Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: cIURvlo/O91lHKYcgj4oVcAy1IYkBlANLHruzZQDnu0=
Subject key identifier: 07:ED:74:66:B3:12:25:80:17:25:A3:AB:27:00:A7:54:7B:5A:E1:D0
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 01A1637C9432F92356BAD13BA38F1CD348AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0375
Signing time: Thu 22 Oct 2026 12:01:11 +0000
Manifest this update: Thu 22 Oct 2026 12:01:11 +0000
Manifest next update: Fri 23 Oct 2026 12:01:11 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: +1nQx8i2QRQnbuWhNg3FAH5XEWLC7dSUZan8YsPYai4=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:7c:94:32:f9:23:56:ba:d1:3b:a3:8f:1c:d3:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Oct 22 12:01:11 2026 GMT
Not After : Oct 23 12:01:11 2026 GMT
Subject: CN=07ed7466b31225801725a3ab2700a7547b5ae1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:b6:e3:3b:1a:8f:5e:f0:39:08:48:02:c6:
1f:f3:10:f3:82:f2:b9:bb:22:5c:b1:6e:45:cd:24:
be:b0:3a:2b:b4:e2:63:ac:5e:e8:46:9e:ad:59:81:
0f:7b:34:fa:08:6d:ed:bb:7f:e4:65:7c:a0:65:23:
c0:9b:7e:d7:b7:90:7f:5c:72:f4:c6:54:bd:84:5d:
a0:65:cf:5d:24:f5:da:53:af:23:db:92:8e:df:81:
38:c2:77:88:a8:83:0c:9a:eb:56:60:a2:7d:e4:2f:
d4:69:4b:da:e2:df:4f:cd:46:88:55:93:88:2e:f9:
3e:1e:d8:d3:0d:ad:f8:93:d2:0b:ad:7d:5e:7c:6f:
c1:c7:c3:04:de:d5:ac:a6:c2:8d:07:be:a2:e9:93:
1c:fc:ff:0b:40:27:d8:1c:93:ed:27:39:10:32:08:
8f:6c:2c:28:da:9c:e3:ab:e8:b5:22:7b:a2:bd:19:
43:d1:99:94:58:43:d0:a8:58:87:83:2f:ca:a1:0c:
b4:2a:8a:b3:9d:02:ff:2f:95:27:eb:82:b6:16:89:
86:30:9e:99:8c:ae:b1:69:bc:59:38:4e:cb:5d:18:
6f:7c:02:07:ca:08:94:39:91:06:8a:b1:26:fd:ec:
34:c7:a9:70:1f:9f:4d:65:1e:13:b3:9c:84:11:75:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:74:66:B3:12:25:80:17:25:A3:AB:27:00:A7:54:7B:5A:E1:D0
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9b:d9:de:03:c5:0e:9f:6f:8e:b6:7e:2e:97:58:3a:e7:00:
fa:f3:0b:e1:7d:dd:3e:ce:88:5e:11:f2:7f:3d:9c:ed:46:5e:
9f:7b:6c:fd:f3:1c:5c:69:08:3a:13:ab:21:ae:1d:10:18:85:
48:47:13:cb:6c:0d:92:0f:36:48:e4:42:5c:a2:e8:a0:b1:8b:
4a:b7:8e:7c:88:27:d7:a4:e1:8a:fc:d6:09:ac:41:28:5c:19:
ff:e9:fa:63:85:69:5d:dd:d7:43:fa:70:bd:ab:05:28:c4:0e:
f6:80:25:8f:e3:15:3b:e0:20:ee:52:70:b7:95:94:0b:b0:42:
fa:0e:ac:50:c4:c7:26:09:58:9d:17:a2:1a:b9:a5:9c:4d:24:
d5:b1:8b:4f:f1:63:b9:ef:4d:a1:45:98:e4:bc:7a:c7:8e:9c:
4b:7f:f6:fa:30:c5:37:7b:4f:c6:e7:c9:86:99:76:25:f8:94:
a1:8c:ba:09:1a:65:05:42:93:4c:cb:13:b0:e8:f2:ba:1e:b3:
c3:db:ce:65:6a:73:5a:56:b4:f3:ec:51:43:48:8f:23:e7:0e:
47:56:3a:4e:2f:32:c4:c5:59:5a:5d:2f:8e:50:1c:33:c1:f4:
e9:a3:db:8a:70:11:a6:72:04:64:16:a9:f7:99:ca:c4:4c:88:
41:58:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:28:39 2026 by rpki-client