Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: e8AimWW/F5gWX2F6Crijpj5ZWm+KMMzd3XG38Ed7VS8=
Subject key identifier: E4:FC:41:63:6C:46:1E:D9:05:6E:61:68:72:17:56:CC:A2:23:33:D6
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01A0CC6C0336F9C7A5D0C2412F7F8318FD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 0540
Signing time: Wed 23 Sep 2026 04:00:25 +0000
Manifest this update: Wed 23 Sep 2026 04:00:25 +0000
Manifest next update: Thu 24 Sep 2026 04:00:25 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: ViDQkfwbiisDDqmZAYrauD3D6ObmVcij7y5Huuv9sLA=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:03:36:f9:c7:a5:d0:c2:41:2f:7f:83:18:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Sep 23 04:00:25 2026 GMT
Not After : Sep 24 04:00:25 2026 GMT
Subject: CN=e4fc41636c461ed9056e6168721756cca22333d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:bc:c1:87:d3:e4:2b:19:34:24:cb:e5:06:
66:12:e1:ea:b2:b9:2a:43:a3:3e:66:5c:93:85:77:
a5:0a:75:e3:21:19:5d:8b:39:ae:5e:c9:0b:a7:33:
f3:0e:6f:01:0d:1c:ff:ca:0d:40:77:3b:30:05:8d:
62:59:bc:9f:21:29:a4:71:b2:71:5f:78:99:6d:25:
df:5e:43:69:8c:41:8a:10:76:6f:e3:5d:06:61:7b:
b9:2c:65:04:69:be:14:d4:59:bc:b7:0f:88:18:c5:
32:bb:18:f9:fe:33:2b:8f:1f:12:dc:e8:d6:dd:30:
62:f4:f7:2c:38:e6:e0:7e:6d:4f:01:cb:59:bb:50:
2f:3e:b3:e2:7a:df:91:5d:00:de:d2:61:fa:d3:ef:
77:f4:b4:39:0e:40:2a:d8:bf:b3:8a:23:e9:7b:59:
57:0a:b3:03:45:18:5d:d2:5f:69:68:a0:3f:99:cd:
fb:e0:cc:40:b2:27:67:c7:18:91:50:6c:a3:43:51:
67:88:b8:9c:a5:e1:9c:18:1d:a4:c9:f4:f6:11:f3:
e6:9e:b7:b9:02:87:e6:b0:12:6c:60:73:ca:ca:ab:
f8:6e:11:39:05:43:87:2d:5e:dd:5a:f7:84:69:06:
65:d6:01:d3:69:27:75:ab:81:a0:e1:1f:f5:ba:7e:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:41:63:6C:46:1E:D9:05:6E:61:68:72:17:56:CC:A2:23:33:D6
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:36:c4:be:eb:9e:9a:81:23:e8:68:d1:c5:c1:16:3d:fe:
12:96:92:7f:8b:af:ef:e6:7d:e6:5c:2a:c6:52:f4:60:83:6a:
3f:e7:8d:5c:46:db:53:fb:2a:46:b3:86:ad:ac:79:80:ca:1a:
40:41:ab:48:36:7b:5c:18:49:ce:3a:49:78:ef:9c:f5:bd:38:
fc:ba:aa:07:eb:85:9c:26:ee:d6:ef:b0:9f:09:b6:34:b8:7b:
7e:ad:f7:96:1b:88:3f:e0:33:9c:89:78:c4:0c:2c:c0:41:fb:
50:96:33:09:c3:e9:df:d1:6e:fe:47:cd:1b:ad:23:82:16:38:
95:37:e4:fb:d5:39:5d:b3:73:d5:c6:01:01:f6:e5:ab:b6:90:
bd:21:b1:fb:59:61:94:75:2c:ab:aa:8b:e6:e9:a5:d1:fa:90:
8e:f3:2d:f3:01:e6:57:05:76:18:97:12:9e:d9:2d:ab:df:8d:
56:e4:52:cf:5f:67:5c:3d:02:f6:49:86:0f:85:9d:3f:1c:da:
89:bc:b3:b3:fb:09:f1:d3:88:04:d0:f6:c9:e7:ae:64:56:9b:
51:ef:41:64:3e:5c:61:ba:3d:37:95:e7:8f:5c:df:db:81:c1:
97:92:47:c8:5d:70:0d:ef:a7:aa:12:fc:9a:6b:96:6f:20:5e:
e4:92:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:57 2026 by rpki-client