Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: bpzmga2PbgU0QlmoHkB4Bmb8+BVKeP7SLuQ4W3BGoRM=
Subject key identifier: 21:7A:C8:5B:3C:38:89:36:C7:B1:94:13:D5:7B:BE:75:69:81:F4:CB
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 01A0D45DCD434F7B386D92B609DB2A524163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 0857
Signing time: Thu 24 Sep 2026 17:01:52 +0000
Manifest this update: Thu 24 Sep 2026 17:01:52 +0000
Manifest next update: Fri 25 Sep 2026 17:01:52 +0000
Files and hashes: 1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: 4tKUOuMujywX63/kMIsTjiBSAeIOd6ZMF1j+ETg1Guw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:cd:43:4f:7b:38:6d:92:b6:09:db:2a:52:41:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Sep 24 17:01:52 2026 GMT
Not After : Sep 25 17:01:52 2026 GMT
Subject: CN=217ac85b3c388936c7b19413d57bbe756981f4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:e8:36:a0:84:ec:de:87:ea:56:3e:4c:e3:
f6:9c:3d:5c:37:32:c6:67:62:fe:cf:48:82:a4:d0:
65:3b:6f:77:5c:45:4c:a0:fe:d8:04:92:5c:6f:c4:
75:3b:26:3d:15:de:f2:8f:85:39:99:d0:94:31:9c:
b7:26:4d:c5:60:02:9b:76:78:fa:50:78:0b:50:de:
22:bd:4c:cd:8c:a7:fd:00:d6:cd:65:1c:18:27:e3:
0e:0c:f4:b3:44:91:c6:59:75:d9:1a:ac:5c:c3:b0:
1a:6d:9a:ff:85:8f:a5:63:b7:f1:be:26:2a:e5:c8:
fe:ed:4c:44:10:09:1c:f7:67:a4:05:c2:d6:96:f7:
8c:6a:54:53:ae:3e:1d:82:40:d9:31:93:53:48:3c:
ba:fe:66:cc:00:e5:71:2c:f4:d9:56:ed:23:0e:40:
cb:ef:de:c0:30:82:37:04:50:c0:c9:16:fe:e0:41:
e7:59:1f:6c:66:d2:c2:1e:0f:bf:34:f2:31:af:cf:
ba:8b:3d:3d:af:8e:81:7a:7b:f9:d7:3d:8e:bf:19:
7b:c0:b3:d1:96:68:d5:ad:de:97:86:b9:e1:64:90:
3c:9a:a4:80:ae:6c:96:3e:aa:8f:3b:bc:a2:7d:3f:
37:7d:9c:c7:65:3f:e5:03:f7:40:0d:07:c5:ef:a5:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:C8:5B:3C:38:89:36:C7:B1:94:13:D5:7B:BE:75:69:81:F4:CB
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:58:20:e7:be:b7:27:08:f0:7b:69:28:13:c0:17:4b:91:
52:17:83:11:2d:bd:9f:93:06:1c:88:91:48:ba:59:37:ac:fa:
c4:80:fc:9b:ea:4f:b9:5c:f1:4e:5c:0e:0d:e6:76:98:2b:9e:
e7:bf:ea:ef:a9:5a:10:d9:17:06:d6:1e:07:75:68:d3:03:65:
7b:94:57:e8:2f:f1:e8:3e:1b:4f:a3:b0:51:6d:06:f0:0b:b3:
bd:63:ac:ac:11:30:b7:d4:85:a8:d8:25:09:b1:89:db:6f:9d:
4b:ec:01:35:c1:55:66:de:72:c0:c4:f4:9d:12:4c:70:45:f4:
3a:a9:68:e7:ee:35:1a:d2:cf:6c:90:03:17:1d:fa:f6:85:04:
80:74:14:88:20:e5:db:d5:c6:fa:3e:82:98:45:5d:d5:3f:71:
d5:3a:70:c6:62:c6:13:eb:11:4b:9f:ae:e4:af:bc:44:74:93:
5f:cd:02:f0:c5:b5:6f:38:cc:a9:c6:25:c4:9f:67:b2:f3:2e:
70:f0:69:c2:74:b9:1f:37:92:ea:fd:92:6a:12:28:13:fa:af:
36:1d:3b:2e:c7:ba:87:1a:d6:67:21:7c:4f:9b:a6:67:4d:3b:
fd:69:8a:50:5d:8a:5f:0c:be:4e:7d:f3:46:d2:d3:6a:a7:18:
72:83:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:26:07 2026 by rpki-client