Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: BRKs2wLuvclxgUGm0/+Yixho7K9ABUZo5vJG9/38Ob8=
Subject key identifier: CC:DB:CE:2D:17:E8:23:F1:19:34:CD:A3:BC:6C:5D:B3:E3:81:56:9D
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 019D98F4D1729D65317A27114BB4B8E7B044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 06AA
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: u0SW5IOs7yf7FW/dDAYUpQvVgzCYImxVjzQj0X+R+jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d1:72:9d:65:31:7a:27:11:4b:b4:b8:e7:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=ccdbce2d17e823f11934cda3bc6c5db3e381569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:18:18:88:23:bf:19:b0:88:a3:2f:09:a1:
93:2e:e8:d6:60:e1:b6:0f:5b:bf:1e:67:19:66:ba:
38:5a:61:1a:6f:57:70:ba:5d:2e:d9:32:9e:14:f7:
31:f4:3d:96:65:d7:52:db:e1:fb:77:a6:5d:35:4c:
dd:2d:0e:cb:cf:f7:b5:55:11:cd:1e:cf:15:0f:2c:
8e:96:9f:45:f7:2d:bf:6f:0f:2f:3b:c7:2f:7e:a4:
c5:bb:c5:f5:56:af:42:70:92:4a:92:14:60:25:83:
1b:40:27:e8:2f:a6:c3:c4:49:ca:7d:2d:05:8d:2d:
6a:b0:ae:70:d0:3f:9e:8b:2c:89:8d:f9:f7:53:64:
ad:5f:8f:b5:f5:1e:ca:2f:4b:43:91:85:b7:f0:68:
22:2d:d2:9e:56:d7:95:ff:f2:2a:09:fc:a8:7e:4d:
78:fb:4b:31:7e:47:52:d2:37:19:8b:28:15:94:73:
59:4c:aa:70:f1:3f:63:cf:f3:1e:35:b0:43:6a:3f:
f8:66:2a:86:3e:cb:7c:e6:ef:38:9d:41:39:a1:7b:
9c:25:55:05:e1:7b:e5:62:48:44:c9:6b:5e:3d:4e:
b6:b8:3c:9c:57:6d:c9:63:6e:1b:f3:39:d7:af:08:
82:31:86:13:41:9e:b9:b5:9f:c1:97:fa:52:da:80:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:CE:2D:17:E8:23:F1:19:34:CD:A3:BC:6C:5D:B3:E3:81:56:9D
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:75:86:8a:bc:9f:a6:38:b5:0a:86:00:75:17:b1:db:c8:7c:
8d:90:53:53:ab:55:56:a3:2b:42:04:39:f8:4b:58:e3:df:b0:
0a:9f:20:84:62:e4:a1:49:99:7d:07:79:08:ba:04:0e:eb:48:
d5:27:24:61:ed:44:21:c5:01:e5:36:82:96:c4:e3:95:d7:db:
08:c3:4a:61:b9:35:bf:d7:22:66:61:5e:aa:38:e5:18:6f:a1:
e4:a2:bf:c5:aa:16:84:a7:04:2a:c5:d9:87:45:bb:2f:03:25:
ab:a7:33:99:9e:42:1b:1d:67:e8:cf:6e:86:0b:9a:a0:26:a8:
cb:ff:b9:22:76:64:f1:09:57:20:c6:ac:bc:e1:c0:22:60:95:
f5:fc:83:a3:17:58:e8:56:1d:e9:36:22:bf:76:1c:c5:52:50:
21:7b:f5:82:31:e6:6f:28:ee:ea:ec:56:71:2e:eb:57:6d:19:
b3:77:a6:a5:78:8d:ba:71:13:fd:89:70:b5:80:19:4f:25:74:
b4:03:3b:64:4f:3e:42:92:22:07:fa:8f:5f:ab:e4:79:30:f4:
2a:39:c2:36:44:1d:00:06:46:a1:10:e8:c6:3d:4a:03:3c:b9:
1a:f0:16:09:e1:56:8b:f2:b7:84:45:b5:02:4b:57:49:b9:67:
6e:97:86:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9NFynWUxeicRS7S457BEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2NhZmY4MDdiMzI5NTJkNjhjNzFhYWYwMWI5MTk4NGFk
MWVhMDgwHhcNMjYwNDE3MDEwMTE0WhcNMjYwNDE4MDEwMTE0WjAzMTEwLwYDVQQD
EyhjY2RiY2UyZDE3ZTgyM2YxMTkzNGNkYTNiYzZjNWRiM2UzODE1NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQYGIgjvxmwiKMvCaGTLujWYOG2
D1u/HmcZZro4WmEab1dwul0u2TKeFPcx9D2WZddS2+H7d6ZdNUzdLQ7Lz/e1VRHN
Hs8VDyyOlp9F9y2/bw8vO8cvfqTFu8X1Vq9CcJJKkhRgJYMbQCfoL6bDxEnKfS0F
jS1qsK5w0D+eiyyJjfn3U2StX4+19R7KL0tDkYW38GgiLdKeVteV//IqCfyofk14
+0sxfkdS0jcZiygVlHNZTKpw8T9jz/MeNbBDaj/4ZiqGPst85u84nUE5oXucJVUF
4XvlYkhEyWtePU62uDycV23JY24b8znXrwiCMYYTQZ65tZ/Bl/pS2oDqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzbzi0X6CPxGTTNo7xsXbPjgVadMB8GA1UdIwQY
MBaAFIg8r/gHsylS1oxxqvAbkZhK0eoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEt
OWNlZDVlNWVmZjBmLzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEtOWNlZDVlNWVmZjBm
LzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3WGiryf
pji1CoYAdRex28h8jZBTU6tVVqMrQgQ5+EtY49+wCp8ghGLkoUmZfQd5CLoEDutI
1SckYe1EIcUB5TaClsTjldfbCMNKYbk1v9ciZmFeqjjlGG+h5KK/xaoWhKcEKsXZ
h0W7LwMlq6czmZ5CGx1n6M9uhguaoCaoy/+5InZk8QlXIMasvOHAImCV9fyDoxdY
6FYd6TYiv3YcxVJQIXv1gjHmbyju6uxWcS7rV20Zs3empXiNunET/YlwtYAZTyV0
tAM7ZE8+QpIiB/qPX6vkeTD0KjnCNkQdAAZGoRDoxj1KAzy5GvAWCeFWi/K3hEW1
AktXSblnbpeGsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:36 2026 by rpki-client