Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: WokWk73k4HJ7x4PJ83NBVUt0ROwkwqh8tP7Ph3nUgNo=
Subject key identifier: A9:EA:CC:13:5F:A6:C4:D2:49:4C:B0:F1:16:67:6E:2C:04:CE:3F:98
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01A193564A78F987964A47C7EC14189F3539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 05A7
Signing time: Sat 31 Oct 2026 19:01:08 +0000
Manifest this update: Sat 31 Oct 2026 19:01:08 +0000
Manifest next update: Sun 01 Nov 2026 19:01:08 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: V6NKsRjJK1zWjDvnm+hEc+poUMThT888ENyAeGNvDs4=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:56:4a:78:f9:87:96:4a:47:c7:ec:14:18:9f:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Oct 31 19:01:08 2026 GMT
Not After : Nov 1 19:01:08 2026 GMT
Subject: CN=a9eacc135fa6c4d2494cb0f116676e2c04ce3f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:20:51:b4:fe:f5:97:09:40:19:c2:2f:9f:
3b:fc:ac:05:f6:75:78:6a:06:f2:2e:f1:c1:62:d3:
85:8f:5f:33:ef:d5:66:d5:4d:7a:e6:e4:8a:6c:f2:
41:e3:e2:06:69:90:3a:38:27:bf:27:a6:16:7a:a4:
b3:d0:3c:ea:27:a7:56:a6:cd:b4:11:46:2d:d1:00:
76:17:f1:2d:fb:da:80:00:4a:08:ba:4b:28:0d:23:
6d:bb:e6:1f:90:df:ce:b6:20:81:08:01:94:a3:09:
2e:82:1e:74:6f:70:74:d7:a6:06:83:24:77:3f:09:
1f:43:53:a0:f6:80:b1:9d:47:e6:89:90:c8:e0:6f:
41:86:f1:8a:94:60:37:5b:d9:1e:42:2d:1e:38:1c:
69:f0:1b:db:98:8b:7d:de:37:e4:e7:7c:80:09:92:
70:3a:87:a2:70:f2:49:f1:4d:d9:a5:32:aa:d2:d1:
78:26:cb:4f:47:bf:8c:ad:f2:8f:65:7b:29:9d:e8:
22:5a:22:92:f8:15:c6:4f:48:f7:19:83:72:26:2a:
b4:31:c8:dc:5e:4a:aa:3c:83:38:5d:8b:10:96:a9:
62:74:6a:69:8b:e4:2d:4a:8f:66:ef:52:b3:70:14:
c8:1f:80:0e:5f:e2:16:53:50:1e:28:b3:ae:aa:3d:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:CC:13:5F:A6:C4:D2:49:4C:B0:F1:16:67:6E:2C:04:CE:3F:98
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:e8:bf:bc:c1:90:23:b5:54:b0:75:5c:c4:16:2a:a4:d9:
95:e6:82:9b:45:9b:a5:bb:75:45:d7:f0:1f:70:b6:4f:90:81:
f6:55:b5:7e:97:f3:6b:51:1f:70:b1:27:ba:1b:8d:89:7d:34:
33:1f:bb:5b:94:55:d8:5e:4b:59:c4:09:bb:bb:8d:96:32:bd:
53:2d:c0:8a:1c:d8:a1:02:7c:50:e9:59:6e:8f:0a:6d:4d:52:
b9:38:a6:55:33:c8:e0:32:cf:20:b8:b4:ee:c5:7d:02:a9:87:
89:bb:5d:e6:f5:ce:c3:86:0a:12:61:6a:eb:b0:e5:5a:72:d1:
d9:96:e2:0d:17:48:9d:64:6d:1f:b3:d7:81:1e:21:e6:e4:c3:
60:fe:be:1c:2c:b5:27:8f:fd:7c:f9:5a:26:ff:15:3f:f3:4b:
54:8d:b4:72:21:4e:c1:99:1c:c0:93:34:b8:8d:47:0c:a3:96:
42:c2:f9:0d:9d:25:7a:cf:11:39:ad:26:59:d0:8b:6b:70:f1:
74:3f:2c:27:e1:61:42:c0:71:e8:36:f8:66:00:97:1c:0a:2c:
62:5c:31:3f:05:d5:63:be:a4:b0:fb:f5:94:6f:f4:3d:40:7b:
52:e9:7d:a6:cd:15:96:d2:5b:e1:2d:9c:86:94:73:df:a3:7e:
24:b7:5a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTVkp4+YeWSkfH7BQYnzU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZGQwNWViN2JkOTQ1YzY1ZGYxODczNTUyZGNjOTBjYjJl
MTc3MjMwHhcNMjYxMDMxMTkwMTA4WhcNMjYxMTAxMTkwMTA4WjAzMTEwLwYDVQQD
EyhhOWVhY2MxMzVmYTZjNGQyNDk0Y2IwZjExNjY3NmUyYzA0Y2UzZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNsgUbT+9ZcJQBnCL587/KwF9nV4
agbyLvHBYtOFj18z79Vm1U165uSKbPJB4+IGaZA6OCe/J6YWeqSz0DzqJ6dWps20
EUYt0QB2F/Et+9qAAEoIuksoDSNtu+YfkN/OtiCBCAGUowkugh50b3B016YGgyR3
PwkfQ1Og9oCxnUfmiZDI4G9BhvGKlGA3W9keQi0eOBxp8BvbmIt93jfk53yACZJw
OoeicPJJ8U3ZpTKq0tF4JstPR7+MrfKPZXspnegiWiKS+BXGT0j3GYNyJiq0Mcjc
XkqqPIM4XYsQlqlidGppi+QtSo9m71KzcBTIH4AOX+IWU1AeKLOuqj2pFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnqzBNfpsTSSUyw8RZnbiwEzj+YMB8GA1UdIwQY
MBaAFCPdBet72UXGXfGHNVLcyQyy4XcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUt
YzRhM2EwYTVhOWIxLzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUtYzRhM2EwYTVhOWIx
LzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe7ov7zB
kCO1VLB1XMQWKqTZleaCm0Wbpbt1RdfwH3C2T5CB9lW1fpfza1EfcLEnuhuNiX00
Mx+7W5RV2F5LWcQJu7uNljK9Uy3AihzYoQJ8UOlZbo8KbU1SuTimVTPI4DLPILi0
7sV9AqmHibtd5vXOw4YKEmFq67DlWnLR2ZbiDRdInWRtH7PXgR4h5uTDYP6+HCy1
J4/9fPlaJv8VP/NLVI20ciFOwZkcwJM0uI1HDKOWQsL5DZ0les8ROa0mWdCLa3Dx
dD8sJ+FhQsBx6Db4ZgCXHAosYlwxPwXVY76ksPv1lG/0PUB7Uul9ps0VltJb4S2c
hpRz36N+JLdaMw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:15 2026 by rpki-client