Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: QdR891o+23JL2/uKCs8Mv9uXiY4oGp9Xpba0zNBT22s=
Subject key identifier: 17:92:EB:46:2F:98:FE:BE:B3:77:0E:2C:40:3B:AB:47:6B:ED:E3:E2
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019DCFAC3AE788845912799AE9388A20A258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 03B4
Signing time: Mon 27 Apr 2026 16:01:04 +0000
Manifest this update: Mon 27 Apr 2026 16:01:04 +0000
Manifest next update: Tue 28 Apr 2026 16:01:04 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: pmmebFIJa48xNtTgbTQMoBayMou28fTvxP16UztkyuE=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:3a:e7:88:84:59:12:79:9a:e9:38:8a:20:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Apr 27 16:01:04 2026 GMT
Not After : Apr 28 16:01:04 2026 GMT
Subject: CN=1792eb462f98febeb3770e2c403bab476bede3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:7d:a7:f4:92:f5:ec:6a:1e:09:75:43:fa:
96:93:1c:f4:a3:6b:76:8e:06:63:d3:d3:fe:30:ff:
1c:c5:1b:5c:08:e4:29:46:bd:fc:36:23:db:74:68:
1c:67:6a:75:e1:bd:fb:52:95:69:c1:0b:b6:b9:70:
84:99:c9:5e:58:0d:18:e4:c7:dd:d6:a3:58:76:f4:
96:1c:35:9c:2e:a4:0f:82:f6:3e:f7:9a:64:33:3c:
a8:f5:28:77:93:e1:c8:39:aa:03:e7:c1:0f:eb:a3:
c2:31:c6:ff:64:ee:c5:be:e3:3d:00:b5:f6:c0:50:
c5:ba:8c:98:f2:6e:17:c1:71:b9:30:c8:59:40:40:
fa:2c:34:52:4f:b0:3b:13:a4:8e:91:09:1b:12:a0:
48:6e:e6:ed:4e:e2:36:1e:71:1c:a1:40:ba:9a:c2:
4c:09:fa:9d:a8:07:95:3a:38:51:1c:52:69:18:a6:
1c:11:06:5c:f5:32:7e:ce:0e:63:8e:c8:ea:73:78:
99:c5:1b:2a:58:63:47:b1:bb:4b:ed:27:2e:c6:3c:
bb:07:09:33:15:47:2d:66:fa:88:89:c6:9c:eb:6d:
88:4e:cc:b3:5a:58:45:ee:1e:75:04:b4:84:56:60:
c4:bc:1c:c7:c1:83:46:53:25:7e:0d:36:d7:3a:60:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:EB:46:2F:98:FE:BE:B3:77:0E:2C:40:3B:AB:47:6B:ED:E3:E2
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:a2:8a:6d:82:10:0f:f3:ae:19:d1:9e:d5:aa:74:b7:f2:
19:46:07:eb:4e:62:b4:80:35:0a:40:db:5b:4d:8f:48:b3:15:
48:71:87:20:ca:8c:e4:62:7c:38:ad:00:e8:fb:e0:71:8e:da:
b7:5c:df:cc:d8:ef:bf:84:b2:19:44:d0:82:13:8c:5b:5d:ca:
ec:a8:79:bc:bd:3d:8b:9b:cf:19:92:74:c6:7e:3c:e9:8d:c2:
c9:5d:e2:2d:9b:4e:dd:7c:c0:eb:20:c9:f9:09:16:59:a0:47:
26:43:dc:d4:3a:21:83:f3:dc:d5:d2:41:f7:41:b7:01:50:e0:
79:7e:4b:5e:e6:39:af:3f:23:cf:a1:b8:10:bf:c0:54:69:56:
50:a1:a5:95:e0:37:72:42:84:de:a1:6f:af:22:f6:70:8c:f7:
aa:c7:a1:87:0d:95:8b:fe:7b:6b:4a:5d:69:d2:62:79:e1:d5:
cc:79:5d:05:93:85:fa:c6:61:53:7f:8c:99:a7:50:87:53:5c:
4e:ab:71:0f:44:b6:f3:ec:df:01:09:85:3b:2d:c2:55:f1:24:
25:0f:a1:97:5c:99:e6:a4:b9:bb:20:96:42:15:60:59:2e:13:
70:8b:95:7e:e8:4d:e7:bf:f7:4b:e4:ff:b8:4d:7e:52:b3:9b:
1b:ff:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:15 2026 by rpki-client