Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: y35BoLVuJNzb3JxhKh56Wjjl2L99hoDVpl9b2EEA/ZE=
Subject key identifier: 7C:79:09:E9:3C:87:94:4E:3E:53:45:E9:C8:0B:A5:50:B0:33:2C:E5
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01A0F67B8F1CB46C946B74E09EE7BAED12BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 128E
Signing time: Thu 01 Oct 2026 08:01:27 +0000
Manifest this update: Thu 01 Oct 2026 08:01:27 +0000
Manifest next update: Fri 02 Oct 2026 08:01:27 +0000
Files and hashes: 1: 41p3kpRJWL2MgitfF2i70VkmycM.roa (hash: gLJxBjMA5TyS6tzrLh6xE9DIPjxuKa3Tf9+7RkGDxRs=)
2: 8PJsiSgawJpqi4WMA0rE-WSVzw4.roa (hash: gH5uM65Zqr7CX//7XHgG1PbcCvfvj2cn2duCm7yPiEg=)
3: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
4: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: CwnTk9iGYrWr/O4ugiP0UA1mXV87f4xF/e58y+Oi1Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:8f:1c:b4:6c:94:6b:74:e0:9e:e7:ba:ed:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Oct 1 08:01:27 2026 GMT
Not After : Oct 2 08:01:27 2026 GMT
Subject: CN=7c7909e93c87944e3e5345e9c80ba550b0332ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:8b:2d:3e:30:0c:80:92:fe:b9:62:2a:48:
1d:fa:71:51:75:9d:f5:68:c8:51:f4:32:fa:15:11:
17:78:f7:e7:28:76:40:7a:04:8f:51:c2:d6:05:68:
26:57:ea:be:3f:76:f7:98:d0:6d:81:a5:e6:f2:c2:
1a:99:17:c5:9c:af:eb:36:8e:e9:f8:10:63:cf:56:
91:c9:3d:ba:06:d9:70:5a:e1:06:0e:ee:df:c3:67:
e6:21:0e:82:89:c7:8d:c6:8a:99:ca:30:97:a6:0e:
7a:23:4c:0f:30:7d:87:44:89:3b:81:b2:65:73:c9:
cd:20:2c:d8:5e:f1:53:6c:71:f8:74:f5:85:ab:9b:
e9:35:f6:04:a6:b6:1c:40:97:fa:48:6a:65:6e:c6:
c5:4c:aa:bb:f7:40:b7:36:1e:a2:8d:fd:d3:73:1d:
d6:4b:cc:bd:47:9b:33:65:c6:66:8d:b3:3a:79:e9:
9d:4a:a8:b1:56:ba:ec:37:69:a6:92:be:96:e6:f6:
39:23:aa:60:e5:c0:04:b8:87:86:87:28:43:c9:e6:
bf:62:aa:1a:87:e7:88:3b:46:e5:f0:b8:40:35:b6:
b0:f7:ab:62:10:2c:68:bb:16:aa:3e:2d:87:ac:33:
5b:86:a6:46:bd:a7:a7:af:5a:3e:2f:bc:b3:0a:68:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:09:E9:3C:87:94:4E:3E:53:45:E9:C8:0B:A5:50:B0:33:2C:E5
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:9d:18:32:11:0c:01:d6:cb:54:5c:7c:4d:6d:ce:f7:8b:
75:0b:7e:c1:a8:38:08:cb:ce:5f:04:98:f8:96:83:8a:48:4b:
cf:d2:59:4d:a9:ae:4f:cf:cb:6f:fb:ff:77:68:d5:bf:9d:fe:
46:75:f9:73:4a:49:c4:19:ce:c2:d5:2d:8d:02:64:52:40:ee:
51:da:dd:2c:91:00:fc:5d:e6:2d:de:49:64:00:98:45:68:f7:
39:73:24:18:98:a1:d8:e3:1d:85:bb:e4:ae:28:cc:27:5b:e7:
14:75:ec:31:cb:e6:8e:3a:69:ae:d6:12:c8:7a:34:71:55:c5:
47:28:3a:cb:ff:50:0a:ea:0b:30:81:a3:82:6f:f4:12:50:f9:
b7:2e:df:9c:c7:68:58:46:af:bd:42:37:f1:13:8a:91:69:02:
3c:b9:6c:da:97:88:66:14:49:4a:38:0f:8d:34:8e:08:90:89:
1a:10:a9:69:d5:13:17:1d:03:fc:47:f0:67:8b:8b:83:02:d6:
32:34:6a:e3:97:bb:6a:5c:5d:11:be:72:0e:a9:ac:b9:a0:b2:
20:b1:2a:f8:8d:a5:c4:27:da:b2:08:72:6c:8f:d1:f8:6c:90:
dc:9b:2d:f6:ed:63:91:5a:5f:a3:2e:50:24:f3:67:f4:8f:98:
a2:83:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:57:21 2026 by rpki-client