Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: 0hgAU0Kah1XXPnhp+skpp6jicMSdGNnpIEzVYsgV1Ag=
Subject key identifier: 39:6F:6F:D6:DE:0D:37:A1:D0:B3:59:F8:83:25:26:73:B9:86:44:DB
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 01A0CE91CBAD4B7F19DA9824F03B15AF0681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 0854
Signing time: Wed 23 Sep 2026 14:00:56 +0000
Manifest this update: Wed 23 Sep 2026 14:00:56 +0000
Manifest next update: Thu 24 Sep 2026 14:00:56 +0000
Files and hashes: 1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: jtBKD49JbctiWY59RM/S8zI7zpFJYzrUPC5DIjA9BTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:cb:ad:4b:7f:19:da:98:24:f0:3b:15:af:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Sep 23 14:00:56 2026 GMT
Not After : Sep 24 14:00:56 2026 GMT
Subject: CN=396f6fd6de0d37a1d0b359f883252673b98644db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:72:9d:4c:c2:f3:2f:52:1f:00:00:47:ef:
05:ec:9c:2e:a1:cd:9a:e1:ea:5c:44:d5:87:a3:0a:
27:47:b5:f6:39:51:01:7c:9a:f8:88:8e:90:93:61:
88:f0:87:66:3e:8d:b0:51:3d:e0:c2:a4:17:49:c6:
91:83:8c:18:c2:c2:cb:88:80:49:f6:3e:70:28:8f:
9d:90:69:e1:4d:37:66:78:af:37:e5:1f:2e:90:e1:
ae:64:c4:fa:ed:22:eb:2c:13:05:23:20:73:1d:18:
97:17:c1:c7:cd:00:8b:48:29:7c:83:f0:fc:9d:2e:
99:37:3b:8f:bd:66:dc:9b:6d:2e:34:60:1c:01:ca:
e0:74:1f:5e:94:f5:b9:05:9e:37:64:ba:31:0f:df:
d1:79:47:e3:6a:ce:fd:c8:bb:d3:9b:6a:f0:f7:69:
3f:2a:17:93:c9:94:e7:44:27:c5:9c:66:c4:2a:5a:
db:23:e4:0e:d2:15:0d:be:0c:3b:fd:8d:7c:4e:98:
22:3c:ed:a1:09:01:e9:d8:06:e1:5f:36:42:18:ab:
81:18:85:68:03:f9:22:e5:a9:66:32:47:f4:55:d5:
29:66:59:3f:92:ac:8c:c0:ad:a2:f6:cf:9e:32:e4:
0e:7e:96:ca:9a:8f:24:a3:57:bb:24:23:53:a2:ed:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:6F:D6:DE:0D:37:A1:D0:B3:59:F8:83:25:26:73:B9:86:44:DB
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:bd:01:ce:f7:b5:7b:65:3f:3e:1f:86:23:e0:42:f6:32:
79:e9:92:bb:d0:46:f0:e0:ea:5a:9e:2c:6c:14:78:c5:ec:39:
1d:9c:22:9c:70:2f:93:22:c4:71:c9:98:df:55:c5:f9:85:ff:
99:dc:98:53:b7:06:8e:c9:48:9c:10:62:ad:a7:f9:8c:94:25:
d6:61:af:89:e0:66:dc:c9:ee:e4:72:9e:5c:b2:19:b7:29:7e:
09:5b:97:ad:8e:d4:3a:30:97:34:57:e3:f0:1c:9f:b6:9b:dc:
17:1f:cc:bf:e1:2c:b2:a3:0c:fd:5b:73:59:a2:50:82:67:74:
21:50:b9:8f:b2:5f:74:2d:73:12:e3:3a:9a:41:d0:bc:97:9b:
fa:96:d8:82:5f:e2:d1:58:b8:9c:d2:23:84:28:8f:a6:0c:40:
dc:56:28:f6:55:a3:1e:d6:10:2b:a0:69:ba:e4:c1:14:68:83:
94:c0:d4:2e:b0:27:f7:8a:4f:de:cb:8c:a7:30:5e:f0:cb:11:
14:82:0c:0d:d3:cd:0c:24:25:74:ce:98:c7:aa:bb:a2:c8:5d:
6b:73:65:aa:f7:7d:4b:df:a8:94:1a:79:74:6c:3e:7f:49:aa:
7e:57:df:74:e5:d3:1e:ea:01:ca:50:13:0f:83:1b:a1:9e:4a:
f9:21:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:13:56 2026 by rpki-client