Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: Axg2P/HupdHCaeUwmgzSsZWOotdkyOXSSeZUZaPVBp0=
Subject key identifier: 7F:E0:FF:09:02:4D:1A:FA:81:C7:1A:0B:5B:9D:26:6E:AC:3A:CD:16
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01A1901E6385B10B0F118B223DF59ABB5EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 1AEC
Signing time: Sat 31 Oct 2026 04:01:12 +0000
Manifest this update: Sat 31 Oct 2026 04:01:12 +0000
Manifest next update: Sun 01 Nov 2026 04:01:12 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: kZZZ7hIWfj/oR8TgeoJUpfAhauM+ePdLTEcWF1evcA0=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1e:63:85:b1:0b:0f:11:8b:22:3d:f5:9a:bb:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Oct 31 04:01:12 2026 GMT
Not After : Nov 1 04:01:12 2026 GMT
Subject: CN=7fe0ff09024d1afa81c71a0b5b9d266eac3acd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:d5:e0:b9:41:08:8f:b9:db:ea:ce:02:63:
19:c7:97:86:59:af:cf:b2:6b:ba:1c:7b:24:a8:b0:
08:ca:9a:71:18:be:ec:51:e3:ce:fa:c9:fc:b5:a8:
89:af:09:ba:f4:eb:4d:88:97:5f:5b:2c:2f:38:ac:
ad:6d:25:99:63:8e:85:64:f3:31:67:06:ed:1c:ae:
ce:bf:e2:ba:f2:7f:d0:2a:1a:fe:d9:07:7a:a5:b4:
48:5f:8f:34:a6:fa:9b:3e:35:96:d9:38:d2:8d:c5:
83:24:92:ff:45:a1:18:6d:33:fd:94:de:70:90:c2:
99:e3:d9:ae:28:23:b2:dd:20:87:01:52:7c:89:9b:
0b:0f:34:b2:22:98:1e:44:59:6e:e7:6b:08:96:f3:
cb:e6:2f:35:8a:1c:e4:68:75:7c:1d:06:ab:2b:2f:
73:55:d9:55:fa:c7:fa:95:36:af:fd:e1:54:60:eb:
fd:86:a6:6d:2a:0e:50:56:7a:60:89:94:75:0d:74:
8b:14:06:6b:37:ba:0c:97:1c:89:3b:c0:20:28:4c:
ae:f0:98:20:09:b6:58:47:0e:e7:b9:95:c2:ee:e0:
69:19:23:f2:90:a4:58:a1:8f:04:e5:c4:79:46:08:
3d:2d:96:9a:f1:5a:33:51:1a:ce:9b:ff:a0:85:97:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:FF:09:02:4D:1A:FA:81:C7:1A:0B:5B:9D:26:6E:AC:3A:CD:16
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b3:2a:a6:76:ce:15:2b:72:c3:3a:ea:82:6c:0c:ec:ef:b1:
9a:aa:fd:4f:c0:2b:02:aa:41:0f:67:d1:f1:22:b8:70:a9:f5:
7f:4c:6e:f1:d2:48:df:af:a6:4a:68:4b:f4:f2:fb:82:cb:87:
31:06:cd:f4:c2:e4:fd:04:c0:6f:ed:72:2e:38:28:f4:f6:9d:
1f:48:2e:29:f9:19:c5:20:a2:eb:75:27:a3:4b:cf:08:b9:ec:
20:e9:3d:19:74:bb:6f:11:2f:e7:ed:a3:cd:b7:a7:8c:c3:f5:
05:f4:6b:3e:cc:03:de:11:6a:97:4f:2a:ac:d8:36:51:8d:f0:
68:e0:3a:6b:82:f9:ad:e4:95:b3:04:da:0a:50:f7:38:08:f3:
4e:e7:f7:61:c4:9f:ad:b4:18:8e:9d:9d:58:31:48:a8:fb:07:
e4:76:64:11:97:01:74:50:d7:83:4c:76:8f:f4:22:3b:ae:cb:
d2:21:0a:94:20:c1:d7:74:41:b7:d5:39:1f:02:c4:44:c3:06:
ac:8c:f5:68:52:4e:3e:13:40:61:6f:17:00:a6:42:96:bd:d2:
45:8f:50:67:38:6d:67:ee:87:ea:b2:56:87:71:bc:ef:a6:13:
8e:31:1b:1c:98:5d:96:02:7c:ab:3e:e4:c6:f8:f6:a4:52:d2:
d4:26:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:30:47 2026 by rpki-client