Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: T5ievp8kA2yDxvyeWlqYNZY1c/dxZQg8dCMXpzDkzWQ=
Subject key identifier: E3:70:63:FB:D9:10:D1:A0:27:16:14:D0:0F:F9:FB:86:45:8D:72:FC
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019D9B87ACDCC48EFE0775AD8DEA233E25E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 0399
Signing time: Fri 17 Apr 2026 13:00:53 +0000
Manifest this update: Fri 17 Apr 2026 13:00:53 +0000
Manifest next update: Sat 18 Apr 2026 13:00:53 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: keh6o3LSZRjTB8/E7nPJTlYq1CFMkmbT7GwtTAP44t4=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ac:dc:c4:8e:fe:07:75:ad:8d:ea:23:3e:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Apr 17 13:00:53 2026 GMT
Not After : Apr 18 13:00:53 2026 GMT
Subject: CN=e37063fbd910d1a0271614d00ff9fb86458d72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:7d:6a:92:4a:b1:94:e5:e8:91:05:a1:d9:
f0:70:16:90:49:f9:ff:f6:4a:fd:98:22:db:9d:1d:
cb:95:31:31:d5:61:9b:8d:fa:f1:56:11:7b:07:06:
72:21:b6:6e:da:8f:2c:1b:63:22:84:b1:3c:d9:fb:
c2:21:2e:de:e9:cc:c4:85:9c:92:41:ae:c2:fd:22:
49:3f:93:9c:8b:26:e1:16:30:70:e6:8f:08:d2:f4:
24:b0:43:c5:45:82:e8:f5:67:a6:2f:86:e0:11:d4:
fb:c2:52:7f:f3:bd:59:c8:e8:24:eb:7c:08:68:aa:
9f:16:c2:b8:75:29:8c:de:e9:e7:23:00:a8:f1:cf:
1d:95:8d:71:26:86:35:4c:3e:42:86:af:e8:6a:fa:
30:73:33:cb:d8:57:ad:5a:58:96:e3:09:9a:f3:fc:
64:4b:34:90:ac:8e:5f:4f:a9:4d:0e:c5:4b:19:4f:
27:b1:4d:14:f1:fd:ec:98:0c:a8:f4:48:2e:a9:7f:
d1:27:30:02:0d:de:fb:8e:56:62:bc:07:a0:84:2c:
b3:1e:d6:ae:68:6b:8e:bb:aa:c2:a7:eb:6e:e8:69:
d2:1d:3b:20:db:15:08:36:64:7a:3c:92:51:1a:d7:
f7:7d:95:86:56:83:d9:ea:37:9d:4a:c9:2d:4d:57:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:63:FB:D9:10:D1:A0:27:16:14:D0:0F:F9:FB:86:45:8D:72:FC
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:66:f2:1e:c7:65:3a:c6:22:b7:ab:24:65:f6:6a:07:08:76:
f9:d8:49:d8:1c:c3:3b:b5:e7:f0:8a:33:d8:5e:92:6f:53:6e:
57:9a:d9:e0:8d:f2:a4:85:66:71:fa:8e:e8:64:c2:57:56:73:
36:fe:75:f5:52:40:69:8b:21:c7:60:3c:ca:50:d1:e4:5a:e7:
7d:c0:cc:20:aa:2c:a5:51:31:05:53:15:30:1d:39:fe:ea:6d:
88:6f:21:1c:26:5a:95:4c:59:38:cc:d4:43:64:c6:2e:9c:d1:
20:67:66:01:ce:5e:58:92:2c:eb:bd:7f:0b:24:35:79:36:ea:
38:53:e3:46:a5:5d:c5:00:67:86:47:a0:29:be:48:03:1e:bd:
04:1a:02:0b:22:60:cd:fb:3f:2b:73:91:0c:37:65:4b:49:78:
87:8c:73:36:b8:b0:e8:cf:33:85:de:17:11:20:7f:b4:2a:e8:
ec:6b:b2:7f:a2:06:20:2e:3c:85:03:b6:2b:bf:e0:b8:74:c7:
1c:98:02:7a:b0:06:8f:ea:be:85:bf:8a:76:5b:0f:41:32:70:
ec:b6:d3:79:c6:27:0e:1b:47:ae:b9:ad:cb:43:fd:2a:50:99:
db:6b:30:17:ce:ae:29:66:ce:92:fe:98:41:44:9b:ea:69:27:
e5:f0:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:16 2026 by rpki-client