Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: /99hqwxfZ3yiXCmVsSE5khJ8bZE/3Op8bCOJynRtId8=
Subject key identifier: 69:E9:2B:88:58:7A:2D:1B:6F:38:62:6D:E4:58:C6:38:5A:0D:3C:C5
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019EB958C9B35E311A7C469A86D7C841A06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 042D
Signing time: Fri 12 Jun 2026 01:01:04 +0000
Manifest this update: Fri 12 Jun 2026 01:01:04 +0000
Manifest next update: Sat 13 Jun 2026 01:01:04 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: GHvyy4mz7KXRegp3xNs9D/YA5Hs63vfuTgnHS9IqUo0=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:c9:b3:5e:31:1a:7c:46:9a:86:d7:c8:41:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jun 12 01:01:04 2026 GMT
Not After : Jun 13 01:01:04 2026 GMT
Subject: CN=69e92b88587a2d1b6f38626de458c6385a0d3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:d8:8c:18:6e:52:78:0f:86:27:0b:c3:4e:
8e:bf:70:b5:f0:fe:61:9b:13:4e:a2:bc:a3:89:2e:
7f:fc:ec:8c:99:0f:86:bd:26:bf:ca:d1:ed:33:4d:
06:a9:d9:27:fd:42:da:0f:e9:e5:2f:8c:3b:9c:d5:
66:79:2d:4b:5e:8d:52:3f:c0:ef:26:20:03:cb:60:
3d:5d:ed:b1:bf:70:2a:eb:67:32:08:45:3c:db:d6:
76:93:5e:5a:5c:5e:c1:97:ff:5d:a3:1d:73:3c:ac:
6a:2a:62:db:c4:22:59:2a:2b:1e:a8:33:c4:70:87:
df:ab:d7:34:75:23:c6:5a:5e:e7:44:24:79:b5:00:
4c:cd:6a:d3:a3:cb:77:a5:45:1b:75:ad:8a:55:21:
26:d6:e9:a3:b5:c1:d2:34:1e:28:c8:68:18:fb:57:
7c:8c:e3:af:8c:96:28:44:3a:29:da:8c:85:76:f2:
c7:6b:47:17:7c:30:17:a1:96:bf:f7:dd:80:d6:63:
fc:22:33:f1:82:1f:a9:7c:e2:5a:78:5a:86:c0:c3:
cf:7d:98:07:30:63:e8:18:51:90:18:a8:47:35:09:
ad:31:b9:43:d0:27:1b:09:6d:d4:ec:0c:27:c6:f9:
c7:27:47:2a:70:66:4c:4c:4b:a1:94:29:3a:37:d3:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:2B:88:58:7A:2D:1B:6F:38:62:6D:E4:58:C6:38:5A:0D:3C:C5
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:06:10:f3:7a:db:02:6f:0e:ec:e2:5a:5f:78:78:b2:29:f8:
2c:d0:c8:29:d2:94:1b:3e:0a:4e:63:f5:96:ab:53:c4:64:0c:
fd:c7:55:1b:fe:36:36:1b:0f:e3:45:49:b5:58:f6:e9:b7:8f:
67:9a:b1:49:b5:98:ea:40:aa:74:dc:91:1e:50:b6:9f:bc:fb:
3f:4c:d6:bf:dc:d9:de:70:a9:cf:dd:21:12:d6:1d:b6:6b:d8:
9a:47:a7:73:10:7e:86:26:3b:cc:08:e1:d1:74:e2:4e:f9:55:
57:84:87:9e:ee:c0:6c:99:41:d4:a5:a8:2b:88:fe:ac:eb:38:
b3:9f:53:80:49:66:7b:ea:db:12:d6:f0:a6:c2:4a:8a:50:9d:
85:f1:23:99:46:b9:3a:41:af:b6:87:87:8a:38:31:8e:af:00:
c5:3d:4a:8e:77:91:32:1f:ec:a4:b2:07:03:32:a3:4c:63:5d:
70:b6:3a:75:4b:96:a9:8d:4c:6d:ab:d2:c1:b6:b0:f9:07:46:
3d:e0:70:2b:3f:27:49:7c:98:e7:a2:55:b5:c5:ae:6e:ea:5f:
b3:c3:f0:53:e8:74:47:4b:08:c6:61:ce:b6:44:66:4b:2c:18:
ec:0b:52:95:1e:ef:ff:b4:52:bc:1a:8b:ef:91:8d:db:f2:38:
a3:52:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:34 2026 by rpki-client