Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: T4j7kEOn0h4xIIv3n6OVC/K+gQH9nmwrcl9CrezcGc0=
Subject key identifier: 88:E9:37:45:48:48:8E:00:13:02:54:18:4F:4C:67:9B:0D:E3:B8:65
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019F829E25D115EB3751C2C48C7617E2C9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 027C
Signing time: Tue 21 Jul 2026 03:00:30 +0000
Manifest this update: Tue 21 Jul 2026 03:00:30 +0000
Manifest next update: Wed 22 Jul 2026 03:00:30 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: Z734oDcehkdh58PCwIqR1JIgesW8Wzvdo2FwGn+DftU=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:25:d1:15:eb:37:51:c2:c4:8c:76:17:e2:c9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Jul 21 03:00:30 2026 GMT
Not After : Jul 22 03:00:30 2026 GMT
Subject: CN=88e9374548488e00130254184f4c679b0de3b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:45:c8:9a:ed:d1:21:e4:08:56:a5:ef:85:
b4:7d:90:fe:49:2e:31:85:ad:8b:8d:54:61:4c:e1:
7b:d7:f0:86:ee:88:73:9d:fb:68:51:14:17:99:78:
4f:29:33:45:00:92:b5:ee:32:d6:67:7b:c9:0a:8d:
7e:6e:0d:08:6f:8e:f7:4f:b3:8b:86:7d:eb:24:7a:
b7:7c:00:02:91:07:02:09:f1:36:a3:da:f1:bf:ba:
a8:6f:7b:82:9f:be:c6:aa:ed:bf:a8:91:85:99:3a:
b5:35:c2:f7:4b:0b:26:ce:dd:b4:7a:0f:0b:e9:5e:
7e:23:12:83:43:70:b9:97:05:ac:72:d1:e5:75:28:
07:d3:27:94:d3:b2:88:61:88:01:78:a7:32:46:d2:
08:32:98:6c:c8:ea:a2:db:38:3a:8b:79:aa:21:f4:
c6:31:02:09:20:c6:fd:aa:a2:6b:84:3c:1d:41:a3:
19:6d:a9:06:a9:d8:0f:f1:b5:89:0b:1c:29:49:24:
e8:27:99:88:f5:8e:7e:b3:d1:2f:a8:06:0e:fa:aa:
c4:a4:45:ea:f5:1e:da:d3:05:0c:c8:48:2f:ba:cd:
2a:bc:fc:6d:85:43:ef:69:c0:15:cd:8c:68:7f:c5:
3d:4c:4b:6c:53:eb:ca:b4:ea:b0:85:7c:18:ed:c5:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:37:45:48:48:8E:00:13:02:54:18:4F:4C:67:9B:0D:E3:B8:65
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3a:b2:21:8b:12:f0:2a:9f:e8:91:9d:6c:4b:dd:46:5f:bb:
ad:0b:c3:62:b9:7c:cc:e8:ca:80:f1:54:66:20:23:16:2d:d5:
b3:4a:b7:66:e2:6f:d5:99:08:99:a5:3b:91:cd:13:c1:70:ed:
e3:ac:e2:a5:ea:00:88:5d:1d:ba:da:13:7d:2a:b2:66:c3:8b:
bc:aa:5c:46:9a:a4:ef:6f:b1:67:a0:a4:5e:6a:7c:91:83:4f:
c4:cf:2d:1a:40:21:45:74:85:6c:f6:73:f9:ff:eb:c4:e6:9a:
15:47:8b:b4:71:33:cd:21:ed:7b:a2:eb:6c:92:30:60:c1:e7:
ec:30:e5:92:ee:47:62:a5:26:ff:8d:de:a2:64:85:94:31:12:
e6:cb:2a:6a:93:43:69:47:12:e4:af:ac:cb:c6:92:99:bd:11:
ba:01:fc:ba:9e:ba:fd:42:f4:1f:5c:09:f8:26:22:ed:be:c3:
fb:bd:b9:13:c0:67:c0:e3:47:c5:1e:44:fe:0f:57:13:ed:1f:
dd:bf:fc:de:6d:e7:41:ea:32:3d:cc:e0:18:62:99:0e:d1:3a:
07:38:16:90:cf:d2:92:4c:79:9c:eb:ef:95:54:24:67:78:f9:
a5:e1:cf:4c:eb:86:dc:bd:30:70:03:e4:4b:11:84:80:a8:5f:
c0:60:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:42:41 2026 by rpki-client