Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: /+aBux0YpVshkl5HMeaBQ7nkiXFtlIE/x0Nu0rEUJgQ=
Subject key identifier: D8:A9:74:63:3F:BD:24:6C:86:34:DD:97:28:EB:9F:FE:F9:A1:60:27
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01A0D23795772D926FC236A3F6427F0EDF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 0543
Signing time: Thu 24 Sep 2026 07:00:53 +0000
Manifest this update: Thu 24 Sep 2026 07:00:53 +0000
Manifest next update: Fri 25 Sep 2026 07:00:53 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: pkr32UzW2kAfi6YdVNOiiez/P2bEO81nGWakKRxIz3I=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:95:77:2d:92:6f:c2:36:a3:f6:42:7f:0e:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Sep 24 07:00:53 2026 GMT
Not After : Sep 25 07:00:53 2026 GMT
Subject: CN=d8a974633fbd246c8634dd9728eb9ffef9a16027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:59:06:31:11:50:27:13:a9:cd:ee:92:42:
8d:b3:ff:8c:22:96:98:b8:a2:06:7f:cb:0b:4a:e7:
0b:cf:c5:45:4b:48:2c:2f:d7:db:4a:e9:e4:35:8f:
66:71:02:db:e6:8e:88:a6:21:b7:9a:2e:0d:45:a9:
f4:1b:5f:12:6e:ed:d8:ff:14:93:47:85:ea:ea:12:
7d:cb:b1:9c:8e:45:e4:7b:17:cc:6e:6b:20:b6:4f:
6a:84:e5:1e:83:08:c2:14:a1:b9:88:07:c7:6e:fa:
ba:27:df:c7:01:12:bd:62:80:a3:be:2b:d9:be:03:
e5:6e:b6:66:65:a4:7b:c8:d0:dc:e7:4a:5b:d0:9e:
4f:3d:8b:c0:2f:75:74:09:a3:15:48:13:41:3e:23:
b8:21:3e:20:0b:61:d3:15:7c:fb:f3:5f:c5:25:56:
7a:51:2e:63:ce:4c:c0:d7:0a:1a:aa:ad:90:4d:b6:
77:cc:c7:62:92:87:bc:94:d3:b2:f3:51:cb:83:72:
f7:f2:40:fd:3b:30:57:dd:40:8d:44:91:f0:4f:3a:
1c:41:8f:ed:69:2f:b0:f6:8c:ae:a2:40:11:c9:e6:
75:87:8a:18:c3:5f:82:43:22:38:d7:32:7c:33:de:
61:90:84:14:20:27:f7:51:c9:ee:f8:77:97:6f:53:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:74:63:3F:BD:24:6C:86:34:DD:97:28:EB:9F:FE:F9:A1:60:27
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:62:e1:e5:da:5f:e4:19:f9:88:c2:22:69:32:f8:66:bb:a0:
75:6a:7f:1f:5a:50:5a:e0:78:37:41:bd:7b:e6:9a:ba:fb:25:
f6:08:ce:32:69:63:36:06:35:e4:b4:f1:32:d2:b2:d7:04:2a:
6e:ab:94:ec:9a:a1:15:85:4e:96:81:0f:8a:3d:2a:82:38:8d:
b5:6a:70:41:a7:ba:22:f3:60:cc:ad:63:a5:69:30:50:89:ba:
23:a0:d7:0b:25:6c:74:32:26:69:bf:cf:b7:3a:b2:f1:10:64:
30:8c:e6:51:b8:94:fa:b8:c2:54:d2:a0:e5:4e:66:e3:a3:0b:
ef:1d:bb:b9:ff:10:a8:66:ac:f4:f9:43:8e:35:30:8e:41:9c:
97:4e:df:22:79:0a:33:05:ba:60:4a:89:3a:d6:75:06:ac:28:
a0:16:ed:e0:52:fc:46:da:f1:0c:7b:a1:96:0f:67:be:5f:7c:
0c:90:f1:4f:55:4c:45:a9:bc:be:6d:c0:c0:be:83:3b:3e:9d:
81:48:ff:ba:b6:03:1c:5b:9a:fb:3c:ee:d7:3a:c0:81:35:e2:
11:09:3b:57:5e:ec:3e:43:69:14:d8:d3:ac:56:21:63:1f:9e:
81:1d:9d:cc:37:3a:61:d8:92:ed:ad:f5:d0:f7:7a:1f:f5:15:
51:68:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:20:34 2026 by rpki-client