Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: 3tG9DpyghYZA5WKZHAlQmHEFszNpzZg385JxQEKlfoY=
Subject key identifier: E9:01:0B:14:E6:05:DE:6D:99:5F:FB:BE:91:E4:BD:72:4E:63:38:16
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 01A0D26EA080A31056966C307FBAA4632D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 0856
Signing time: Thu 24 Sep 2026 08:01:00 +0000
Manifest this update: Thu 24 Sep 2026 08:01:00 +0000
Manifest next update: Fri 25 Sep 2026 08:01:00 +0000
Files and hashes: 1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: xqSCOa+7+v+AMZw9Kxn/nosxwGnOq0o8PlUfgrmSoSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:a0:80:a3:10:56:96:6c:30:7f:ba:a4:63:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Sep 24 08:01:00 2026 GMT
Not After : Sep 25 08:01:00 2026 GMT
Subject: CN=e9010b14e605de6d995ffbbe91e4bd724e633816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:42:2c:ba:a1:a6:9c:95:fd:3f:2c:7a:9d:
2d:24:50:94:1c:46:f2:b0:d7:e3:cc:18:25:be:d3:
08:a8:80:65:03:70:7e:55:61:db:61:bc:5c:4d:c2:
5d:ea:a2:5f:b0:bc:8f:4b:da:e8:a1:aa:7b:7d:e1:
6c:50:9c:a4:1b:48:fe:3e:83:d8:6d:cf:69:55:c9:
3a:ab:37:52:cc:36:11:41:45:85:25:89:ed:a0:ae:
22:b6:2e:16:66:79:84:ab:e7:04:f2:2e:fd:7d:83:
a2:70:6e:10:88:33:53:be:18:84:0f:94:48:c2:79:
48:17:98:e3:dd:ae:38:2c:99:ca:36:66:d8:75:ab:
7b:ed:f9:f4:3f:90:05:58:15:d9:cb:81:be:2e:bd:
5c:34:5e:90:8a:2e:81:43:b2:59:53:9c:74:52:14:
73:2c:e7:47:43:93:34:bc:b0:b2:84:55:65:e2:35:
1b:ef:f4:b8:c5:58:75:3a:66:72:a5:74:f2:c0:0b:
ba:cb:2f:a0:94:ea:82:0f:bf:85:c7:21:a5:d5:15:
a8:bc:e0:87:bd:4c:5d:e6:45:e1:68:81:fb:0c:90:
38:f5:31:e7:a3:5e:a7:92:53:22:0f:c0:50:20:a5:
40:a6:81:39:85:96:b6:c3:66:60:40:97:17:fd:e8:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:0B:14:E6:05:DE:6D:99:5F:FB:BE:91:E4:BD:72:4E:63:38:16
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:2e:9b:6e:86:ef:fc:ba:b0:67:60:8f:6c:10:1c:d5:e1:
d4:c1:cf:85:a6:40:8d:6e:b7:44:55:bf:41:86:19:87:84:aa:
f0:a2:e1:2a:3c:47:73:43:92:bd:47:70:b2:c1:f1:a3:e0:2a:
7a:f8:f2:54:d8:da:fb:29:b3:85:e5:4e:d6:c1:22:8d:31:42:
b8:13:52:72:1f:e4:56:29:9c:62:76:ce:b5:02:2b:d0:f6:bc:
1a:12:0b:7e:3d:28:b9:9e:b1:a6:a2:d1:2a:f2:02:38:d5:c4:
5e:e2:45:97:06:4b:4c:08:0d:c9:0b:89:b2:fe:45:9a:9b:57:
84:da:94:88:3d:f1:42:f9:c9:27:88:c2:31:ea:2a:86:1a:3a:
de:0e:ce:1c:b3:7f:7c:98:a9:20:a5:c1:7e:32:a1:e8:58:fe:
06:32:39:15:52:f3:73:17:96:bf:62:24:ac:14:8b:10:b0:7a:
b5:7b:bc:cf:81:ee:5d:d7:23:30:2a:49:69:21:54:05:18:c2:
63:af:3b:4a:b3:a2:84:91:ff:9c:4f:2a:c2:d7:1a:81:2b:1d:
50:37:7d:5a:6f:24:7a:c2:e4:08:78:10:2d:83:0a:d3:59:b2:
7a:89:18:76:04:0e:9d:7c:60:03:12:a8:4f:15:34:94:ee:dc:
c0:bc:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:10 2026 by rpki-client