Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File: Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier: pyUn1Mm0oNUq99bAjfHYHmzdi2Ec/3TXaXDaULjfH0s=
Subject key identifier: 48:C9:B5:DB:1C:C4:43:81:05:11:81:B9:DE:D9:5B:AB:1F:75:AF:7D
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 01A0C746190E1BCB458D38FEE8D6CAE33795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number: 09DE
Signing time: Tue 22 Sep 2026 04:00:54 +0000
Manifest this update: Tue 22 Sep 2026 04:00:54 +0000
Manifest next update: Wed 23 Sep 2026 04:00:54 +0000
Files and hashes: 1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: ZmN3Vx3XHqGrTL3A5UdyZ4j9fVPruw05XrmvMpSWaw4=)
2: cStfMjNC3Zvni5434bm3caCEf5o.roa (hash: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8=)
3: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (hash: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:19:0e:1b:cb:45:8d:38:fe:e8:d6:ca:e3:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Sep 22 04:00:54 2026 GMT
Not After : Sep 23 04:00:54 2026 GMT
Subject: CN=48c9b5db1cc44381051181b9ded95bab1f75af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:02:41:c9:64:3c:2e:80:fa:17:1c:b5:3c:
04:31:df:d5:33:64:ed:c3:37:e9:d7:74:06:79:ea:
da:93:91:05:da:44:3c:fc:ab:46:41:c5:02:f9:4c:
b3:21:11:43:ad:f2:9d:6a:56:1a:03:4f:55:d1:a1:
74:74:11:1f:d6:28:f8:db:cb:65:57:5b:91:97:cd:
ec:6e:5b:e3:8f:da:45:07:c2:ee:62:3b:99:c9:ef:
b6:f9:69:83:a9:3b:ec:a1:e4:23:0f:d3:13:52:3e:
e6:4f:d1:f5:f7:61:c2:7b:4e:c3:5e:54:5e:e0:fb:
b2:7f:0e:19:71:37:47:32:36:9d:b3:de:67:80:4d:
92:7a:7c:ca:4d:f3:2f:d3:c7:65:37:f3:79:4f:58:
ea:ab:fd:33:ce:3f:fe:8b:e0:28:c5:c7:d9:13:85:
48:8b:c1:c7:c4:f2:56:e1:ea:40:c6:96:6a:34:a1:
f3:b8:24:da:68:3a:03:27:b3:43:5b:08:8d:a2:53:
e1:39:37:93:30:13:66:3e:48:04:6a:56:8f:9b:b4:
04:3c:14:cd:6f:c4:ee:31:eb:92:bd:67:c2:46:cb:
45:30:3a:19:f9:24:c5:b9:0a:fb:95:61:be:a1:40:
0c:98:09:20:c0:58:ad:83:68:b9:65:49:8f:e3:97:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:B5:DB:1C:C4:43:81:05:11:81:B9:DE:D9:5B:AB:1F:75:AF:7D
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:28:a9:0a:a7:f0:f4:78:24:ae:ca:ae:a0:b3:10:04:b2:
5e:45:33:52:64:ef:2f:90:b0:c9:ce:a0:e6:ad:ea:20:95:80:
1b:e2:f3:68:f5:9d:36:0c:44:d3:5f:5d:2c:e9:3e:a3:30:cd:
bd:78:60:4e:58:af:cb:f8:0c:77:73:32:d9:e8:bf:75:8a:6b:
d7:1c:86:ef:44:aa:09:f9:c0:23:21:61:9f:ea:6f:6a:66:b8:
10:51:b1:4d:c6:32:64:0a:2b:d4:2e:05:40:6d:90:c6:f5:18:
d8:97:b9:b2:f3:70:d6:98:e3:7c:ea:4a:35:69:d1:3f:41:e1:
06:df:72:ee:4c:73:23:1d:00:34:55:13:59:b9:76:e0:4e:cb:
17:ec:96:8c:f9:f4:44:6b:49:06:ce:47:83:af:61:49:78:20:
57:3a:7d:a7:34:00:98:32:13:61:64:93:b9:b7:d5:34:8e:5d:
53:a3:78:8f:46:b2:23:df:13:2f:b2:e2:28:bc:9f:ed:50:ca:
b3:58:7b:49:94:2c:07:3a:d1:38:fa:44:09:31:e0:f1:07:68:
a6:35:db:86:82:e1:0c:6e:63:cd:b9:91:58:0d:b5:c4:9a:a9:
20:14:66:47:ec:2a:7b:f4:55:1a:9e:b7:12:55:cd:4e:1f:c2:
ed:08:53:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRhkOG8tFjTj+6NbK4zeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmI3OThmZjc2ZThkNWNlYzViYTQ3ZjdiZTc4MzI5ODNk
YjMzMzUwHhcNMjYwOTIyMDQwMDU0WhcNMjYwOTIzMDQwMDU0WjAzMTEwLwYDVQQD
Eyg0OGM5YjVkYjFjYzQ0MzgxMDUxMTgxYjlkZWQ5NWJhYjFmNzVhZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPkCQclkPC6A+hcctTwEMd/VM2Tt
wzfp13QGeerak5EF2kQ8/KtGQcUC+UyzIRFDrfKdalYaA09V0aF0dBEf1ij428tl
V1uRl83sblvjj9pFB8LuYjuZye+2+WmDqTvsoeQjD9MTUj7mT9H192HCe07DXlRe
4Puyfw4ZcTdHMjads95ngE2SenzKTfMv08dlN/N5T1jqq/0zzj/+i+AoxcfZE4VI
i8HHxPJW4epAxpZqNKHzuCTaaDoDJ7NDWwiNolPhOTeTMBNmPkgEalaPm7QEPBTN
b8TuMeuSvWfCRstFMDoZ+STFuQr7lWG+oUAMmAkgwFitg2i5ZUmP45c2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjJtdscxEOBBRGBud7ZW6sfda99MB8GA1UdIwQY
MBaAFCMreY/3bo1c7Fukf3vngymD2zM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEt
ZmQ0ODNkZTllN2U0LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEtZmQ0ODNkZTllN2U0
LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdgoqQqn
8PR4JK7KrqCzEASyXkUzUmTvL5Cwyc6g5q3qIJWAG+LzaPWdNgxE019dLOk+ozDN
vXhgTlivy/gMd3My2ei/dYpr1xyG70SqCfnAIyFhn+pvama4EFGxTcYyZAor1C4F
QG2QxvUY2Je5svNw1pjjfOpKNWnRP0HhBt9y7kxzIx0ANFUTWbl24E7LF+yWjPn0
RGtJBs5Hg69hSXggVzp9pzQAmDITYWSTubfVNI5dU6N4j0ayI98TL7LiKLyf7VDK
s1h7SZQsBzrROPpECTHg8QdopjXbhoLhDG5jzbmRWA21xJqpIBRmR+wqe/RVGp63
ElXNTh/C7QhTKg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:23 2026 by rpki-client