Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: D4Mp4tp1G1yW5/J7RHMENI4EepMuOcHkwZp+LRKmYbc=
Subject key identifier: 12:A7:86:09:13:80:9E:46:31:75:59:61:31:A6:BA:D3:A3:CC:BB:DF
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01A1920CC209DECB83E2C8F7D8402D188A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 1AED
Signing time: Sat 31 Oct 2026 13:01:11 +0000
Manifest this update: Sat 31 Oct 2026 13:01:11 +0000
Manifest next update: Sun 01 Nov 2026 13:01:11 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: A5Q4lGl0KawwryM2n2LRhiPF/X3Kq0M4qf5td+HZMBw=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:c2:09:de:cb:83:e2:c8:f7:d8:40:2d:18:8a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Oct 31 13:01:11 2026 GMT
Not After : Nov 1 13:01:11 2026 GMT
Subject: CN=12a7860913809e463175596131a6bad3a3ccbbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:16:5f:e9:bc:6b:86:e8:3e:d6:6e:26:10:
45:4b:48:38:10:b4:b7:6e:5c:ff:93:0d:db:f6:85:
31:b1:8d:f3:00:48:cc:82:2f:12:b0:b9:06:ee:3d:
80:78:a3:42:af:2b:84:6b:60:d0:55:ec:a4:5c:20:
22:67:57:5a:29:95:6c:14:80:93:47:90:5f:42:78:
e5:f9:48:96:92:e1:15:b1:ef:37:82:63:46:b5:b2:
e2:c7:25:54:39:7d:52:53:d3:78:9b:d0:02:87:62:
55:70:5a:78:e8:4f:e8:13:cc:d0:d0:26:ee:e1:35:
be:e2:27:88:02:23:e6:41:bc:bd:08:9e:7b:7f:e7:
8c:22:6a:7b:b8:55:b2:82:82:33:c3:04:ec:43:20:
38:2e:6a:82:f4:db:a3:24:d5:0d:e5:4e:ad:14:c5:
60:43:ee:bf:3c:f8:c5:8a:53:22:b7:3e:d9:70:b5:
31:a9:44:af:8f:fc:bf:fb:3e:72:dc:ca:ee:02:da:
72:b0:4f:f9:1d:fc:74:00:06:c1:ec:fa:74:1a:9f:
60:da:ee:13:7b:a9:74:b6:2f:05:f7:41:11:73:05:
9b:8c:ae:3f:6f:0a:ea:23:88:85:59:13:17:06:42:
d2:69:ce:95:13:93:14:dc:63:0b:52:33:30:21:12:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:86:09:13:80:9E:46:31:75:59:61:31:A6:BA:D3:A3:CC:BB:DF
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:24:b8:1a:da:52:e6:2a:e8:99:e6:5d:07:4d:73:18:ae:
f8:48:d5:c5:3e:62:a2:e7:78:9e:5d:2d:1c:2f:dc:8a:90:37:
73:76:ab:90:11:27:39:14:72:94:1c:97:93:a2:72:a2:1b:57:
96:07:be:56:0f:b4:37:94:83:b1:d2:27:98:10:31:94:ea:d7:
0f:a0:12:14:6f:02:84:0e:63:25:52:fe:53:39:20:4b:e6:cb:
2f:30:a8:49:20:98:e9:f1:40:b3:ab:8e:26:e4:dc:86:da:ae:
69:3a:bb:dc:05:06:29:4d:e7:8f:b2:ae:87:52:b0:85:91:8b:
87:17:d7:7b:5c:ce:01:b8:6b:dd:ca:9d:12:07:a4:00:63:47:
a1:56:38:9d:42:1e:0d:b3:08:3a:38:3b:ad:22:6d:b1:83:ef:
de:c0:6c:b5:67:10:ad:8a:38:ee:71:0e:c2:16:ad:ed:16:eb:
1a:8f:af:35:66:1d:ec:7c:36:f8:56:5e:a3:79:d4:b9:77:92:
05:68:e3:0f:5c:5e:4e:ad:25:f0:c3:5a:f9:01:61:fb:b5:fc:
53:ae:2a:ef:e4:24:02:af:e6:c8:e4:48:49:9b:05:d0:6b:35:
09:ae:41:7c:fa:56:c8:97:e6:96:a6:58:ae:f5:7a:d7:a7:d7:
7d:40:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:20:27 2026 by rpki-client