
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: kh5uKb2xtQm9efgXEsx4xftQ814suZX+nlBP28unP2g=
Subject key identifier: 32:05:23:D1:2E:D3:9C:BC:5E:10:B4:85:0C:42:FC:B6:85:77:9A:94
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 01A0894324AF6DDC5F85B2E5227D18D4E661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 0255
Signing time: Thu 10 Sep 2026 03:01:13 +0000
Manifest this update: Thu 10 Sep 2026 03:01:13 +0000
Manifest next update: Fri 11 Sep 2026 03:01:13 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: IMshOZPQ4BPfSMSMdS7D9KRGw2JNyW34MWPxEBDfucY=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:24:af:6d:dc:5f:85:b2:e5:22:7d:18:d4:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Sep 10 03:01:13 2026 GMT
Not After : Sep 11 03:01:13 2026 GMT
Subject: CN=320523d12ed39cbc5e10b4850c42fcb685779a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:d7:4f:ba:52:57:49:d2:07:ba:fa:65:54:
e7:14:56:d5:a9:40:9d:5d:35:c3:e8:e1:66:45:58:
9f:4d:f8:8b:b2:90:62:e2:9d:88:da:23:32:ff:d7:
b0:1e:fe:ca:c3:b2:7a:42:26:15:c2:8f:27:2e:01:
ba:36:f8:cc:5d:a0:f1:a4:5a:52:87:dd:96:43:b8:
1d:e5:2b:33:d8:52:22:f4:94:01:ab:80:f4:c7:ee:
68:1f:2b:2c:c2:1f:ee:8c:8d:e4:c9:2c:7d:9b:6d:
d4:bf:87:e1:99:74:9e:9c:d6:5b:78:3f:3f:8f:e1:
7e:66:ca:52:c1:0a:15:f1:7f:84:b1:ee:c6:8f:68:
48:c1:05:f2:c5:0b:a1:45:6b:28:6b:85:41:8d:be:
b3:88:87:35:eb:8b:ed:5d:ca:54:3f:fb:3c:62:ba:
71:b1:71:1a:c1:c1:7c:0a:f0:b3:e5:15:67:f0:49:
68:e0:03:b7:99:5c:95:e5:17:39:e4:a1:8f:22:72:
89:9b:2c:45:27:78:fd:c4:8a:e9:7b:5b:f6:ef:46:
85:ec:75:d8:03:27:56:bf:23:a6:fe:53:fb:9a:b9:
8e:94:19:cb:9e:77:14:d6:73:84:1a:d7:65:b4:8b:
a6:03:00:04:1f:7b:2b:e5:f0:54:5c:96:63:d2:79:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:05:23:D1:2E:D3:9C:BC:5E:10:B4:85:0C:42:FC:B6:85:77:9A:94
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:95:d8:89:20:b9:17:b4:eb:1f:d4:15:13:f5:3f:88:55:4d:
72:a6:7c:44:30:ad:51:e9:7b:dc:73:82:e8:3a:a2:77:df:05:
0c:25:1e:d7:46:45:e0:64:63:36:6c:26:6d:15:31:34:b6:59:
b4:a9:0b:85:b3:79:5e:5e:1e:2d:63:48:58:46:03:b8:68:a6:
1f:0d:21:b7:2d:9e:a3:34:e2:3d:cd:eb:ba:60:b5:ca:73:61:
14:f6:bd:d4:65:de:0c:90:f0:26:f7:e5:8b:ec:5f:1a:25:7e:
7e:05:d4:c6:e6:01:b5:6f:3c:91:e4:96:c8:fd:08:ad:65:bf:
da:7e:7a:de:c6:ed:ca:70:68:5e:eb:3b:53:7b:58:c0:a8:2b:
1d:1e:53:08:b9:58:04:49:66:58:ad:12:9e:f6:85:51:d4:7b:
05:e8:83:9b:22:53:a7:31:26:9d:64:d5:49:ea:80:af:bf:1e:
24:a8:c2:4b:b9:a0:0d:04:3a:14:0e:67:75:ea:fe:16:e3:b9:
46:f5:9c:36:c5:ff:63:0f:62:2a:1c:0a:16:c6:fc:69:bc:cf:
78:b8:9e:fd:da:60:cd:6d:d8:c2:64:2a:9a:25:6e:07:17:08:
04:a8:b6:ba:06:f7:f4:58:8e:41:1a:26:bc:6a:e8:b3:d1:82:
77:1f:b5:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQySvbdxfhbLlIn0Y1OZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjRkODRiZmY0YzkyMTdkMWRlZmE1ZGQzMzRjOGM4NTMy
MjZhNmIwHhcNMjYwOTEwMDMwMTEzWhcNMjYwOTExMDMwMTEzWjAzMTEwLwYDVQQD
EygzMjA1MjNkMTJlZDM5Y2JjNWUxMGI0ODUwYzQyZmNiNjg1Nzc5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUrXT7pSV0nSB7r6ZVTnFFbVqUCd
XTXD6OFmRVifTfiLspBi4p2I2iMy/9ewHv7Kw7J6QiYVwo8nLgG6NvjMXaDxpFpS
h92WQ7gd5Ssz2FIi9JQBq4D0x+5oHysswh/ujI3kySx9m23Uv4fhmXSenNZbeD8/
j+F+ZspSwQoV8X+Ese7Gj2hIwQXyxQuhRWsoa4VBjb6ziIc164vtXcpUP/s8Yrpx
sXEawcF8CvCz5RVn8Elo4AO3mVyV5Rc55KGPInKJmyxFJ3j9xIrpe1v270aF7HXY
AydWvyOm/lP7mrmOlBnLnncU1nOEGtdltIumAwAEH3sr5fBUXJZj0nmeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIFI9Eu05y8XhC0hQxC/LaFd5qUMB8GA1UdIwQY
MBaAFIsk2Ev/TJIX0d76XdM0yMhTImprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlUWVNfOU1raGZSM3ZwZDB6VEl5Rk1pYW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iNTY5YmUtNTQzYS00YjU5LThhZDAt
NjU2MGNlNGFkMDZkLzEvaXlUWVNfOU1raGZSM3ZwZDB6VEl5Rk1pYW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iNTY5YmUtNTQzYS00YjU5LThhZDAtNjU2MGNlNGFkMDZk
LzEvaXlUWVNfOU1raGZSM3ZwZDB6VEl5Rk1pYW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5XYiSC5
F7TrH9QVE/U/iFVNcqZ8RDCtUel73HOC6Dqid98FDCUe10ZF4GRjNmwmbRUxNLZZ
tKkLhbN5Xl4eLWNIWEYDuGimHw0hty2eozTiPc3rumC1ynNhFPa91GXeDJDwJvfl
i+xfGiV+fgXUxuYBtW88keSWyP0IrWW/2n563sbtynBoXus7U3tYwKgrHR5TCLlY
BElmWK0SnvaFUdR7BeiDmyJTpzEmnWTVSeqAr78eJKjCS7mgDQQ6FA5nder+FuO5
RvWcNsX/Yw9iKhwKFsb8abzPeLie/dpgzW3YwmQqmiVuBxcIBKi2ugb39FiOQRom
vGros9GCdx+1aA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:57 2026 by rpki-client