Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: 1JSAtSsM8lFIs5pyPa2c5sd00xsqIUeIkBW9eccgA7Q=
Subject key identifier: 48:32:86:D4:F2:EB:34:BD:2B:B7:A5:9F:24:13:B0:43:80:89:06:10
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019D389BDCA1947A7F07C2CB3110259AB3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 09DC
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (hash: o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: 8fA5w6vzt3EPN6lZWlAuGWlyOospyaeNp0B0yVhX/Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:dc:a1:94:7a:7f:07:c2:cb:31:10:25:9a:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=483286d4f2eb34bd2bb7a59f2413b04380890610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:6b:58:58:51:ca:f7:43:43:59:41:b3:fd:
5a:a6:f7:e2:64:38:4c:33:cd:33:95:28:f8:3b:cd:
32:42:fd:10:20:2c:c7:be:0d:38:eb:83:c2:36:39:
d2:ab:e0:fa:53:ea:3b:e1:2d:21:39:91:f6:ec:80:
dc:8b:9c:dd:bd:dc:00:aa:e7:34:84:37:d5:fe:0d:
fe:1c:7e:f2:e3:dd:2f:e1:39:80:a5:64:81:a5:46:
ec:32:22:80:17:80:99:81:2b:7e:ea:09:91:25:59:
11:87:28:cc:91:4e:06:8f:f4:81:df:39:d8:10:85:
d9:c1:62:06:eb:67:99:57:90:ab:d8:22:a5:77:e0:
33:5c:11:d2:af:dc:d8:30:6b:0d:5e:3c:03:b5:e2:
06:e4:1f:c6:d0:68:87:28:85:8c:1e:bd:d7:87:49:
f1:2e:a8:24:da:a1:a3:fb:8f:3b:7c:e5:36:57:47:
da:08:7a:b2:cb:0d:9c:f6:50:8b:7a:31:02:96:fa:
56:cc:ce:1e:50:46:68:d2:b1:c2:39:39:a2:c5:24:
f9:7e:1e:86:98:e5:9c:23:ee:c5:79:aa:da:bd:85:
75:af:8b:ae:1e:8c:0b:7d:40:3d:d6:cb:a8:5f:2d:
13:f3:84:91:1d:1b:64:50:cf:18:dc:45:03:3c:fe:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:86:D4:F2:EB:34:BD:2B:B7:A5:9F:24:13:B0:43:80:89:06:10
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:03:f0:1c:49:37:30:e4:a3:77:22:bf:7c:9f:3c:d1:ea:77:
58:7a:2c:75:17:ce:ff:f3:d6:69:25:66:95:ae:c6:3c:0f:1b:
61:7b:30:dd:11:ca:cf:19:b7:fe:58:6b:02:72:bd:a6:18:9f:
70:b5:77:85:7f:da:fe:cb:ad:59:d9:3d:3f:28:d7:0c:76:6c:
33:aa:37:45:3f:7f:7b:43:ee:14:97:64:41:ce:1c:39:09:4e:
c8:0b:6e:9d:df:0b:5e:31:89:39:c2:5f:46:c5:d3:42:ff:71:
01:54:44:db:b5:bb:35:f9:24:27:61:9f:76:68:4a:7a:d8:11:
d6:11:3a:4f:01:67:e3:4d:48:9b:e8:24:10:37:b3:3f:e8:7a:
12:39:ac:5f:8e:aa:66:56:6b:91:49:cd:4f:eb:05:10:0f:4d:
2a:8a:5b:cf:6c:7c:0a:6e:1c:68:af:72:f8:33:99:84:ac:1f:
27:dc:33:46:2d:09:94:80:63:77:e7:21:f5:6d:46:7a:a1:d4:
92:a3:bb:f1:a7:f6:2b:53:3a:a0:2b:e6:b2:59:d7:9a:db:e2:
5a:3d:8f:cc:f7:f7:90:1b:10:23:4c:1c:95:57:d5:55:a6:07:
50:e5:59:a5:05:9f:f4:fe:e0:89:54:43:38:89:a5:92:2e:9a:
58:63:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:39 2026 by rpki-client