81:FB:FA:A9
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:45:82:94:7f:1d:32:36:06:83:72:6b:ab:b4:1b:a6:d0:da:
9d:7c:c5:ec:58:1c:94:a1:fd:e5:f7:8a:d0:3a:e0:f6:cc:3c:
4f:af:2d:24:dd:b2:13:fe:6e:97:3e:a9:e9:c3:04:dc:de:df:
e9:9a:a7:59:01:a6:82:87:8d:82:ab:35:d2:6e:ac:9c:63:14:
53:67:e6:bb:bf:2c:51:84:24:ba:97:95:9e:1c:a9:ad:ed:04:
79:9a:de:c2:df:c3:cd:25:4c:76:3a:8c:46:7f:27:06:67:3c:
d4:29:37:56:19:07:f2:9f:52:9b:71:15:5a:6f:71:01:6c:0c:
19:09:14:49:d3:40:2d:72:48:65:02:43:1f:8b:1c:5b:73:5e:
e1:c6:12:70:a6:7c:8a:71:55:b1:e0:34:9e:20:81:45:48:a0:
e5:d0:71:a1:0e:cf:c8:bd:cf:fd:4c:a6:d8:22:da:cb:dd:6d:
2d:12:e7:e7:2d:db:1b:a9:28:29:ea:9b:dd:11:b6:35:6a:e0:
82:19:8d:7f:ed:5f:ad:0f:86:e2:6a:7c:82:8e:f3:e1:ae:4c:
09:01:cc:c8:11:ea:64:eb:7e:15:ac:ac:b0:26:f2:38:72:a5:
55:3a:cc:4a:bb:1b:17:ba:f4:1b:72:ba:ad:2c:5e:b4:c2:c3:
d2:1d:d2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPnNRfQa6/W9ZdByKeAXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRhN2ZmNTc2ZTc4ZGMyMzRlYjc0Y2JmMDczMDc2YzFm
N2ViYzkwHhcNMjYwNDE3MDcwMTE3WhcNMjYwNDE4MDcwMTE3WjAzMTEwLwYDVQQD
EyhlYTcyNmUyMzlmZTFjZDgxYWIxZGI0MWRmMDg0MGE3ZjgxZmJmYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM+JpCLLtEYBObb2/5CiWXzWv3VZ
x9ZxCKWjKUvpm20qU3pJFREbSO8djHolHsTgX0/JCFz7HbsZH0UegcuBBbbrEnlQ
hZvwYv+eEXcZi9zWudUmzMdvXwCoTOnn6nLrXaugT1P2Tfi1cveYxSNT0zDXfs9j
I05eJS9/3TpocZdv8/QAMaM0VEw29qR2aJxj3wVliNuJO+lppORpvDZCh/kwCj6I
rdUmrOCtTLwt1mmDbGSlc5JS9Dhblu7DiL8PF5Jc2Xom/oJGS2sWYsQ6RTaKNzO6
+uUBqpDUfLKIU9+9HGs8MKGq88FzbhDahs/aAtPqjZLNP7VlP55A6m1VqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpybiOf4c2Bqx20HfCECn+B+/qpMB8GA1UdIwQY
MBaAFCGNp/9XbnjcI063TL8HMHbB9+vJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4Zjkt
ZjhhZWQzMGQ1NGMzLzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4ZjktZjhhZWQzMGQ1NGMz
LzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckWClH8d
MjYGg3Jrq7QbptDanXzF7FgclKH95feK0Drg9sw8T68tJN2yE/5ulz6p6cME3N7f
6ZqnWQGmgoeNgqs10m6snGMUU2fmu78sUYQkupeVnhypre0EeZrewt/DzSVMdjqM
Rn8nBmc81Ck3VhkH8p9Sm3EVWm9xAWwMGQkUSdNALXJIZQJDH4scW3Ne4cYScKZ8
inFVseA0niCBRUig5dBxoQ7PyL3P/Uym2CLay91tLRLn5y3bG6koKeqb3RG2NWrg
ghmNf+1frQ+G4mp8go7z4a5MCQHMyBHqZOt+FayssCbyOHKlVTrMSrsbF7r0G3K6
rSxetMLD0h3Skg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:22 2026 by rpki-client