Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File: Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier: aCDdNHumNBuyZmBCrkLE/+8zxUVnhLQNBCj23FnNG1w=
Subject key identifier: FB:54:1C:CF:27:F6:8D:5F:0F:10:4E:2C:AB:77:B5:46:C0:11:42:67
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 01A08B67C5635B4561D609E631901003C487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number: 09BF
Signing time: Thu 10 Sep 2026 13:00:28 +0000
Manifest this update: Thu 10 Sep 2026 13:00:28 +0000
Manifest next update: Fri 11 Sep 2026 13:00:28 +0000
Files and hashes: 1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: Tof0zIDcVmg/O5lN1blua6Hh7iALQP/TppGJTN2m3/s=)
2: cStfMjNC3Zvni5434bm3caCEf5o.roa (hash: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8=)
3: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (hash: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:c5:63:5b:45:61:d6:09:e6:31:90:10:03:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Sep 10 13:00:28 2026 GMT
Not After : Sep 11 13:00:28 2026 GMT
Subject: CN=fb541ccf27f68d5f0f104e2cab77b546c0114267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:a9:21:be:21:92:14:84:7c:db:30:6d:f1:
66:e0:37:76:93:ee:0e:d5:53:7f:19:48:b2:53:3c:
3b:ea:22:06:56:82:e3:8f:3f:36:a0:68:ba:f6:28:
40:f6:2f:93:ff:d4:ae:54:21:60:c7:fd:8a:f5:29:
9d:f3:42:38:6b:3c:53:4d:c1:94:70:55:f3:33:8d:
65:36:15:4a:dc:57:ea:10:92:5a:e4:22:bf:d9:77:
6b:1f:eb:a9:dd:73:fb:c8:87:c6:41:29:44:db:85:
69:bf:91:39:66:e8:f6:25:9d:6d:84:ce:87:e2:38:
91:00:42:4c:42:bd:62:3f:81:ad:d2:9f:90:02:1c:
78:88:40:a0:25:15:fc:dc:82:d2:a3:e7:e7:8b:09:
7a:8e:b7:f4:03:75:d6:08:f6:55:d7:ad:9b:68:43:
6d:a8:5c:56:c1:ff:d6:1f:97:bd:47:57:80:11:96:
b3:e0:dc:83:38:c7:ab:c9:70:92:1d:66:51:25:c5:
f1:77:4d:1b:84:6b:4b:47:7e:0e:11:75:bb:32:07:
2c:fd:29:44:be:a2:ae:de:d3:be:30:55:97:0a:c3:
d7:49:f8:cc:f7:2f:ec:b3:ff:df:0c:04:44:ae:cd:
80:0c:09:fe:88:f8:97:31:3c:f9:3e:7b:2f:f3:f0:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:1C:CF:27:F6:8D:5F:0F:10:4E:2C:AB:77:B5:46:C0:11:42:67
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:77:e3:4c:4c:76:88:5e:3a:20:16:c8:13:76:55:5d:72:5f:
13:d8:51:fc:8e:89:cf:98:44:22:4a:c4:8d:23:32:3f:75:62:
f2:2b:36:25:cd:34:49:04:8e:92:16:13:1f:fd:e0:ea:cb:c5:
a6:70:b8:08:39:ed:92:40:9f:94:17:ad:06:3e:94:81:24:e1:
b3:87:d2:f0:b5:2b:3d:6c:c0:e8:de:09:a2:25:50:7f:99:a9:
53:ba:ff:c1:25:7f:a0:88:30:5f:d1:17:40:49:0c:e2:51:bd:
29:ed:67:a6:98:b5:18:bb:61:b8:46:7c:24:44:1b:25:fc:00:
75:8d:b1:e4:11:99:e3:a4:02:df:f1:2c:4d:e6:1b:a7:d4:2d:
e6:4c:65:c0:a8:52:08:5a:b1:5c:a7:67:eb:e2:4d:9a:49:9c:
50:17:02:23:a4:8d:d1:99:03:50:3a:d0:d3:70:d9:32:5c:29:
c2:c3:01:59:05:82:94:0e:66:93:bc:59:32:c9:68:19:d8:87:
5c:55:7f:e1:23:04:3c:ed:58:db:bb:a6:46:4e:2b:da:51:d4:
45:e1:50:7f:7f:75:b8:48:40:8b:68:61:8f:6d:64:05:dd:9f:
78:ca:ea:8b:cb:8e:22:68:94:e2:c7:88:bf:e6:62:6f:b6:8d:
e4:88:b8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLZ8VjW0Vh1gnmMZAQA8SHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmI3OThmZjc2ZThkNWNlYzViYTQ3ZjdiZTc4MzI5ODNk
YjMzMzUwHhcNMjYwOTEwMTMwMDI4WhcNMjYwOTExMTMwMDI4WjAzMTEwLwYDVQQD
EyhmYjU0MWNjZjI3ZjY4ZDVmMGYxMDRlMmNhYjc3YjU0NmMwMTE0MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDGpIb4hkhSEfNswbfFm4Dd2k+4O
1VN/GUiyUzw76iIGVoLjjz82oGi69ihA9i+T/9SuVCFgx/2K9Smd80I4azxTTcGU
cFXzM41lNhVK3FfqEJJa5CK/2XdrH+up3XP7yIfGQSlE24Vpv5E5Zuj2JZ1thM6H
4jiRAEJMQr1iP4Gt0p+QAhx4iECgJRX83ILSo+fniwl6jrf0A3XWCPZV162baENt
qFxWwf/WH5e9R1eAEZaz4NyDOMeryXCSHWZRJcXxd00bhGtLR34OEXW7Mgcs/SlE
vqKu3tO+MFWXCsPXSfjM9y/ss//fDARErs2ADAn+iPiXMTz5Pnsv8/CDgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtUHM8n9o1fDxBOLKt3tUbAEUJnMB8GA1UdIwQY
MBaAFCMreY/3bo1c7Fukf3vngymD2zM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEt
ZmQ0ODNkZTllN2U0LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEtZmQ0ODNkZTllN2U0
LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXfjTEx2
iF46IBbIE3ZVXXJfE9hR/I6Jz5hEIkrEjSMyP3Vi8is2Jc00SQSOkhYTH/3g6svF
pnC4CDntkkCflBetBj6UgSThs4fS8LUrPWzA6N4JoiVQf5mpU7r/wSV/oIgwX9EX
QEkM4lG9Ke1nppi1GLthuEZ8JEQbJfwAdY2x5BGZ46QC3/EsTeYbp9Qt5kxlwKhS
CFqxXKdn6+JNmkmcUBcCI6SN0ZkDUDrQ03DZMlwpwsMBWQWClA5mk7xZMsloGdiH
XFV/4SMEPO1Y27umRk4r2lHUReFQf391uEhAi2hhj21kBd2feMrqi8uOImiU4seI
v+Zib7aN5Ii4sw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:12 2026 by rpki-client