Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: 5r1YmSUa8bdsoI0w2ke7GF2wk7I5uVv8VcvseL+Z8FE=
Subject key identifier: 5C:A4:74:67:71:C2:CB:9C:B3:60:83:07:68:9A:FC:BC:A3:28:17:52
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 019FAB2CA48DAEE15686E7C4AC5ED5CF6815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 01E2
Signing time: Wed 29 Jul 2026 00:00:57 +0000
Manifest this update: Wed 29 Jul 2026 00:00:57 +0000
Manifest next update: Thu 30 Jul 2026 00:00:57 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: ySY20Q5vpQKeOKnpsOu4QAC+Gjy5g05AMpOUN1lleKo=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a4:8d:ae:e1:56:86:e7:c4:ac:5e:d5:cf:68:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Jul 29 00:00:57 2026 GMT
Not After : Jul 30 00:00:57 2026 GMT
Subject: CN=5ca4746771c2cb9cb3608307689afcbca3281752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:9a:b4:66:d1:59:59:cb:7d:c1:0b:27:c9:
b3:75:2d:30:1e:50:5f:2c:e2:c0:c7:1f:f9:33:2e:
c3:b6:7e:ae:b4:cc:40:1b:f5:c9:82:8f:b6:c8:46:
4d:10:6c:12:15:70:b1:d1:b2:df:ce:df:8a:9c:a3:
53:9a:bd:9e:a5:fd:5f:5c:15:aa:d8:5e:97:c3:04:
58:0b:4b:79:44:ec:c4:da:3a:0d:86:57:30:b7:1a:
29:47:44:c6:bc:68:45:ac:73:a3:b6:6b:b7:0b:45:
c3:b6:cc:f7:34:96:7d:e5:a4:53:4f:28:0a:90:87:
cf:50:df:04:6e:76:f7:67:37:2b:e9:ed:64:7c:3f:
72:66:80:77:1f:c2:e3:b1:f9:98:fa:b5:b7:21:ea:
df:21:da:30:02:a7:fe:6e:70:92:07:c7:ea:09:f3:
47:27:01:51:85:12:1c:72:c9:46:15:e5:b1:b4:bf:
ac:92:87:b7:14:27:5d:fc:35:e5:e5:aa:9c:f5:23:
db:bd:7a:6e:b0:a4:33:e5:8c:ee:da:72:6e:0f:33:
00:7d:cf:a9:15:19:f9:56:11:9f:fc:bf:bc:0d:91:
8d:65:66:86:c1:fa:5e:27:b9:67:15:8a:19:5a:92:
eb:ed:b1:97:2d:9e:10:87:7d:99:29:d6:25:5b:51:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:74:67:71:C2:CB:9C:B3:60:83:07:68:9A:FC:BC:A3:28:17:52
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:6f:9d:36:c4:ed:d4:c4:42:f2:59:e9:d1:df:c6:fa:5d:
f2:84:3c:69:48:2b:60:02:3a:54:e6:6f:93:41:58:5d:aa:6c:
3e:81:90:54:3b:97:0f:41:60:0a:2a:24:0f:95:72:5c:b4:44:
1f:8b:ed:d8:72:2f:72:81:76:1d:44:c6:d5:cd:8c:0a:cf:33:
0d:8e:61:9c:15:68:53:23:92:b7:8e:78:d1:26:86:fd:27:cd:
24:f5:1b:1c:6b:da:70:d5:6c:75:7e:d2:ac:8a:81:d4:e4:20:
2f:77:fe:66:95:96:14:03:f2:e4:eb:95:d9:0f:c3:2e:93:a8:
00:97:52:79:96:30:b7:35:b8:fd:f1:44:1a:f3:e8:d8:de:e4:
5a:3b:d4:ff:11:6d:93:e0:14:60:31:f6:17:78:42:49:e6:71:
70:7f:bf:7a:3e:36:3b:5e:bb:49:71:6b:72:d9:16:d5:ec:be:
4b:be:45:31:82:ba:a2:b9:6a:20:5d:9b:58:be:88:62:f0:f6:
0e:49:9d:99:70:40:11:f3:f2:8a:d1:dc:23:10:e3:2b:db:8f:
97:6e:c3:38:69:d2:5d:61:19:d7:be:0d:bd:42:ae:eb:ce:d2:
da:b8:e4:78:ab:8b:03:db:27:42:cb:43:83:6d:05:1c:b2:9a:
30:3d:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:42 2026 by rpki-client