Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier: VSvL5Qu+N1/53Y606iNQGNdgfcsCKh4+LGw1NsqEVgI=
Subject key identifier: 91:B8:4F:F7:F8:D5:56:65:FA:AF:FB:40:75:8B:CF:DB:29:92:16:E5
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 01A1DC4B30E17EF7F8F360F2C7146C3B8C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number: 1B23
Signing time: Sat 14 Nov 2026 23:01:17 +0000
Manifest this update: Sat 14 Nov 2026 23:01:17 +0000
Manifest next update: Sun 15 Nov 2026 23:01:17 +0000
Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
3: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
4: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: domIj0j2Uqc4fRdMdOWlw2nQf4z3IbXfXQ7SV9lOt18=)
5: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
6: wZh9B2G5inJahv0ftHSnCHX_-u8.roa (hash: w+DHmKNzVqvV97CuN2V9W7IR0BKIs/JdPTg9dgcDZXY=)
7: z1RV9HlRUrsc0eXa5k4hr7_8KwA.asa (hash: L60YiW4wcsK0ahFFVrtWamuz7Xbp/eEjQXmY54sWCXg=)
8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:30:e1:7e:f7:f8:f3:60:f2:c7:14:6c:3b:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Nov 14 23:01:17 2026 GMT
Not After : Nov 15 23:01:17 2026 GMT
Subject: CN=91b84ff7f8d55665faaffb40758bcfdb299216e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:a3:35:64:99:68:3d:6c:54:9f:83:51:22:
ce:b5:19:54:93:ab:e2:8f:d9:09:ba:43:ce:8e:bb:
e3:d1:00:9e:34:9a:2d:df:ac:76:b3:8a:6e:59:e6:
4b:c1:d0:31:b1:72:2e:fb:37:56:48:43:55:51:b0:
ee:e3:e7:b6:7e:3d:19:0c:a2:d5:ef:2e:9c:61:39:
5a:50:70:d9:40:76:3b:6d:04:68:fe:92:c3:94:a7:
10:09:09:28:ac:51:f9:38:6e:ff:f6:19:ff:6e:fe:
3d:44:4d:ce:d5:d1:ad:e0:3c:1d:04:06:36:f8:05:
16:42:31:cf:c4:5f:ed:7f:8f:53:b5:52:ea:7a:d9:
22:4f:65:1b:17:48:06:88:08:d6:78:45:eb:65:e9:
0c:e3:d6:77:8f:8a:d8:d1:c3:f6:7b:57:5a:4d:2c:
31:6f:50:aa:cb:a4:52:9b:f6:ff:f9:02:73:e0:84:
08:6a:97:6b:c4:36:3c:c5:6d:75:10:ad:12:2b:6b:
54:48:5c:52:56:e0:9b:0d:5b:7f:a3:0c:79:9a:6f:
29:40:6d:7d:9d:69:dc:26:e4:2d:e1:f8:b6:b4:81:
76:b1:8d:57:c9:7a:be:7f:40:58:7e:9b:fd:c1:c4:
fa:76:3c:36:4c:e3:ac:a8:4c:e3:d4:5c:d5:1f:8b:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:4F:F7:F8:D5:56:65:FA:AF:FB:40:75:8B:CF:DB:29:92:16:E5
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:2a:38:df:27:a2:50:01:2c:be:65:97:c3:fb:89:bf:cd:
8d:a1:e3:70:3b:9e:55:a7:de:a5:44:06:b2:aa:4a:09:1d:5e:
99:88:73:f6:ca:bf:de:28:0c:64:42:cb:a3:34:4d:7d:b9:63:
e1:9f:93:e8:3a:12:2f:63:d1:e0:1e:e4:f0:9f:72:ef:cd:58:
a3:85:d5:77:ae:99:c6:2e:cc:4c:45:e9:b4:1e:86:7a:50:9b:
77:7f:cf:a4:7f:47:12:1a:80:1b:4c:d6:d8:9a:b1:8b:83:86:
ac:b3:58:07:1f:72:e0:1f:b0:86:3e:a2:7b:0d:59:2b:f9:73:
9b:55:ee:64:77:6f:c4:d3:31:68:82:ce:09:ab:10:2a:70:45:
8b:bf:c6:fd:4e:6a:ea:1d:2f:0a:ff:42:a6:7e:ed:d8:4c:9e:
4f:0a:9e:a6:ae:0f:47:2c:24:5e:2e:77:96:ce:97:c4:b7:ca:
d2:7b:b8:bd:21:03:97:b3:7c:9a:e0:10:d1:52:9b:fa:c1:82:
b3:03:29:a1:0f:53:99:3c:f7:1b:2a:1f:e8:8b:11:9f:0d:ac:
ea:7e:1a:12:bd:40:28:f9:49:a7:ed:f5:34:3a:81:2a:bf:dd:
91:d7:2c:03:1d:b9:73:9a:d3:d5:65:36:b5:cb:3b:c0:5b:86:
f8:4b:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:57:11 2026 by rpki-client