Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: kpyrw1OzSqAxAEvmXlj3+LihgHVqUcZHP1eXx5HO8zQ=
Subject key identifier: 16:41:FF:F3:08:CB:64:38:0E:DB:C5:E3:50:CF:66:B7:47:D9:76:BF
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019FAABE716288A97BF218A7E1DD862BCA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 04AA
Signing time: Tue 28 Jul 2026 22:00:35 +0000
Manifest this update: Tue 28 Jul 2026 22:00:35 +0000
Manifest next update: Wed 29 Jul 2026 22:00:35 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: RAkmUtDM7YfoDp8suFPhaIBsrFIHeBfGV4hh0Lj2JVg=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:71:62:88:a9:7b:f2:18:a7:e1:dd:86:2b:ca:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jul 28 22:00:35 2026 GMT
Not After : Jul 29 22:00:35 2026 GMT
Subject: CN=1641fff308cb64380edbc5e350cf66b747d976bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:16:aa:d3:ed:87:b2:09:ae:53:13:50:2f:
9e:80:29:b0:fa:5b:4d:4d:29:c4:58:4b:37:4f:b3:
5d:c5:ab:b5:40:24:bf:ee:ed:2b:79:95:30:d4:57:
b4:77:75:8f:c9:1e:87:98:21:ef:65:85:8a:86:34:
bc:89:65:79:ef:cc:86:b6:d9:f0:e4:32:39:4e:06:
7f:c6:2d:02:1c:9e:0e:a4:bb:cf:fd:ac:fe:c2:fa:
eb:4e:dc:9d:70:69:b0:57:93:b1:16:6b:80:03:f7:
76:d9:40:ac:a5:ae:76:f1:09:ee:25:44:ae:67:2e:
c7:cf:cf:7a:7f:91:4a:3a:eb:de:3b:38:c4:51:82:
8f:1d:ad:9a:bf:6d:13:3a:a2:c0:4f:53:b4:b7:35:
ee:4c:ae:d9:34:9e:80:88:5a:1d:81:cc:3e:d1:b2:
43:45:9f:05:d2:20:6d:4f:5c:76:62:ec:dd:05:af:
d4:3e:ea:c5:6e:ac:43:e3:48:0f:c1:ea:87:df:32:
3f:d6:6b:93:04:8f:56:1a:d3:40:3a:48:75:74:9d:
97:2c:6e:0e:52:ed:85:3f:61:4d:78:7c:00:27:67:
3a:00:b3:a4:ef:43:1a:d9:e0:2b:19:40:53:2d:c1:
c5:e0:b6:80:31:ef:a8:9d:55:3d:ef:62:60:63:d6:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:FF:F3:08:CB:64:38:0E:DB:C5:E3:50:CF:66:B7:47:D9:76:BF
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c0:04:fa:71:fe:09:4b:ef:0f:e8:72:12:f1:23:c7:1c:67:
65:74:9b:75:df:bf:b4:13:e6:4d:3b:db:17:ac:a1:ce:04:1d:
bd:3c:09:47:d0:e6:7e:92:b1:1d:cc:dc:b8:f5:0b:b4:04:fe:
9b:e7:36:3d:cf:e4:20:bb:b9:b1:8d:86:8c:bc:f8:ca:c9:e8:
3f:38:e6:b4:7f:eb:c3:d1:5c:b8:20:fe:74:96:62:97:0a:d4:
01:97:e7:28:af:3e:95:9b:09:51:3c:3f:6d:3f:ef:9d:e2:c7:
ab:c0:0e:d7:c3:9d:8d:c0:d0:fc:41:a0:da:e2:48:17:c3:e8:
8f:f2:03:88:1d:74:0a:9e:55:d6:4c:19:15:e1:d4:ab:63:a8:
32:33:78:a2:a2:eb:9c:0e:e7:f0:9f:c2:aa:6c:5a:bd:f5:0f:
73:84:c6:69:d0:37:4e:57:cb:dd:7c:6f:c5:43:7c:6e:c6:9b:
fe:8e:46:d6:39:5a:7c:b0:d7:2d:97:23:b8:e4:de:d9:f2:3f:
c3:3c:72:ee:bc:7b:7c:6f:1c:c3:7c:53:f6:99:68:a8:0e:27:
3f:9d:62:31:b7:8a:8e:db:55:26:1d:af:13:b8:d7:5f:22:09:
69:cc:53:53:d8:bf:2f:63:6c:c8:63:6d:97:e9:10:c7:86:08:
1e:cc:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:51:59 2026 by rpki-client