Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: FsSYgWEfJ3r9Vd1RsBhbpNtMUEq/vmXvqNQhkAJKA5s=
Subject key identifier: B1:2B:B2:3B:52:0C:2F:92:13:B6:FA:D2:AE:2E:26:B1:44:CD:4F:65
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019E1EDA02ABE3BFE4616101CCE681AD03A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 03DD
Signing time: Wed 13 May 2026 01:01:04 +0000
Manifest this update: Wed 13 May 2026 01:01:04 +0000
Manifest next update: Thu 14 May 2026 01:01:04 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: +XTo2xP9eGXJaDA8QPncU664UcGLOmqBXK8L/gHkT5Q=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:02:ab:e3:bf:e4:61:61:01:cc:e6:81:ad:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: May 13 01:01:04 2026 GMT
Not After : May 14 01:01:04 2026 GMT
Subject: CN=b12bb23b520c2f9213b6fad2ae2e26b144cd4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:87:ac:99:d0:a0:3b:85:51:9b:25:17:4e:
a2:d7:90:1e:01:ab:80:09:de:92:15:b9:68:7c:f7:
1b:dd:46:70:27:67:56:0e:c5:bd:4e:11:13:71:32:
67:6b:3e:88:1b:5e:b0:7f:0b:ac:b0:49:16:13:ea:
3f:24:ee:44:bd:e3:af:04:ba:c1:cf:48:d2:0c:65:
87:4c:77:23:90:b8:98:92:43:f7:7a:6c:f9:8f:c8:
41:c8:7a:78:5e:b3:c6:4c:ba:4f:6d:d4:c6:ef:24:
7c:5c:cf:76:ab:a0:21:b7:ad:24:3d:12:25:50:0e:
64:38:5d:c7:d3:f8:53:82:36:46:e1:ee:b9:9b:0e:
c1:8a:ac:ab:c8:d3:1d:f8:14:f4:42:3b:47:8c:45:
4c:f9:98:44:67:60:33:e2:90:4b:5d:12:a7:77:9b:
04:6d:ce:96:e2:ed:77:cd:6e:8d:01:9b:8d:63:8e:
b7:78:36:9b:80:8d:c4:02:73:75:df:65:2d:a0:ed:
c2:bf:82:a8:4b:78:e0:7f:57:1b:64:34:d4:21:97:
9e:a2:bf:ab:ef:70:e3:43:ec:c8:3e:65:d5:3b:5e:
5d:42:40:af:af:83:f6:f1:6c:ab:24:1d:cc:f2:2d:
af:c3:ba:c8:35:f9:41:9f:0a:86:40:83:01:c9:9b:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:B2:3B:52:0C:2F:92:13:B6:FA:D2:AE:2E:26:B1:44:CD:4F:65
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:81:3a:1a:fa:a0:66:49:3d:38:3f:21:d2:62:22:9c:30:f8:
6c:2b:ef:a1:a4:78:4f:66:6d:0d:c4:d5:f4:45:f6:82:ab:db:
10:22:02:5c:c7:75:d0:58:8d:09:3d:39:c9:34:66:d2:de:87:
2c:1d:ea:3e:53:e5:ed:af:99:8b:c9:de:66:e5:87:74:1e:0d:
dc:25:b4:bf:cd:b1:1d:c5:37:7e:67:e3:cf:e4:cf:a5:cc:79:
fe:31:2e:fb:fe:c4:90:80:c5:31:33:51:8d:0c:46:33:6c:cd:
1c:69:c5:6e:8b:45:4a:d9:f8:62:08:22:60:d8:0e:78:c9:fd:
3d:08:53:e6:c4:52:96:1f:84:86:7a:a5:1d:0a:ed:98:2b:c0:
bf:a6:ed:ec:23:0a:83:12:4c:bc:48:c0:aa:fe:d0:33:b3:62:
7f:60:52:70:67:ae:53:f0:99:72:6e:80:c0:2c:00:9d:3f:c1:
5f:c1:77:15:b1:b9:44:7c:3e:18:38:d4:65:20:2d:0d:79:c7:
4f:ca:f3:20:27:c2:d1:9a:32:21:aa:38:20:88:26:91:49:8d:
ff:b8:32:6d:92:69:ed:e9:08:95:2e:66:a5:aa:17:84:7b:cc:
6a:d2:bd:78:cd:0b:68:92:ec:54:e9:08:97:81:3a:7f:a7:31:
df:e2:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:50 2026 by rpki-client