Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: jo07B0V35Eu6CLhu+4108F+bhHHyYrtmyzo7iD/928Q=
Subject key identifier: 33:D3:C7:A1:B9:79:3F:75:37:D7:BB:7C:CA:F0:46:C3:2C:81:15:B8
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019CE411339D0F41E36C3E11E3D62AB5E7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 033A
Signing time: Thu 12 Mar 2026 22:00:58 +0000
Manifest this update: Thu 12 Mar 2026 22:00:58 +0000
Manifest next update: Fri 13 Mar 2026 22:00:58 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: JyvQ0r/aj/JHCaggL5NUuxhCQT5o/Q3tuYIGUkuqdAY=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:33:9d:0f:41:e3:6c:3e:11:e3:d6:2a:b5:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Mar 12 22:00:58 2026 GMT
Not After : Mar 13 22:00:58 2026 GMT
Subject: CN=33d3c7a1b9793f7537d7bb7ccaf046c32c8115b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:60:65:e5:8c:7f:97:12:e9:ac:e7:bb:d7:
36:77:4b:29:de:69:da:46:64:b7:11:a4:0a:40:36:
ea:5b:a5:29:4e:7c:c3:bf:a4:6b:97:cb:7b:ab:d1:
0a:c7:29:a7:de:2b:58:51:fe:b3:b1:85:52:5b:c7:
ef:28:d7:3b:cc:6b:7d:8f:e7:b5:42:48:aa:35:cd:
8c:66:93:19:07:88:20:69:9d:54:c5:5b:82:6a:52:
50:be:e5:df:39:6b:80:21:c2:b1:08:2d:fe:8e:7a:
63:7d:f6:d2:ea:0a:70:40:45:80:37:4d:13:60:95:
c6:81:ab:66:5e:61:00:2c:83:d6:0f:89:7b:a2:27:
0b:65:45:ee:35:5c:26:0e:d9:71:73:37:a1:7e:07:
1f:a0:3f:68:82:4d:7b:ae:3c:0c:2f:64:ea:62:d9:
55:00:e8:ac:f0:c4:33:9d:24:34:3a:9e:47:f6:19:
3e:45:9a:a0:78:80:e3:b2:6b:fd:6a:66:07:b3:99:
51:30:66:9e:e9:7e:e5:84:b0:26:16:7c:fc:50:30:
29:84:9c:99:6b:8f:4c:a3:8f:69:4d:77:82:bc:b4:
e0:c5:93:23:77:d0:2f:6d:f3:18:b7:98:3f:4c:d6:
ec:51:8d:ab:f2:37:c1:65:d6:60:5c:dd:2e:07:33:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:C7:A1:B9:79:3F:75:37:D7:BB:7C:CA:F0:46:C3:2C:81:15:B8
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:92:cd:0b:67:c6:88:ff:28:ea:0f:42:32:61:cb:42:54:f5:
35:ac:c7:11:e1:52:05:0b:ec:15:70:0a:b6:67:a1:77:5b:49:
42:b3:35:76:ab:c7:04:56:cb:5a:65:0f:44:ef:e7:80:b8:51:
5c:10:f6:df:da:f9:b6:46:a1:89:1f:0a:32:f0:fa:eb:ac:73:
bf:a8:14:93:8b:57:41:d3:79:17:45:e0:4d:2c:7f:45:39:ab:
aa:03:ac:ea:cd:a2:0f:07:8c:a7:22:f1:be:45:b7:f2:41:6d:
3f:46:7c:a8:09:74:13:cb:72:16:a5:2d:3a:60:f6:74:9c:64:
c8:dc:7e:ce:fa:d3:70:90:6e:90:1a:f0:51:6e:d7:42:af:9d:
73:e7:33:7f:05:e5:0c:5e:f6:8f:f4:17:d4:c6:34:01:75:53:
41:e9:70:cb:f3:8e:d7:77:f8:68:d5:f7:34:bb:62:28:2d:b8:
e4:41:bd:a5:68:71:5e:fb:41:81:a5:a5:a1:f8:94:ed:c5:32:
b3:5c:eb:bc:bf:ad:7c:4f:e2:7d:9e:e7:e7:df:02:c9:30:01:
b8:e3:5d:22:15:91:81:e2:ff:f4:9e:83:8c:ef:ab:af:87:99:
6d:15:1d:1a:34:47:00:57:79:8a:e2:76:d5:b0:47:b9:a0:80:
60:ba:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:12 2026 by rpki-client