Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: 56COez0RDDtXGVQW5LuYFtmmpNmBXUnQ4Apph886U8s=
Subject key identifier: 90:C4:65:2F:5E:2C:0D:93:09:B4:85:27:5B:F6:EC:8F:67:87:AF:97
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 019D3789722E4C542F98F266E1DAB1D2DD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 9D
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: 4rnVERJH5W6YRYaitZ5Yg0WRIolUosKU6ym627wlccI=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:72:2e:4c:54:2f:98:f2:66:e1:da:b1:d2:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=90c4652f5e2c0d9309b485275bf6ec8f6787af97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:07:9b:e0:d2:62:d0:8a:48:46:4d:df:d1:
60:87:9e:82:98:98:b8:cf:82:2c:07:df:b0:d6:1c:
08:7a:86:a6:a0:66:39:d9:26:d4:f5:a5:45:e8:80:
42:f2:17:04:f0:9d:31:48:3b:48:a5:dd:51:70:a5:
59:c2:26:03:1d:56:2c:a1:7b:31:f1:0f:ae:f2:5e:
11:65:1c:97:c3:47:32:a8:f7:63:29:c1:dd:13:09:
48:b6:f0:eb:f4:c4:1c:1e:42:be:6c:2a:71:f1:bd:
24:ab:b6:1d:c7:6c:0b:14:a8:ad:ef:1a:85:8d:49:
9b:a1:84:3f:24:4c:f7:85:e4:9d:99:ca:52:19:d5:
13:d5:f1:43:f5:c3:0f:43:45:d7:95:82:26:a8:94:
da:00:19:d0:2a:6b:d8:ba:b0:04:86:ea:ff:f6:c3:
d7:3f:7b:b5:7f:97:de:51:9a:8d:32:c2:03:e1:6b:
de:b7:2d:72:af:b0:09:39:58:d6:82:24:f9:e5:de:
44:66:f5:1a:55:1c:67:fe:24:3f:33:ce:98:0f:ef:
58:de:c0:fe:44:dc:12:88:1b:b8:ce:34:76:a8:54:
ed:35:e7:ea:04:40:40:bf:5e:18:3b:ba:13:70:ca:
e1:22:0d:c9:89:7c:66:dd:45:49:39:36:9e:79:6d:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:65:2F:5E:2C:0D:93:09:B4:85:27:5B:F6:EC:8F:67:87:AF:97
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:22:6c:20:c0:98:2b:a5:28:04:58:6c:64:aa:dc:1f:bd:
6e:80:b6:7c:42:32:ec:76:66:08:3e:2b:91:c1:93:ad:bd:2a:
f4:6a:5a:bc:b0:ec:9d:b9:4a:21:9e:f6:2a:a7:f9:4e:93:e6:
12:3a:18:77:d3:77:d8:1b:41:ec:1a:8c:1c:62:53:9f:f4:9b:
f7:83:7a:dc:3f:37:9e:19:27:aa:5c:12:9f:71:c1:2f:9e:1f:
f1:79:f1:65:f4:87:2c:8b:16:35:0e:79:d5:e4:c2:aa:ed:7b:
96:fb:a3:51:ff:c8:c9:21:ad:36:65:34:b1:13:a5:24:4a:f2:
c5:72:d9:9d:6d:1d:e8:0b:4d:21:dc:8a:3d:1d:1c:c7:d2:78:
0b:cf:33:45:25:b3:e1:e7:e9:04:52:5d:e0:40:dc:4a:c0:31:
36:26:c7:4a:fd:67:ee:bf:92:1c:f9:d3:64:39:45:3a:67:44:
90:ab:7f:6a:30:ff:a7:3f:39:59:3b:9b:a3:5c:62:0c:01:37:
dd:12:11:0a:2c:27:b2:b5:5e:f9:a1:14:fc:77:1a:5e:7c:81:
46:02:4e:f4:d8:bb:38:e7:39:c5:01:ac:5e:8a:f5:f5:1c:0e:
8f:7b:5a:8c:ab:e8:48:ec:de:d4:db:f2:68:d4:1d:64:0f:32:
cb:b0:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:12 2026 by rpki-client