Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: IiXHbFnWSS4RHQkhozhgmG8apxR6VTtpzhMJZiXluHE=
Subject key identifier: AD:72:42:30:73:FE:FD:E6:CA:B7:8E:59:C7:49:FF:A2:8F:9A:79:36
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01A0CEFF507A65C3FB3CE5108106F5937E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 16:00:33 +0000
Manifest this update: Wed 23 Sep 2026 16:00:33 +0000
Manifest next update: Thu 24 Sep 2026 16:00:33 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: fzvKt92FL/ng5TX6bCiL+LbP4exMmKPHrnaCdbJ+Mls=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:50:7a:65:c3:fb:3c:e5:10:81:06:f5:93:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Sep 23 16:00:33 2026 GMT
Not After : Sep 24 16:00:33 2026 GMT
Subject: CN=ad72423073fefde6cab78e59c749ffa28f9a7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:b7:78:cf:ca:17:aa:a5:c8:05:37:cd:50:
21:17:ce:90:d5:4a:da:9f:de:05:14:be:ea:f9:b3:
3d:9a:30:38:48:91:d2:42:a8:40:a8:0f:b9:e8:9b:
81:66:c0:91:77:14:de:2d:c9:b3:62:b7:28:8b:b5:
c1:a2:1f:09:e1:eb:34:2b:8e:32:e8:2f:2b:ae:e9:
6c:84:70:db:bf:3d:b4:16:ea:20:dd:a4:f2:7a:1c:
78:82:ba:3d:9f:0d:d6:dd:a3:e5:6f:68:d4:c7:5e:
7c:57:a9:2f:0f:53:90:6d:59:3b:e1:9b:61:60:73:
b4:50:1a:b5:99:e3:f3:42:4b:29:bd:b3:fe:0d:b7:
7b:67:4c:77:ea:6c:e8:be:14:be:02:00:1f:25:67:
9a:ab:a0:c7:9c:c3:1c:31:57:4a:d7:28:9f:e7:23:
06:5a:b2:97:ac:78:f8:8a:86:45:b0:46:9d:b5:e1:
a8:bf:89:48:69:4e:f3:2e:e4:99:a0:37:d6:9a:9b:
b3:30:97:46:5a:de:f9:e0:a8:b0:7c:75:fe:ab:2c:
f8:2e:5c:e1:6f:2c:12:bd:31:ff:f9:99:c5:0c:14:
ce:ef:f1:0f:fe:98:1a:bd:9c:ee:f6:55:92:26:e9:
44:a4:ad:c5:e0:e9:88:06:c6:45:9e:7e:bd:67:b0:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:72:42:30:73:FE:FD:E6:CA:B7:8E:59:C7:49:FF:A2:8F:9A:79:36
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fd:a8:40:b6:fc:66:10:7b:fe:6e:7a:3b:7e:54:71:54:ac:
51:ec:b3:94:6a:2b:4c:01:a3:02:94:2b:4b:f2:4b:be:5e:95:
d2:08:eb:b1:dd:5a:44:06:26:8e:81:7d:eb:91:89:df:f9:2f:
ba:19:8a:ae:3c:a6:21:30:31:c9:b6:7c:02:b5:30:8f:09:69:
96:2b:8c:90:bc:14:35:3e:b0:85:7c:8c:64:09:f6:4e:69:bc:
5a:f6:e2:b7:68:11:ba:37:b8:e6:2b:a3:3c:df:3c:22:60:45:
85:16:e6:49:5a:09:7f:dd:6f:c6:9b:d0:43:1c:6c:ba:59:7e:
38:e0:b6:52:43:b8:7d:ee:85:9a:a0:fd:de:67:c8:59:05:b6:
df:0f:26:fa:8c:63:b1:c0:fd:f7:94:e5:33:c1:67:3f:31:ec:
0c:82:88:3c:34:c8:b9:70:2b:d7:69:1b:cf:45:4f:42:1e:08:
4e:51:f2:bd:ff:1a:95:83:6c:67:d6:64:76:6c:55:63:f6:a1:
12:cb:d6:4a:9e:a4:d9:0e:50:bf:07:90:0e:00:6e:ce:b1:ea:
01:9d:ce:e7:38:5e:12:57:56:70:99:bd:cb:b7:64:fe:71:64:
fa:59:fc:33:ba:39:0e:bd:8b:09:10:b0:4e:4c:d4:53:72:45:
e9:a4:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:08 2026 by rpki-client