Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: PsYMSuIOzy3pUK8eGd6KXxeLyQ/5yv5OUkWW7xjslSw=
Subject key identifier: FC:FA:9E:77:BF:D6:89:0B:73:57:4D:86:9E:C5:AD:FB:FC:F7:1D:6B
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01A03A4BE6CD2CF8675F368E7D4149250BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 1A3B
Signing time: Tue 25 Aug 2026 19:00:47 +0000
Manifest this update: Tue 25 Aug 2026 19:00:47 +0000
Manifest next update: Wed 26 Aug 2026 19:00:47 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: cUJKkTw09DDnf5sovDy5Dt6GUPL+zDW6qf5l8KeQNS8=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4b:e6:cd:2c:f8:67:5f:36:8e:7d:41:49:25:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Aug 25 19:00:47 2026 GMT
Not After : Aug 26 19:00:47 2026 GMT
Subject: CN=fcfa9e77bfd6890b73574d869ec5adfbfcf71d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:47:1e:d3:f3:77:c5:a2:31:45:36:c1:17:
7b:50:e0:71:60:42:9f:a8:e9:6d:2e:af:81:7f:39:
16:5c:bc:5a:05:95:8e:3d:93:bf:0a:f8:61:8c:54:
ef:93:07:34:f5:9c:4c:5f:4d:ba:b3:90:51:a3:7c:
47:d6:bc:ae:34:e2:dc:a0:e9:54:39:6e:d3:2d:2a:
11:e6:8d:5a:2c:0b:c5:64:db:81:a9:a4:30:dc:dc:
c6:91:86:a9:a3:df:2d:7f:5d:66:9b:63:60:d5:bd:
f5:b1:20:1b:cc:09:b0:16:89:2b:d5:8c:26:58:08:
10:65:b4:0f:af:51:e2:a7:67:4d:5d:1f:e9:a2:b3:
a3:44:60:97:28:e4:57:fc:9d:8d:9d:d0:de:5f:37:
be:70:97:37:56:7c:ce:75:34:15:77:e3:3b:06:54:
e0:8a:a1:21:ee:e9:63:ee:fe:40:b8:67:61:23:f3:
00:69:12:f8:6a:d4:67:7b:79:ea:dd:50:33:37:42:
22:38:86:c9:e5:81:1d:2e:8b:1b:db:d6:fe:ec:ce:
a6:b9:fb:87:8c:6c:b1:fe:2d:d8:b2:45:48:fe:71:
5f:73:37:5f:ac:49:05:28:8b:5a:9d:34:c7:3e:5a:
72:8d:58:0c:e1:9d:7c:e3:34:51:62:d8:76:3b:71:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:9E:77:BF:D6:89:0B:73:57:4D:86:9E:C5:AD:FB:FC:F7:1D:6B
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bd:69:b4:bf:1b:0f:47:cc:62:31:a9:0e:a4:4c:28:4b:45:
6d:59:6a:7f:68:4a:21:46:00:4e:04:ba:15:64:3c:f4:f8:cb:
c2:c8:1a:23:b3:ae:0f:96:6b:06:32:fe:f1:34:f2:14:9f:57:
50:28:04:0a:13:e0:2a:f7:cb:71:26:ba:33:55:c3:5f:71:f4:
3e:c2:2d:d3:3d:91:24:a6:02:80:7e:46:bb:0a:6d:07:e6:27:
4e:ce:63:a6:b0:e1:01:09:55:51:65:44:e2:6e:8d:ab:c1:1a:
0a:89:fa:e5:28:c9:b2:98:48:c3:41:5e:c1:1c:b2:b7:78:eb:
aa:21:ee:e8:50:ff:80:a5:ee:66:b4:db:4b:a2:24:67:74:e5:
b8:e1:89:90:4a:8f:ee:bf:55:d7:36:83:3c:a1:74:46:70:3d:
5f:5b:e2:32:c4:3d:d0:2f:fa:48:12:b8:06:ef:d6:53:c8:7c:
be:08:8a:65:f7:b9:08:f6:9c:9a:cf:78:c5:ba:a8:1f:e7:b8:
17:b9:7f:2f:ae:91:4d:b3:2e:8f:93:57:ba:07:99:1e:62:ec:
35:5f:5f:a1:c9:a3:4a:b2:40:cf:cc:69:d7:98:de:0a:b0:9e:
ec:e0:aa:f8:fc:51:2b:2a:9f:a9:85:f5:2c:99:06:80:7d:41:
36:0c:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:11:34 2026 by rpki-client