Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: 3x5VtI1GA+XAr7uJ9j8U0qG8BGZmrkjLBhDxSCwuz00=
Subject key identifier: 78:AC:B4:74:52:F5:A2:BD:84:26:55:8D:3D:8E:68:37:E2:E4:FA:1B
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01A1DEA78343D4C0467E050E7F30A0D9BA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 05CE
Signing time: Sun 15 Nov 2026 10:01:22 +0000
Manifest this update: Sun 15 Nov 2026 10:01:22 +0000
Manifest next update: Mon 16 Nov 2026 10:01:22 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: 0TK76NSvaxQ9SVBcJMzxbkduuHHFf0ye3yboZWuPm6U=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:83:43:d4:c0:46:7e:05:0e:7f:30:a0:d9:ba:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Nov 15 10:01:22 2026 GMT
Not After : Nov 16 10:01:22 2026 GMT
Subject: CN=78acb47452f5a2bd8426558d3d8e6837e2e4fa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:b9:c9:a2:a8:c2:9b:f0:b0:f6:9a:12:c6:
9d:3d:52:68:05:9d:5c:74:0f:29:f4:dd:72:08:61:
7d:76:48:7a:a4:8c:00:6c:6d:45:04:16:0e:c4:e7:
e0:92:d8:ed:07:ac:fa:c4:3e:5b:2c:f1:35:97:69:
d7:b7:cf:36:fb:55:95:fb:36:35:46:fa:3b:30:68:
16:d5:a4:fa:14:35:ba:35:12:5f:3e:4f:5a:9f:50:
b4:b3:09:15:58:72:d7:cb:b4:94:f7:ce:4c:d8:cd:
db:97:f6:13:58:6f:18:26:82:0c:c1:f7:f8:0b:3c:
ad:4e:9d:c1:fc:92:f9:db:57:32:60:59:48:b9:fa:
90:1d:21:34:50:ee:31:25:eb:e0:8a:2b:ff:fd:9e:
bd:98:3e:49:eb:ed:05:a1:32:78:28:9b:44:9c:ba:
c1:47:df:b5:34:15:90:12:5b:82:69:bc:0e:4a:f7:
35:d1:e8:a6:1e:9e:b6:5f:8a:51:08:1d:e2:9c:80:
67:14:ea:4d:c5:c5:87:87:c2:99:77:c4:b2:1a:4b:
07:1d:21:3f:de:2a:bc:d3:29:cf:72:33:4a:e5:f4:
13:6d:43:fe:0c:25:1e:dc:22:03:01:41:4e:23:85:
77:d8:54:b5:e6:49:39:e0:a3:38:75:54:64:63:33:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:B4:74:52:F5:A2:BD:84:26:55:8D:3D:8E:68:37:E2:E4:FA:1B
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:fc:f9:47:be:2a:4a:79:e8:fc:49:78:8c:6e:3c:20:37:
d2:92:bf:2f:57:b8:9c:43:e2:22:cf:df:9a:1f:99:f5:97:a0:
61:13:13:4f:32:60:c9:e5:d6:f6:ed:44:78:1e:c1:44:f3:2c:
f8:40:3e:03:ea:fb:3e:53:ae:db:fc:6d:cf:38:15:0d:ef:c0:
52:cc:02:ee:ad:98:a8:fb:fb:94:4b:b1:9d:4f:ae:df:e7:c3:
a3:e1:21:43:ea:fa:2f:7a:4a:20:3e:d8:66:26:bd:f2:98:23:
80:a9:2e:a7:80:ce:8f:9a:6a:c4:a6:3b:72:0e:30:15:28:0c:
47:56:26:83:f8:0a:6a:8e:77:f7:c5:5c:52:9e:98:ff:a0:27:
da:e0:6f:4f:51:de:b1:63:4b:b7:ba:cf:38:06:ce:ee:df:ef:
92:2e:fa:c1:80:33:be:d6:2d:12:20:e4:2d:4d:a0:20:cc:57:
e1:5f:d5:26:b1:1a:dc:c0:6a:d4:83:86:4c:47:91:d0:22:38:
9a:cd:db:dd:a8:b6:53:4d:d0:6d:5a:00:4c:9c:b6:7a:56:ed:
ba:f5:47:8b:0e:68:e4:c9:97:95:db:21:d7:95:00:d4:e4:96:
44:21:18:c7:84:cc:c2:80:10:15:99:8d:5e:8e:b5:5f:2d:4e:
60:e2:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:50 2026 by rpki-client