Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: T0Vnw7r8jh9BTp8gSAIFk5F5Wf3JpfS5OGXVs+Ax1Q4=
Subject key identifier: 0A:CC:6E:B6:F4:E6:38:98:3D:BB:81:64:AE:2D:6E:7B:90:D3:AA:19
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019F91A3773AB8E2DBDB7DEC0B188122DEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 049D
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: H+44c5IiFPDihnIfJ9fJFTsZ7g2q1Wv1HmRQoggFNnc=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:77:3a:b8:e2:db:db:7d:ec:0b:18:81:22:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=0acc6eb6f4e638983dbb8164ae2d6e7b90d3aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:32:f0:fa:ad:bf:34:17:c4:9e:ad:48:ca:
0b:68:02:8b:a6:02:8f:1f:1d:d4:59:a7:c1:5a:be:
62:94:45:90:fb:2d:c0:b6:a9:74:d5:5d:5e:44:60:
59:e9:d1:c8:be:8d:50:09:4d:ad:6c:4a:a8:4b:6d:
d5:0b:c3:95:ed:fe:0c:8b:88:9e:a2:65:4a:61:32:
8a:bf:39:cf:00:86:25:83:ae:b9:82:70:1c:df:e2:
51:51:5a:eb:20:7a:e9:27:f6:61:c7:e9:05:97:79:
14:3b:64:00:66:da:7d:a4:d7:97:f8:56:ac:a3:2a:
7c:4a:df:9b:a3:d4:7b:55:43:74:7a:88:fe:57:a7:
fe:d0:c2:67:2a:9f:6a:4d:0b:4d:4c:e4:63:4c:68:
7a:90:93:b3:ba:15:29:a2:f8:be:8f:12:9d:3c:6e:
9a:82:19:a6:5c:cd:4b:0b:af:3d:fa:d0:1a:9a:57:
21:ad:64:a6:18:24:42:97:6d:30:1b:55:86:18:86:
45:bc:ca:7d:a7:32:0e:db:3e:d4:47:c6:3c:36:0a:
5d:29:3a:f9:07:3a:c2:92:51:a7:80:56:24:3f:9f:
44:f0:4d:5b:36:89:55:39:57:ba:04:43:b8:f7:0c:
c3:1d:25:50:0b:7d:a3:1a:3c:31:00:17:b6:34:54:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:6E:B6:F4:E6:38:98:3D:BB:81:64:AE:2D:6E:7B:90:D3:AA:19
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:01:49:21:7f:bb:d9:5d:a3:1d:2a:4b:dc:f3:d9:24:04:bd:
0b:e3:bb:0f:9b:ac:4e:73:51:d1:2a:a2:50:21:7b:b5:1c:fe:
2d:3e:de:cc:94:a3:60:e1:05:0d:6d:e7:b0:f6:3e:65:8e:cd:
51:e5:88:73:c7:40:6b:27:1f:78:4b:0a:43:d9:47:05:fc:38:
c4:94:46:f0:5e:32:33:9a:d8:36:e3:48:12:00:43:61:ec:c8:
35:e6:96:cb:87:fa:06:38:bd:3d:88:43:8b:d4:1c:53:30:17:
be:a2:81:55:46:b7:cd:5c:97:99:38:d3:22:cd:dd:ef:e6:8a:
ab:e0:cc:20:ff:ae:40:60:66:bf:4e:f2:52:34:8e:fb:44:e2:
11:15:6a:e8:76:3d:c1:a4:16:c8:c0:7e:0d:03:12:ae:cc:5c:
9e:5d:b0:47:74:e7:3b:dd:23:3e:f5:d6:44:55:02:cb:d3:86:
3c:9a:a7:8e:42:aa:c6:f3:a1:32:27:37:b3:ca:ce:0f:f5:eb:
3c:e2:8a:52:8d:d4:97:84:b4:aa:09:62:82:4b:fe:61:f5:cd:
56:76:c9:29:57:83:8b:c6:d0:36:b8:dd:c9:02:62:37:65:35:
4c:35:4c:94:60:42:42:55:2b:08:68:6d:d0:cc:60:d0:ff:fb:
c0:53:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:56 2026 by rpki-client