Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: AuQ1fsHWGrkzYWfrl6V6/PDV6Rsi4n+tYWchQS9e2nE=
Subject key identifier: 91:E2:C8:31:F6:F9:8C:41:54:FF:93:7E:5D:A0:EF:A5:73:1D:97:49
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 019D2A05124C33FF1431A41188D2D256B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 96
Signing time: Thu 26 Mar 2026 12:01:08 +0000
Manifest this update: Thu 26 Mar 2026 12:01:08 +0000
Manifest next update: Fri 27 Mar 2026 12:01:08 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: 59W5K+qgcmiFXbX8woG1MeQb3WeZUw0pM/CJ1sGvox0=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:12:4c:33:ff:14:31:a4:11:88:d2:d2:56:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Mar 26 12:01:08 2026 GMT
Not After : Mar 27 12:01:08 2026 GMT
Subject: CN=91e2c831f6f98c4154ff937e5da0efa5731d9749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:5f:69:dc:ef:8a:4f:a9:61:fa:79:9d:9c:
b6:72:af:2f:10:e4:e0:54:a9:50:cb:a5:23:91:14:
d7:7f:e4:22:de:ec:26:8e:fb:72:70:d5:2e:ee:14:
27:64:b8:5d:58:45:79:9b:a2:70:3f:23:cc:a6:86:
24:76:67:8c:26:b7:fc:2a:78:d0:5b:2f:fc:cd:f6:
61:20:14:9b:1a:b0:bc:40:22:ac:60:ce:03:b4:59:
33:51:cf:c4:15:c3:8b:a3:17:c6:18:82:58:cd:50:
c3:1c:c3:3e:54:81:f5:c7:b0:df:ad:61:e2:ee:04:
f5:d9:d4:52:43:1e:80:ef:a6:11:8a:05:58:a3:a2:
55:9d:62:2b:95:ef:42:4c:ef:3b:b8:61:41:3a:09:
e9:03:23:1c:07:cc:0a:47:b8:39:e1:49:27:ea:e0:
3f:28:42:3a:11:6c:03:df:23:5f:5c:77:85:7d:71:
0d:fd:80:e6:88:19:b4:47:5a:9e:00:79:7b:28:24:
b4:d8:2f:a3:a3:ce:48:f9:f9:33:d4:b0:30:5e:32:
35:dd:07:ea:1d:67:c1:83:d2:c8:82:ed:d2:66:84:
a0:e3:c6:8e:99:ee:70:40:14:d8:bd:66:98:c7:c2:
60:cd:eb:4b:5d:62:ea:45:cf:94:7e:90:9d:09:68:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:C8:31:F6:F9:8C:41:54:FF:93:7E:5D:A0:EF:A5:73:1D:97:49
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f0:c7:c0:f8:7e:49:1c:10:97:95:31:89:f5:cd:9a:55:34:
3e:da:dc:e6:59:e5:20:71:4d:86:52:06:3a:68:7c:96:45:27:
d7:5b:9b:72:f2:4d:e4:48:b4:ca:10:68:5d:7c:49:61:1a:74:
cd:0d:d5:5d:c8:99:46:48:96:62:db:8f:76:67:17:06:ae:d7:
73:f4:c2:b5:66:4b:f9:13:95:74:11:d7:08:59:f4:52:f5:8f:
54:d3:86:c3:8c:84:61:ba:87:3b:cd:1d:73:24:a6:72:48:be:
86:e8:23:ef:44:03:83:16:5d:40:07:63:db:e1:7b:fd:ea:7a:
b5:7b:14:f3:1f:af:f4:08:d8:f4:15:48:99:5e:b1:15:fd:66:
40:58:f3:47:0a:01:a4:a4:e7:7a:6a:8e:9d:82:fb:c5:1d:44:
f1:f8:c8:28:91:1f:c5:7c:3d:07:42:e7:af:dc:bc:2b:83:e4:
d2:20:3a:58:c5:18:e5:dc:36:73:49:92:2c:5f:be:a9:0c:d8:
20:89:a2:f6:b1:b8:90:b2:2e:ce:d7:4c:38:dd:a2:4a:2c:10:
10:9f:72:36:40:3b:df:cb:bb:e4:52:7a:c2:19:44:31:a4:be:
3f:f8:65:07:36:0c:d9:4f:d7:d2:e4:7b:dc:2b:46:35:70:f8:
db:64:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:06 2026 by rpki-client