Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: flPpVRIiwPXpRReSw+pYo9aA9S7iIK74sNNXSFAAy9w=
Subject key identifier: F1:34:D6:30:4C:27:6A:4B:FB:4C:3B:33:3D:0D:9E:37:14:49:4E:E2
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019FA304E1DAA54CB95744BF381634F0233E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 04A6
Signing time: Mon 27 Jul 2026 10:00:33 +0000
Manifest this update: Mon 27 Jul 2026 10:00:33 +0000
Manifest next update: Tue 28 Jul 2026 10:00:33 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: v3ZU571a5qFL1/+52LTcijkdKOeDIMRQbpjGhvA5Sq0=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:e1:da:a5:4c:b9:57:44:bf:38:16:34:f0:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jul 27 10:00:33 2026 GMT
Not After : Jul 28 10:00:33 2026 GMT
Subject: CN=f134d6304c276a4bfb4c3b333d0d9e3714494ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:cb:fa:61:eb:55:68:fd:93:e2:45:ca:46:
73:c1:ba:d7:1e:9e:f3:97:cd:fd:a1:4a:c9:6f:5c:
54:0b:2c:18:e7:90:ae:35:59:9d:81:6e:41:e8:6c:
0b:46:ed:fe:0b:73:11:ec:28:40:f9:34:f7:2c:73:
6c:75:22:eb:96:25:bc:71:2f:46:34:9c:b6:fa:9a:
9a:ce:95:11:7f:13:c0:01:9d:a9:b2:ec:f4:93:ac:
96:86:b1:b1:17:35:7b:45:65:ba:36:f4:16:26:eb:
a5:ec:4c:cb:24:7c:40:48:2d:a6:4a:16:3c:65:b5:
67:72:e1:d7:3a:4b:77:38:37:0c:c2:73:00:51:ec:
4e:f8:30:4f:64:d3:77:76:17:ad:7b:35:65:d9:3f:
c9:d2:65:4e:ad:40:32:8e:5e:96:dc:98:e2:f7:f0:
18:ab:da:05:c7:6b:a9:17:44:be:8b:bc:73:e9:13:
e8:bd:27:77:2e:86:45:9c:5e:33:b2:cd:04:4a:ee:
1a:9b:59:48:83:49:49:09:c0:a1:fd:8a:3a:89:c2:
cc:91:b0:5c:d1:81:91:b8:ae:93:e1:82:bb:be:8c:
e2:f6:7a:ca:3a:54:47:ee:54:a4:26:54:1d:7e:17:
3f:99:4e:58:af:33:3f:fe:91:89:47:e9:f4:48:2f:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:D6:30:4C:27:6A:4B:FB:4C:3B:33:3D:0D:9E:37:14:49:4E:E2
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:d5:97:5e:4d:6a:88:7b:52:8d:4a:66:9d:67:3f:45:f6:
42:5a:6e:b4:8a:7c:de:78:bb:21:70:f1:6f:23:72:b4:f3:9d:
07:6f:43:82:2d:1f:c4:d0:c9:19:56:cd:fb:29:27:18:fd:0a:
ca:0d:16:c6:35:7d:12:5e:01:da:0d:30:69:bc:80:88:d1:1a:
ae:f6:9c:a2:f0:82:ee:e5:7f:9a:8b:4b:6b:39:5f:87:2b:11:
ec:60:18:85:9f:0f:93:46:a9:cd:44:1b:ff:64:d8:7f:bf:7b:
77:7c:94:fe:56:5e:58:fd:89:4d:dd:cb:23:ca:ed:50:6d:7a:
6d:e6:b3:70:b6:d6:eb:c9:72:be:d3:55:35:cc:71:77:af:0b:
07:69:87:2a:ce:73:77:0c:79:ae:c4:6c:65:ef:31:56:77:91:
f4:f7:47:10:b3:4d:b6:da:80:0b:b6:36:b0:2b:19:61:b4:c9:
6c:9b:6c:78:7d:91:6a:01:56:09:5e:42:c2:19:80:1b:bd:8f:
db:31:27:16:dd:65:10:76:5d:b2:4a:de:74:95:fe:46:3a:c9:
2f:f4:b6:91:28:3f:2b:2e:2b:6f:9f:7e:f1:97:26:8d:dc:34:
7f:94:40:96:d8:30:24:3f:6e:d7:ba:01:f0:c3:b4:06:1e:27:
6d:0d:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:49 2026 by rpki-client