Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: OMSwXkonxskkQ5qpAk3NvuGHYTh/b//oX2Z3uD+mSv8=
Subject key identifier: 14:98:E5:BD:1E:1E:BB:58:E5:BF:8E:67:77:E5:65:A0:78:FD:CA:14
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019D333F23614218F4ED55FB6723A8E70092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 0363
Signing time: Sat 28 Mar 2026 07:01:08 +0000
Manifest this update: Sat 28 Mar 2026 07:01:08 +0000
Manifest next update: Sun 29 Mar 2026 07:01:08 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: fhdrgHoct++v6jWRoxkfYYu1z5RstvSZWpBtub8ETYg=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:23:61:42:18:f4:ed:55:fb:67:23:a8:e7:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Mar 28 07:01:08 2026 GMT
Not After : Mar 29 07:01:08 2026 GMT
Subject: CN=1498e5bd1e1ebb58e5bf8e6777e565a078fdca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3f:fd:71:b9:2d:bc:43:00:e5:01:e3:63:8e:
30:61:c0:fd:16:89:e4:02:1e:fa:1e:77:56:47:e8:
58:97:96:e7:97:d9:dc:6e:01:6f:22:ae:d4:61:cb:
e4:21:5c:55:93:d9:a8:96:d8:6b:74:aa:b8:8b:da:
30:37:14:b7:4e:0f:ed:53:50:03:64:7c:96:64:bd:
96:44:29:3d:b7:6f:f8:cf:63:a4:59:ae:41:60:01:
5d:81:98:c0:cf:b3:43:e4:70:5e:83:20:ec:70:25:
8d:30:f3:8e:b4:15:8b:88:6d:1c:b4:71:67:65:3d:
5e:59:5e:65:ca:d7:19:4c:7a:a2:a7:38:2c:c8:fb:
46:93:f5:fe:91:41:a5:1a:3a:af:c1:d4:ca:cc:d5:
88:e4:d3:72:50:b1:d9:f1:69:4d:11:8e:b1:56:95:
89:20:93:02:a7:bb:a9:40:5b:bb:89:67:64:ed:d9:
ae:c7:49:0c:bb:ed:24:9d:b8:01:47:99:45:e2:d3:
aa:08:c8:74:68:60:a9:5e:d0:d6:1d:81:e3:b3:fc:
cf:a1:54:5c:24:cf:f1:f0:68:4c:38:da:80:b6:ae:
c9:3c:fc:ba:c3:46:c2:0a:e3:53:8a:25:a9:27:37:
4d:f4:65:1e:6c:5d:d8:e5:fb:fc:3b:a4:9f:ae:b6:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:E5:BD:1E:1E:BB:58:E5:BF:8E:67:77:E5:65:A0:78:FD:CA:14
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:07:6c:26:11:e0:b3:f1:87:21:5f:18:17:56:25:37:fa:
48:56:8d:6a:82:63:95:b0:61:c9:29:48:b4:b3:18:ca:b7:cb:
b9:c0:d2:d6:a7:4d:fa:46:d6:59:71:bc:7d:6c:c1:c8:0d:28:
d2:d6:ee:37:f4:8c:9e:47:d1:3f:e0:b4:d0:92:a8:34:68:36:
39:94:b1:e6:27:3b:f5:b3:1c:7f:68:a1:95:4d:aa:07:e9:0b:
20:02:ba:d8:66:8b:8b:51:67:c9:72:9c:16:72:34:93:bb:9f:
47:c4:82:8a:a0:de:fa:1e:1f:78:c2:02:83:0d:4f:34:cf:06:
ba:ba:d1:72:54:8a:a0:79:3c:62:fd:4d:b4:9a:b4:f7:da:44:
25:a1:37:7e:db:1c:fd:96:99:d6:40:8e:82:5e:6b:cf:2e:89:
bd:e5:4b:93:0a:a3:bb:5d:45:8f:90:36:78:55:6d:43:70:f7:
ac:c2:01:33:e3:e6:d5:bb:f5:02:de:c5:5d:cc:33:e3:79:32:
51:50:33:d0:07:78:e6:3f:1d:c8:07:ed:cf:9a:e8:d2:cc:bb:
d4:03:f4:92:03:6b:9d:89:11:b3:08:e9:47:8e:ec:01:28:fc:
3e:b0:8b:82:f8:2b:97:c5:dd:ab:e0:2f:e7:5d:7a:2d:68:99:
cb:b1:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:45 2026 by rpki-client