
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: sawrc10jCzMkl3tqG6jSfl1aYBB8GVp/P6D6kEs9CMk=
Subject key identifier: E0:73:FF:AE:8E:09:10:06:9C:39:82:60:2B:2E:ED:12:21:16:61:34
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 019F8FECDB013708DCD21B2E7C360FFD0C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 07AF
Signing time: Thu 23 Jul 2026 17:01:32 +0000
Manifest this update: Thu 23 Jul 2026 17:01:32 +0000
Manifest next update: Fri 24 Jul 2026 17:01:32 +0000
Files and hashes: 1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: +ld2QznjhPwcl7umMu8pRdJdg9igiE24gq/06w0RQ1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:db:01:37:08:dc:d2:1b:2e:7c:36:0f:fd:0c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Jul 23 17:01:32 2026 GMT
Not After : Jul 24 17:01:32 2026 GMT
Subject: CN=e073ffae8e0910069c3982602b2eed1221166134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:c9:8f:60:7d:3b:6f:ef:cb:3f:e1:6f:dc:
4a:c3:a6:eb:51:bf:09:39:be:ee:6c:ce:f6:41:20:
f1:06:15:0f:14:70:a3:af:f8:19:3a:7b:5d:1c:83:
1e:86:8e:f3:1a:cc:aa:ef:bd:eb:ff:e7:9b:fa:7b:
d4:ac:30:6c:60:73:91:4b:d9:94:01:d7:ea:79:aa:
05:dc:c9:84:ee:32:4a:c4:f6:92:91:c4:92:45:55:
44:cf:97:3f:9f:71:32:4b:b8:d3:82:30:8a:14:7a:
71:0b:d3:ac:3f:5f:4a:31:30:4f:0c:d0:8d:3a:77:
cd:2a:5f:65:7a:25:97:b2:64:fb:a0:ca:91:83:f3:
2e:17:63:b6:f3:8a:ff:a9:ef:ed:da:7d:90:11:42:
26:c7:5f:8c:97:b6:83:c5:ba:54:e6:68:1a:dc:2f:
66:15:f1:64:0f:e6:fb:e8:85:3c:a4:58:23:66:a9:
4f:ed:be:38:f8:55:a1:fe:47:89:16:89:71:b4:50:
3f:35:ee:4b:5a:e5:b0:6a:e1:96:bc:12:70:2d:13:
a8:f9:e2:43:7e:a0:33:31:7e:86:de:77:ba:8a:b0:
11:1e:8f:3f:5c:b0:16:06:9a:67:ae:c8:ee:02:1b:
cc:b5:f5:59:b9:1d:da:a2:ac:b4:61:11:dc:10:91:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:FF:AE:8E:09:10:06:9C:39:82:60:2B:2E:ED:12:21:16:61:34
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:bf:9f:7f:8e:4a:6c:54:d7:ef:22:b8:74:b8:5d:c8:c5:
ab:7a:e1:dd:36:34:2f:a3:7f:a9:06:5e:a4:81:36:9d:82:0a:
19:cf:74:fe:26:0f:5c:35:ae:25:1f:62:ee:34:97:09:0a:4e:
1a:51:0f:8c:41:94:4f:f7:33:ba:3e:08:a6:2a:8d:b3:6b:bc:
46:36:e4:1f:2f:7c:14:0f:cf:c8:4c:77:7f:47:da:0e:45:c5:
df:19:c6:c3:eb:71:f9:a2:48:d2:d5:95:7c:58:b7:0e:81:de:
b6:1b:c3:df:bb:a5:db:7b:78:f8:51:c0:94:3e:14:6d:28:70:
36:df:3d:81:50:0f:43:58:50:84:f2:ec:48:1f:c3:6f:6c:91:
c4:55:7e:65:51:92:51:90:76:2b:5d:9c:c0:6c:53:ec:30:19:
a2:df:2c:0d:6e:8a:03:c5:b2:b0:1a:b5:be:8f:52:a1:27:28:
ba:15:b4:a8:e9:d3:f1:0c:27:b5:f7:c7:35:a9:a8:89:e2:24:
7c:16:d2:e1:f3:9b:e7:6f:33:b4:92:15:db:d7:54:5b:20:7f:
75:af:2b:69:79:4f:14:f1:b0:ec:0f:35:77:ce:f9:1f:04:1d:
9c:e9:61:96:7f:62:c5:34:33:00:d9:86:e8:68:89:11:af:3c:
3b:df:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:11 2026 by rpki-client