Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: o3dBwIYuEVrNK4K0xVoN1emCnxozUDLv4MarenspSMo=
Subject key identifier: B4:CC:39:28:EB:1A:1E:20:24:B5:35:67:78:22:EB:C1:E8:BB:E0:01
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019EBF2403829141F792009D4B8E1E0E206A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 0430
Signing time: Sat 13 Jun 2026 04:01:08 +0000
Manifest this update: Sat 13 Jun 2026 04:01:08 +0000
Manifest next update: Sun 14 Jun 2026 04:01:08 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: +5MhQuqU7bGqKOnFA6HNpW2TCjCelQXg9VW5vHHo+rE=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:03:82:91:41:f7:92:00:9d:4b:8e:1e:0e:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jun 13 04:01:08 2026 GMT
Not After : Jun 14 04:01:08 2026 GMT
Subject: CN=b4cc3928eb1a1e2024b535677822ebc1e8bbe001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:08:19:c5:c8:b9:60:a5:4a:a6:23:0c:8a:
2c:3f:a0:b6:8b:c6:b2:80:38:92:94:16:22:c0:2c:
ff:e1:35:cf:ca:76:18:87:ea:0b:47:f2:d9:67:80:
31:63:49:90:21:7e:77:33:79:06:9d:45:ab:88:94:
5d:28:38:8a:ce:27:08:3e:ff:2f:00:78:2d:a5:57:
85:ba:c0:c8:36:81:fa:84:2e:a2:1f:d0:f3:d8:10:
fa:50:14:2f:6f:b7:ae:41:35:4b:39:af:87:2c:2c:
ca:ea:9f:8a:c7:f5:68:92:74:04:81:50:4e:df:fb:
24:dc:f7:a4:60:d7:b3:ef:de:b7:49:45:2c:fd:d4:
b7:9a:ea:68:9c:83:12:92:17:78:f0:74:38:09:bc:
49:8c:01:49:19:db:6f:d3:8c:90:c0:dc:9e:0e:cc:
b3:6e:8f:78:6c:c0:e7:f8:c6:fc:fa:a2:33:ff:01:
93:1d:ce:b2:8d:76:76:57:35:20:1f:59:ea:9f:dd:
4c:bf:46:64:eb:57:3c:9d:23:e9:a4:25:5c:81:fd:
e5:1a:91:cd:10:0f:14:35:22:79:82:df:3a:65:17:
c1:25:6f:2d:ad:55:78:1f:ed:f9:3e:ca:df:53:e4:
1c:0e:32:2b:5b:cd:83:b6:a9:5b:3f:9c:2f:01:64:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:39:28:EB:1A:1E:20:24:B5:35:67:78:22:EB:C1:E8:BB:E0:01
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b4:3d:dd:a4:64:06:be:78:13:f5:75:1c:fe:15:97:50:53:
1b:20:fd:14:b9:66:7f:f1:2f:3e:3e:d0:3c:ec:26:b2:df:6d:
7b:9f:ed:ce:77:dd:19:50:5b:01:aa:f9:fb:07:dd:40:fb:72:
04:76:2b:52:2b:95:e2:5a:f8:a1:7c:51:4a:b9:47:11:98:36:
ee:da:a7:93:99:28:f3:08:4a:e3:e8:2b:c3:ad:20:2b:60:c8:
09:25:f2:d8:ff:f3:47:4f:e4:72:c0:c3:af:b5:a2:07:af:3c:
e9:7f:b3:b0:c0:7c:72:dc:2a:95:38:86:d8:96:e5:48:f8:70:
0f:1f:f5:16:ce:fd:a1:2d:9f:fe:4c:8e:f8:99:1e:30:04:2a:
64:ea:9f:b2:02:1d:dd:31:41:9f:cf:43:2d:86:2a:34:11:24:
7d:45:67:51:7f:4b:e2:f3:b5:99:63:02:4b:e7:42:94:fe:45:
02:f0:80:9e:a4:88:41:74:00:50:06:25:39:92:c8:87:79:3a:
d8:b6:b7:3d:ad:66:c0:ca:b7:6a:ef:03:3e:f5:ac:83:47:c5:
e3:53:d6:70:f0:60:c0:21:89:52:b7:39:ff:7b:d6:8b:5a:29:
0e:62:54:93:64:e7:21:a8:c8:f7:2d:ac:48:12:7e:41:8e:b8:
27:67:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:48 2026 by rpki-client