Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: QvNddJkl/Vn3V7jxSlJRWtXGK5+Gs9o7EG7C31GHv+c=
Subject key identifier: 04:4C:93:F9:40:AF:30:BF:1D:0E:9D:5A:39:0A:38:6E:4C:E5:41:CC
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 019EB9C5F936AD3269960938EE39B927295F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 0165
Signing time: Fri 12 Jun 2026 03:00:19 +0000
Manifest this update: Fri 12 Jun 2026 03:00:19 +0000
Manifest next update: Sat 13 Jun 2026 03:00:19 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: XtKxGSBvDwxqzMwv/GxsZ6baKd4gw48CXnZbco73bcw=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:f9:36:ad:32:69:96:09:38:ee:39:b9:27:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Jun 12 03:00:19 2026 GMT
Not After : Jun 13 03:00:19 2026 GMT
Subject: CN=044c93f940af30bf1d0e9d5a390a386e4ce541cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:be:63:25:d1:d2:8a:e7:88:61:fc:4c:83:
6b:99:9a:71:46:28:03:fe:49:14:03:f9:62:d5:2c:
e9:ad:c7:d0:f8:2a:c9:12:90:24:d5:07:44:cf:16:
1b:cc:d7:1a:a5:f8:01:7d:0d:b9:9d:36:7f:dc:82:
99:9d:12:65:0b:41:a1:b4:f5:f3:3c:d5:97:10:fe:
da:d2:37:9a:88:fb:ab:de:24:da:6a:8f:02:d2:0a:
43:47:cf:c9:88:bc:48:54:6b:38:1e:40:af:5e:ee:
f1:62:6c:95:ce:b0:83:90:48:f3:a0:c1:f1:cb:29:
f0:47:69:f8:db:b9:65:6e:e2:a5:b7:81:bd:45:3b:
ef:21:01:d6:36:cd:1b:a0:39:ce:eb:21:da:df:57:
02:89:6c:35:14:b7:23:f8:94:cf:a1:50:54:85:61:
57:cc:00:ef:66:43:33:72:70:26:58:4b:4f:c4:44:
3d:f3:f7:cb:9b:a2:f9:1c:bc:83:3f:10:a3:02:5d:
91:6c:d4:54:98:64:ad:ad:94:2f:37:f4:c3:2d:94:
15:d8:26:0b:70:c1:28:5e:88:0b:b4:96:f6:11:38:
f2:58:23:44:9f:2a:e4:bb:ad:c4:5d:13:4f:8b:b0:
74:1a:ad:7a:80:a8:ec:38:95:a7:d1:c6:e8:71:37:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:93:F9:40:AF:30:BF:1D:0E:9D:5A:39:0A:38:6E:4C:E5:41:CC
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:97:a1:ce:09:71:1f:44:3c:e6:e4:72:2f:e8:26:5a:a6:1a:
0e:55:ca:aa:df:7f:9f:95:49:c7:b4:a8:02:a6:24:90:48:ee:
e7:6a:02:ca:db:19:b5:97:c5:a4:a7:0f:73:cd:d4:f4:76:2c:
29:eb:2a:4d:e4:81:64:4d:b9:54:bd:63:a8:f2:2b:f7:20:fb:
4e:b7:e3:36:f7:e1:e3:40:1c:73:c7:17:94:1b:9e:90:8e:5b:
87:bc:be:b1:66:5e:9b:64:ba:51:e8:f0:5a:85:f9:16:57:80:
b6:f7:93:aa:2d:0c:17:71:54:e9:08:af:81:e0:24:86:ec:c9:
ef:71:b4:6a:e4:20:14:97:fa:b8:cd:d8:94:ca:e6:a2:fe:9c:
16:2e:df:dd:5e:a9:62:08:4b:ea:b0:a9:ae:43:06:43:9f:97:
12:af:ee:23:fb:a2:0b:4f:27:a2:0a:4c:94:09:cd:59:97:df:
48:db:73:6a:7b:74:e0:e5:94:73:4c:fe:1d:63:a6:d5:52:0d:
67:86:46:b0:3d:45:74:b7:fe:42:b5:27:d2:77:79:bf:59:e5:
dd:b8:f4:c8:f7:39:a4:90:a6:60:a2:72:d5:6f:1a:4f:41:cc:
de:1c:89:f4:cd:43:20:03:5d:b7:4c:2c:2b:ea:fc:d3:47:f4:
55:97:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:22 2026 by rpki-client