Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: Zwduk1MWriFWKCn5z6Icp3nj0B1RTh2tHPuojaOI2qc=
Subject key identifier: D8:56:18:69:DE:75:61:71:C3:8D:3B:5A:E7:29:C4:5E:CF:F3:1A:95
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 01A17C97C96AE9F5DC4DABC32067B922E77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 02D3
Signing time: Tue 27 Oct 2026 09:01:24 +0000
Manifest this update: Tue 27 Oct 2026 09:01:24 +0000
Manifest next update: Wed 28 Oct 2026 09:01:24 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: 8QpSJi/K6ARmAovEw7z7fQ4iAfW7BzxHuCENhaeHIzI=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:c9:6a:e9:f5:dc:4d:ab:c3:20:67:b9:22:e7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Oct 27 09:01:24 2026 GMT
Not After : Oct 28 09:01:24 2026 GMT
Subject: CN=d8561869de756171c38d3b5ae729c45ecff31a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:6f:01:7e:e5:67:e7:54:e3:8b:71:fb:c3:
30:5d:e7:f2:9b:13:77:37:e5:93:b2:3d:f5:1d:7d:
56:01:3f:90:29:51:14:f7:2b:26:8f:dd:f8:89:1f:
c8:97:49:4c:39:6a:b0:b2:c3:f4:60:2c:52:4e:fd:
ac:66:1a:19:f8:fd:1f:97:da:c5:8f:0b:ab:12:1c:
e0:b7:80:0d:2d:c9:1d:c7:1c:58:9e:48:1f:43:df:
a3:9d:3c:4c:1c:6d:b5:4e:a8:1a:61:90:e9:aa:be:
c2:91:99:d4:d5:4f:c0:23:0e:93:49:5e:e0:a9:72:
14:50:9e:44:a8:15:21:a9:2e:cd:bb:ad:8f:3b:aa:
0e:b6:4c:a0:2c:d7:71:4d:aa:fe:a1:79:17:ec:d6:
f7:e6:c3:8b:00:91:ad:43:64:83:89:cc:ac:73:cd:
57:51:0c:c7:5f:bc:51:42:01:a8:d3:a4:45:8a:36:
26:5a:46:de:d1:b8:d9:1c:38:65:25:f7:51:78:3f:
48:bf:91:85:42:bd:0c:f5:e1:62:f2:ac:10:df:27:
ef:aa:66:cd:d6:a0:eb:90:d4:d0:b7:47:70:e0:cf:
a3:b2:4a:f2:6d:c5:59:d9:dc:e0:55:69:6a:86:d9:
7c:f3:a0:2b:61:4b:2d:a9:5d:a0:d2:dc:20:33:8f:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:18:69:DE:75:61:71:C3:8D:3B:5A:E7:29:C4:5E:CF:F3:1A:95
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:cb:98:6c:6b:e7:56:b0:96:b8:bd:61:c6:6c:28:56:b2:
78:59:a4:70:ed:e1:4c:25:84:b4:68:2d:db:d8:a1:72:96:a0:
de:9b:69:a6:35:a4:3a:01:4a:84:98:13:d2:9d:3e:17:a5:1b:
37:4e:a0:f9:e8:d1:b1:5b:11:1c:10:bc:3c:b0:45:06:8d:5f:
0a:91:db:01:fa:66:ba:7c:99:c8:11:43:20:d6:0b:5d:46:7b:
f5:5b:0c:a4:63:f0:83:bb:a8:c0:71:a2:28:fa:2a:50:5b:82:
cd:99:5d:9c:1b:a5:70:e9:68:fe:99:24:03:1b:3e:b6:b0:3c:
c3:8a:59:e5:79:9b:39:29:6e:b9:65:d6:ba:6f:f4:79:ca:20:
d9:68:8a:4e:e2:ef:74:42:ce:e6:a4:29:ba:45:ed:53:c3:70:
61:61:cc:f2:69:74:4a:7e:97:3f:1a:ea:88:77:20:a8:4d:82:
cb:ef:70:51:fa:2f:03:51:54:e7:47:8a:74:b0:95:f3:68:1e:
b8:14:ef:91:66:9c:9f:af:6f:4a:1d:67:56:b7:3d:fa:77:86:
5f:4e:a8:06:10:34:bf:c2:a6:28:c5:93:cb:46:58:12:8e:58:
95:b6:15:ad:b1:f4:ca:e1:9a:28:d4:f5:58:13:aa:06:d7:9c:
42:fb:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:06:41 2026 by rpki-client