Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: pMQiYv8t+4YdAbpd49LEotMJ3dEeax2LdjC6T+G88xo=
Subject key identifier: 68:BC:C7:3E:23:B9:94:FC:6C:CB:32:A1:64:30:AF:A1:02:4D:D1:00
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01A18F78F8EF0A9DA6A039C0FCE5921085E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 05A5
Signing time: Sat 31 Oct 2026 01:00:32 +0000
Manifest this update: Sat 31 Oct 2026 01:00:32 +0000
Manifest next update: Sun 01 Nov 2026 01:00:32 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: mMJgYamI6u3u+BqM3+8hhovJjBxdEAqr/kZkkQBt+4g=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:78:f8:ef:0a:9d:a6:a0:39:c0:fc:e5:92:10:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Oct 31 01:00:32 2026 GMT
Not After : Nov 1 01:00:32 2026 GMT
Subject: CN=68bcc73e23b994fc6ccb32a16430afa1024dd100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:54:8e:07:28:6a:04:cf:ae:97:1f:a3:df:
df:6a:dc:d4:42:81:56:92:8a:57:da:01:68:2a:af:
47:20:d5:2b:2e:0b:44:bb:de:ec:2e:23:33:db:86:
f3:d8:ce:3d:26:bb:1d:62:0c:2f:2e:a2:21:a9:4f:
88:5b:09:dd:fc:7c:68:ba:9c:ee:4e:28:4f:04:c6:
58:2f:d1:4f:11:ec:48:d1:d1:48:ce:16:0f:0c:dc:
94:dd:f6:72:a2:81:f1:42:d8:62:3f:e2:d0:e6:00:
7f:2a:dc:45:51:13:62:40:20:b3:d3:1b:f3:dc:15:
a8:84:35:73:70:d6:a1:a2:57:22:91:56:62:5e:d8:
ef:92:2d:10:3e:73:38:81:32:ba:3d:28:27:8e:3c:
9c:53:0e:e2:e8:c0:21:39:d6:49:da:8c:b6:02:f9:
16:02:ab:de:c4:da:63:0a:fc:43:da:ae:33:e7:4d:
da:1e:ab:f8:27:b3:b2:68:54:35:ef:6f:ef:d6:8c:
cf:a5:40:e7:43:36:36:a5:ea:34:fa:91:e4:8a:0c:
5d:73:c3:a4:d3:2b:0e:11:ec:22:79:23:3a:02:ab:
eb:cb:66:44:60:18:84:95:43:05:06:c9:1b:6e:ce:
1f:12:b8:5e:c4:c7:b3:35:fa:71:a4:b6:54:f0:94:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:C7:3E:23:B9:94:FC:6C:CB:32:A1:64:30:AF:A1:02:4D:D1:00
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:db:11:4b:f5:95:b7:cb:db:de:6c:56:33:2c:b6:75:e2:
2a:6a:cf:c2:82:e8:a4:8d:1e:a3:d1:b7:00:bb:f2:0b:a9:53:
6c:1f:67:f0:cb:1a:f9:ad:a1:a1:27:e8:35:a0:09:c9:71:b0:
00:bf:2d:e4:e7:db:47:3a:31:f7:d0:ae:fb:e9:25:ac:47:11:
a7:0d:8d:ff:52:4e:6a:d4:2c:c8:fa:cc:2f:55:4b:b5:e0:b5:
51:1b:47:3f:50:45:d7:58:18:e3:9a:fc:cd:8f:2b:f5:b1:18:
59:9d:0b:26:4e:6f:09:ae:44:1d:56:08:aa:c6:ca:90:3e:c4:
b8:dc:0b:a0:87:8f:d9:0d:3b:ac:01:17:c6:76:8b:ca:c8:bc:
c8:27:55:47:dd:d7:94:33:fe:77:fe:8f:14:87:44:e5:05:ef:
e0:99:50:0c:4e:5b:2e:4b:d7:ce:f2:6a:2a:ff:36:47:3c:11:
81:0b:71:b5:35:84:20:bf:72:f2:40:17:bd:7f:0a:b7:06:98:
d7:ae:62:f4:86:8f:8f:e0:ee:c5:e3:64:6f:5f:40:cd:0d:82:
aa:cb:7f:78:31:f5:ae:78:f9:46:c0:fa:82:1d:f1:fb:86:1d:
25:4d:59:74:96:70:33:ba:5e:03:f2:f2:72:97:de:98:04:0b:
10:1f:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:34 2026 by rpki-client