Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: FD8K+v0soEh54jVzfxV9bi62EMRU1ucfHzD1aSlS3no=
Subject key identifier: CD:E1:E1:87:FE:9C:98:9F:8D:5E:16:37:67:06:5C:2B:68:25:47:37
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019E20241DF9A869B34F7A732EF1220DEF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 151A
Signing time: Wed 13 May 2026 07:01:38 +0000
Manifest this update: Wed 13 May 2026 07:01:38 +0000
Manifest next update: Thu 14 May 2026 07:01:38 +0000
Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=)
2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=)
3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: bQ1AySdMTtZEjxTOYk1NVuC38P7j7lcigLvIls2D9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:1d:f9:a8:69:b3:4f:7a:73:2e:f1:22:0d:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: May 13 07:01:38 2026 GMT
Not After : May 14 07:01:38 2026 GMT
Subject: CN=cde1e187fe9c989f8d5e163767065c2b68254737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:77:c4:6e:8b:88:db:5e:4d:e0:4e:86:72:
27:a4:0c:83:e1:e4:90:ef:69:fe:5e:c0:d6:72:f1:
e3:ef:1f:3a:a9:43:ca:02:eb:e0:33:80:59:68:e5:
1e:18:5f:cc:1d:6c:17:55:fa:8b:1e:25:6c:2e:ad:
fe:fd:17:e4:c9:04:f0:e6:af:3f:41:29:53:61:43:
8a:2b:be:08:1b:3b:89:37:77:fe:c5:35:63:4f:6c:
d9:71:19:1f:54:12:01:4a:b4:a9:b1:a7:4c:29:22:
7a:d7:19:69:b3:59:27:45:dc:ee:d6:62:a5:13:48:
01:70:c7:57:84:94:99:0e:e6:4b:14:ed:11:8d:1c:
8a:33:fd:53:89:3f:98:ac:65:06:5e:e6:9f:b8:63:
bc:46:b0:d7:66:be:51:64:74:51:43:04:8e:93:b0:
95:26:ce:c2:b2:02:c3:ab:e3:2f:4f:f0:0d:ea:5d:
71:c5:47:ae:aa:55:f2:55:95:e9:e1:c5:ba:ff:f5:
64:15:67:53:3c:bb:22:49:07:1d:c3:f0:17:79:c4:
78:2f:fd:83:69:0f:5f:36:8a:1d:4a:de:7e:ea:ac:
1d:af:44:03:b1:0c:e8:4e:3d:38:5a:bc:8c:85:05:
58:e4:1f:f8:f1:e8:e0:a5:a8:52:4a:03:d6:ef:90:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:E1:87:FE:9C:98:9F:8D:5E:16:37:67:06:5C:2B:68:25:47:37
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:5b:1b:3b:89:6a:bd:b4:9b:98:7e:b9:76:95:3c:80:fe:
d1:7e:3c:ba:68:e0:5a:ae:14:b9:6c:81:78:dc:b5:28:03:93:
53:bd:5a:ac:c7:bd:bc:42:4d:06:00:a6:69:c1:e7:d5:55:a8:
a3:fa:34:ce:8f:e1:9f:c8:e8:39:f0:35:98:b6:c8:8b:d5:2b:
f9:42:a8:5b:c9:1d:06:c7:fb:f8:36:77:ed:92:03:f9:dd:80:
46:0d:1c:d3:73:0e:d0:79:bc:bb:66:44:18:de:88:da:12:16:
fc:35:18:b3:67:4e:28:3f:6d:d8:b0:11:1b:fc:24:f6:45:ba:
43:5b:bf:31:29:4f:cd:29:54:1e:b1:52:8a:ff:c7:9f:62:e6:
a7:28:9d:eb:4d:5f:c7:ad:77:4d:ce:39:35:f9:b2:12:63:f6:
90:31:db:c3:d6:63:94:58:75:89:6c:38:6e:ed:e8:59:9b:c1:
26:ee:0b:a4:ff:c8:08:c1:73:aa:c1:e8:e7:96:a3:2c:a1:39:
98:4b:6a:a2:63:ea:1a:eb:34:75:fe:d7:8f:77:10:ce:7d:01:
14:30:57:8d:31:b9:1f:8d:72:a5:b1:33:ba:21:45:c7:fd:e7:
7d:d5:c4:12:94:66:c8:44:c7:52:f6:30:1a:7f:79:d8:02:74:
29:6f:18:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJB35qGmzT3pzLvEiDe+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5
M2Q1NDUwHhcNMjYwNTEzMDcwMTM4WhcNMjYwNTE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhjZGUxZTE4N2ZlOWM5ODlmOGQ1ZTE2Mzc2NzA2NWMyYjY4MjU0NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sh3xG6LiNteTeBOhnInpAyD4eSQ
72n+XsDWcvHj7x86qUPKAuvgM4BZaOUeGF/MHWwXVfqLHiVsLq3+/RfkyQTw5q8/
QSlTYUOKK74IGzuJN3f+xTVjT2zZcRkfVBIBSrSpsadMKSJ61xlps1knRdzu1mKl
E0gBcMdXhJSZDuZLFO0RjRyKM/1TiT+YrGUGXuafuGO8RrDXZr5RZHRRQwSOk7CV
Js7CsgLDq+MvT/AN6l1xxUeuqlXyVZXp4cW6//VkFWdTPLsiSQcdw/AXecR4L/2D
aQ9fNoodSt5+6qwdr0QDsQzoTj04WryMhQVY5B/48ejgpahSSgPW75Ax9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3h4Yf+nJifjV4WN2cGXCtoJUc3MB8GA1UdIwQY
MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk
LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP1bGzuJ
ar20m5h+uXaVPID+0X48umjgWq4UuWyBeNy1KAOTU71arMe9vEJNBgCmacHn1VWo
o/o0zo/hn8joOfA1mLbIi9Ur+UKoW8kdBsf7+DZ37ZID+d2ARg0c03MO0Hm8u2ZE
GN6I2hIW/DUYs2dOKD9t2LARG/wk9kW6Q1u/MSlPzSlUHrFSiv/Hn2Lmpyid601f
x613Tc45NfmyEmP2kDHbw9ZjlFh1iWw4bu3oWZvBJu4LpP/ICMFzqsHo55ajLKE5
mEtqomPqGus0df7Xj3cQzn0BFDBXjTG5H41ypbEzuiFFx/3nfdXEEpRmyETHUvYw
Gn952AJ0KW8Y1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:34 2026 by rpki-client