Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: Z0W2kU8G2DCTif+P2nL4nj76CTSBanWkX7LV4Vs15Nc=
Subject key identifier: 7F:51:E0:32:BB:F3:12:70:97:0E:D4:C6:51:22:3C:5C:99:D8:62:5C
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 01A06E03266D7EDA64FA1CFD91C95B13E96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 0822
Signing time: Fri 04 Sep 2026 20:01:35 +0000
Manifest this update: Fri 04 Sep 2026 20:01:35 +0000
Manifest next update: Sat 05 Sep 2026 20:01:35 +0000
Files and hashes: 1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: KzGZaYzKbf4DIVPU3iXD3MxmJCiTqVNbsDri28bbxk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:26:6d:7e:da:64:fa:1c:fd:91:c9:5b:13:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Sep 4 20:01:35 2026 GMT
Not After : Sep 5 20:01:35 2026 GMT
Subject: CN=7f51e032bbf31270970ed4c651223c5c99d8625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:e6:0e:d8:18:69:9e:38:ad:75:06:65:6c:
e7:7d:7c:79:60:8f:34:0c:98:20:b0:0c:7c:c7:6e:
75:69:e5:36:5e:0d:19:48:ec:77:42:6f:46:58:3e:
d9:de:61:b2:dc:e3:6f:8c:7e:53:63:9d:9b:83:76:
d2:19:c2:37:f3:38:22:c5:fa:7e:5f:21:64:63:1a:
5e:f0:fc:36:de:3e:80:3b:d3:91:ed:49:8c:fd:70:
d3:ab:6b:b1:d3:ef:88:9d:60:90:5a:c8:7a:0c:a6:
89:1a:0f:5e:12:86:a0:3b:bf:7d:67:35:9d:5a:c4:
e9:e5:6d:bf:6d:c3:a4:73:05:5a:34:f2:c9:83:de:
28:e0:94:26:5b:24:dd:43:04:5b:c5:0c:59:3e:09:
a5:f7:e6:9b:9b:c5:85:af:ea:36:e5:af:e3:23:a3:
bd:bb:1a:2c:2a:08:61:8c:f5:c7:4c:12:1b:8c:7c:
92:b9:57:7a:e9:7e:d5:3e:30:c4:bc:f1:94:89:d6:
7d:fc:d0:7f:42:79:89:07:10:8c:49:27:76:e8:89:
a3:7d:b2:ac:76:90:64:9b:1e:37:f0:b1:11:2d:22:
9f:50:6c:a3:b1:e0:8f:ee:28:87:b0:bb:50:7c:6d:
9f:d9:0e:01:1c:e6:f9:11:59:a7:8b:69:cc:61:bc:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:E0:32:BB:F3:12:70:97:0E:D4:C6:51:22:3C:5C:99:D8:62:5C
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e6:d7:f6:4f:8d:ab:7d:90:7b:48:fa:9d:ac:e3:63:7f:16:
e4:c3:c6:d2:3c:5c:66:44:2b:49:2f:93:05:fd:94:c2:c1:1f:
0f:26:49:0b:c4:43:ab:b8:a6:6e:c9:f7:72:c7:31:6c:22:c3:
98:80:7d:59:d4:37:65:95:68:33:7b:e5:dc:92:0b:01:be:52:
90:7b:c3:d9:2f:8c:17:94:9f:85:b0:b0:c8:a5:14:7d:54:eb:
a2:15:a4:b0:d0:07:78:90:5f:92:72:9d:2f:0a:a2:9d:e6:f7:
64:35:41:ed:4f:e0:99:29:93:b0:a2:a0:4c:22:f9:73:62:76:
89:08:5e:9e:5c:d5:00:cc:e8:92:5e:e0:c8:3d:e0:b3:77:84:
b5:16:17:14:0c:42:e6:a7:78:ed:02:39:6d:70:6d:4a:56:11:
b4:3e:4b:4a:13:62:d2:bc:03:67:0a:7b:d5:0d:36:34:98:5e:
38:68:cb:52:88:a1:87:0b:8c:3b:be:95:8a:18:5e:89:48:f3:
5a:b1:73:f7:86:3f:c2:6d:41:26:4c:64:82:34:fc:f1:d4:94:
8d:83:fc:2c:e6:90:84:5e:ec:4d:04:a6:9f:10:59:9d:3b:f8:
29:ae:6f:6b:7b:03:c8:d5:09:65:04:ce:28:b2:7f:9e:df:9d:
e9:09:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:59 2026 by rpki-client