
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: RRhBDw94pnIrs0Ha/xlOM3+IIvLihkN90zzamORQ+lM=
Subject key identifier: 5A:C9:FF:BA:A6:5B:24:D5:73:C9:EA:8D:D4:79:22:BD:38:A5:F0:DA
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 019D9A3E94AD013FF5164034F8C0FA4D6D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: p2fOx3Xanofrh8ic2O38QUiHTaHbldu5axYvV8ktxcU=)
4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:94:ad:01:3f:f5:16:40:34:f8:c0:fa:4d:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=5ac9ffbaa65b24d573c9ea8dd47922bd38a5f0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:b7:d7:d9:16:45:8d:b4:58:f2:78:a2:2f:
cc:65:40:e1:6e:b7:26:91:45:30:6c:e6:e5:bc:4e:
40:c7:75:c7:8a:c3:7d:8b:6e:23:68:4f:34:cf:3d:
b6:6d:b5:df:52:18:be:cf:69:b1:af:ac:20:13:8f:
db:55:ca:0d:e6:82:b9:67:15:67:8d:c8:d0:99:fa:
ce:9d:cb:dd:60:04:23:0c:04:80:30:fa:40:27:64:
5e:d0:5e:1a:42:25:48:e5:1c:c1:58:07:0e:8a:1b:
04:8e:de:c7:be:bc:4d:cb:6e:cf:fc:9f:92:46:d9:
ae:f1:a6:38:44:65:3d:70:a8:a0:b0:bf:52:a4:ce:
c3:8e:ca:17:20:9b:a2:92:d3:ee:ca:72:42:25:bf:
48:3c:60:83:78:22:e7:85:62:e1:1c:7b:59:f3:68:
22:7e:48:aa:d2:59:af:d7:0e:f3:e5:db:a1:2f:1c:
6e:f6:80:bc:4b:50:4b:9d:93:fe:20:16:3e:bb:45:
7e:c9:00:3e:ef:73:7c:b2:dc:a0:23:70:df:a5:81:
86:e6:f5:62:6c:22:8f:b1:16:e2:a3:41:96:9c:44:
6e:14:4c:58:7f:6a:c7:98:8d:f4:54:3d:a2:e0:4d:
7e:f5:b7:6c:93:10:dc:0c:82:f6:4f:bb:37:29:fb:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:FF:BA:A6:5B:24:D5:73:C9:EA:8D:D4:79:22:BD:38:A5:F0:DA
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:78:a8:59:8c:16:c5:82:fd:85:5c:4f:b7:26:da:8c:f4:
e1:57:e7:6c:4f:f9:e1:90:74:fb:4b:0d:e3:b6:b8:78:e2:22:
a8:47:ec:80:96:4c:a0:92:91:59:2b:d5:d4:e2:96:4d:f2:81:
c5:80:8a:e9:55:35:1f:b5:2e:71:f1:83:17:ef:05:76:0a:de:
46:6e:d8:6d:b6:bf:0e:fe:1d:ff:3f:df:11:0d:79:86:97:c4:
85:8d:16:a2:21:ae:23:55:80:21:8e:c3:2b:b0:04:d6:bd:64:
ea:4a:f4:fc:b5:57:d2:82:f3:96:89:be:a8:34:24:7f:da:eb:
2b:f8:a8:6b:a4:b6:df:59:e5:25:de:7e:47:92:c1:55:ba:74:
87:39:1f:10:c7:99:38:bc:70:21:8a:58:11:d6:0b:57:d4:e3:
60:a9:d5:3e:0a:64:0b:47:76:04:5e:bb:53:fa:1d:df:e7:02:
90:c5:b2:cc:fa:3e:74:57:81:31:36:38:b4:f0:92:69:a1:bb:
21:c1:7c:27:0e:95:21:3f:6a:c4:13:86:cb:3b:dd:b0:e1:25:
9b:a4:7a:c7:cf:36:81:84:a9:28:b3:2d:5d:db:96:3f:90:e0:
e3:93:c7:1a:c0:36:67:67:1d:55:78:ec:40:b2:72:39:18:66:
a0:95:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:47 2026 by rpki-client