Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File: iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier: UGaeY7En0MXbz/YzrVEGKzboW5Q1ZRrj5toHi8THzzY=
Subject key identifier: 13:33:82:B6:9A:47:E8:9E:76:49:0F:A9:C6:DC:33:0D:B0:00:8F:1F
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 01A0CAEBBF8FC7C55C8CF8A0280D48FA877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number: 0277
Signing time: Tue 22 Sep 2026 21:00:42 +0000
Manifest this update: Tue 22 Sep 2026 21:00:42 +0000
Manifest next update: Wed 23 Sep 2026 21:00:42 +0000
Files and hashes: 1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: KmQNDfWf7inslBydjXUyc4lVf8SAZ/zhBv0XKCCQPgM=)
2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:bf:8f:c7:c5:5c:8c:f8:a0:28:0d:48:fa:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Sep 22 21:00:42 2026 GMT
Not After : Sep 23 21:00:42 2026 GMT
Subject: CN=133382b69a47e89e76490fa9c6dc330db0008f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:e5:bd:62:00:e7:32:2a:0a:b3:29:a4:b9:
44:7b:24:d5:5c:3f:6e:47:b3:b5:9e:b5:75:31:f9:
49:16:7a:8a:4f:62:68:86:81:81:0f:f7:e0:bf:23:
e5:b8:78:f7:90:f0:6c:38:5b:af:a3:d9:83:9c:17:
f6:d0:c0:46:35:b7:70:7c:9e:63:80:af:a4:e7:6f:
a0:9b:a7:a0:c3:bf:71:8e:a2:97:2d:be:a7:79:cb:
62:c8:da:fe:ca:e4:8e:54:72:2d:dc:ed:17:d9:dd:
92:71:1f:ce:ff:66:cc:e4:de:61:34:1c:3b:39:93:
22:70:00:76:e6:f9:95:59:42:03:2d:fc:b8:f8:97:
32:4d:ca:29:1b:85:34:9c:e8:d5:ee:b1:5e:4e:a6:
c3:2f:d8:fa:c1:94:9b:23:67:63:1e:3c:db:94:08:
51:66:51:6e:30:19:a7:eb:bb:33:ce:fc:12:f0:d4:
1b:97:35:f1:0b:91:e3:9b:e2:78:8e:1a:6e:df:b9:
59:4e:40:df:ff:59:b5:38:4d:c7:87:1a:12:1f:0d:
1e:34:0c:10:21:22:6a:66:29:9f:dd:61:e5:23:48:
19:45:92:39:f8:bf:e9:94:80:90:c8:74:ea:d0:d7:
fc:d9:f8:7e:0e:8e:78:fc:bd:9a:a6:00:ef:62:33:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:82:B6:9A:47:E8:9E:76:49:0F:A9:C6:DC:33:0D:B0:00:8F:1F
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ce:d7:85:41:49:86:d5:b0:88:2b:22:97:42:73:08:28:0b:
ee:3c:af:99:d7:9c:b0:56:13:f1:2b:fc:eb:87:27:16:a2:49:
bc:39:06:bf:67:76:8d:52:54:c5:a3:70:e0:d3:56:d8:8a:c8:
a0:10:79:69:66:7c:37:84:82:53:2d:d4:11:65:f5:5c:18:99:
55:14:48:9b:48:fe:85:5c:c7:e9:94:7d:18:5e:b6:0a:07:13:
56:43:8b:a4:66:54:29:83:db:b7:8f:03:da:14:51:e8:e9:7a:
b7:92:c7:6d:eb:06:d8:c1:fd:5b:ed:0d:5f:9c:d5:34:6c:d9:
01:a6:8b:4d:1c:2c:4b:1b:32:81:5d:96:0b:d3:43:9e:16:d4:
b8:60:cc:c8:36:93:24:43:e9:9e:bb:dd:5d:3c:7e:21:e5:0a:
dd:51:2e:d7:92:4a:a7:eb:50:45:79:b4:95:70:24:03:a8:98:
53:e5:25:d7:0a:43:01:65:32:88:05:d4:39:0a:53:3e:b8:52:
d7:a6:c9:db:f6:98:4b:0d:36:50:b2:5e:88:fe:6b:ea:14:76:
59:fb:84:82:13:ca:33:f5:39:27:24:93:16:6d:a1:50:84:fc:
cb:fe:7e:24:dc:f6:28:25:3e:bc:46:9f:17:01:95:66:8b:e3:
37:17:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:51 2026 by rpki-client