Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: QPkl86YIsaGE25xFAlB9rVMa22ydyYaJePrgHfVchlU=
Subject key identifier: F7:75:B5:D9:30:E2:4F:3C:CF:1D:79:B0:BC:6E:F5:40:64:C9:1B:7A
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019D2703EFAF1B0F50C62069EA27F36F2F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 1499
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: YQbPRf8PsP4zHCDyWU50jtxzwKYKmqLmGB8a/LpN9zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ef:af:1b:0f:50:c6:20:69:ea:27:f3:6f:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=f775b5d930e24f3ccf1d79b0bc6ef54064c91b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:96:77:11:dc:2e:1e:da:6d:b2:c0:c9:5f:
26:37:f1:80:73:05:41:e8:e1:c6:08:a0:79:cd:92:
6c:12:31:06:97:47:5d:32:fa:11:19:60:35:63:4d:
b9:17:38:1a:b5:a4:31:13:f3:5d:f4:1a:34:ec:cc:
1f:c0:a0:1f:19:ec:d3:0f:50:5e:bb:c7:42:f3:27:
69:46:29:a1:e3:ba:d0:8a:fa:4d:cf:e6:5e:24:27:
88:ba:6f:f8:96:e6:52:31:c3:0d:35:a7:1a:e3:23:
98:04:87:3d:22:7e:c3:53:c8:00:aa:94:71:df:12:
51:a9:a4:07:00:97:6a:a8:91:61:df:97:3d:58:f4:
6f:2e:95:a0:ae:32:a0:85:b5:fa:0d:7c:79:64:f1:
67:08:5f:24:d4:95:01:76:5f:44:a4:99:c7:d4:88:
29:12:3e:37:fc:43:d6:a0:47:32:13:b6:2d:67:76:
65:2a:3f:88:e0:9c:99:0b:ea:8a:79:e7:9d:1c:91:
00:c7:61:63:95:cb:fb:c4:94:14:e7:b4:e2:d3:f1:
c6:89:d3:89:9e:a8:29:19:e6:66:79:0d:b7:41:e2:
4a:09:5d:c6:32:e4:ce:f1:5d:69:65:65:a8:b5:93:
db:d1:cf:a9:c5:15:41:06:dc:37:30:3b:13:fe:7d:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:B5:D9:30:E2:4F:3C:CF:1D:79:B0:BC:6E:F5:40:64:C9:1B:7A
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d5:31:dd:a6:8d:f5:6f:f9:11:61:f7:6b:d5:92:97:eb:c3:
21:e1:91:58:e0:07:4d:e6:13:10:48:4d:75:67:28:6e:53:e5:
9c:4b:4d:91:ce:51:75:56:07:7e:29:b2:91:af:00:cc:1e:1e:
d6:8c:93:44:f3:d4:af:12:19:d1:73:5c:a3:1e:12:47:74:e1:
87:5d:7b:76:a4:a4:d3:3b:8e:00:25:67:7f:66:a4:2c:43:c9:
04:8f:a5:ae:92:52:15:60:a4:8c:4f:81:05:8c:45:86:67:4f:
80:52:d4:10:44:38:0e:55:0d:5e:a6:b6:1f:18:d6:2c:b6:f4:
8e:dc:b5:25:b1:32:f9:7c:5c:0d:b2:3e:44:0f:d0:79:16:b3:
3b:6d:c7:77:f4:fe:fd:ed:99:3a:7a:70:59:8f:15:7c:f3:18:
c6:18:92:ce:95:e1:1e:4b:00:dc:74:6f:2e:60:1e:5b:1b:e0:
44:ac:2a:b5:fc:dd:e5:c0:49:3d:59:41:90:95:7a:d6:4e:e5:
0b:d2:91:f6:8c:81:a6:38:8e:48:1c:d3:3c:c6:43:46:3b:9d:
fa:0e:4f:a3:cb:36:3d:c6:46:5b:7a:1d:99:d4:9f:ed:61:fa:
7a:cf:39:2d:89:a6:ca:3a:b2:a2:21:f3:1a:f1:09:6f:6d:1a:
53:47:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:14 2026 by rpki-client