Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: 5l3PXzPnvZHFP2tAmlpMaPXwIoCpP98LSMl+gWzc8+k=
Subject key identifier: D8:F6:49:6B:F3:57:F1:35:AE:01:69:F2:86:C6:CD:03:A6:44:1F:81
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019FFAC8DD9C0955906D2DB538EE8D61E3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 120B
Signing time: Thu 13 Aug 2026 11:01:35 +0000
Manifest this update: Thu 13 Aug 2026 11:01:35 +0000
Manifest next update: Fri 14 Aug 2026 11:01:35 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: iXVRV7SFBW98WUJDle/sBKSTCXfpbcbIf1/TaUIIRY0=)
3: xJY_AM5c5mqbzDMlBNgNsWz_lug.roa (hash: B551H0yQy3AcP1JDauGu2ZmstUvG2dDmNnX6HF0awWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c8:dd:9c:09:55:90:6d:2d:b5:38:ee:8d:61:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Aug 13 11:01:35 2026 GMT
Not After : Aug 14 11:01:35 2026 GMT
Subject: CN=d8f6496bf357f135ae0169f286c6cd03a6441f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:dd:bc:d5:55:d4:bc:3b:f4:14:d8:c1:56:
ef:79:be:ad:cd:ac:e8:48:6a:b0:3a:58:f1:6e:3c:
16:a4:d7:52:68:d5:0d:e4:a4:32:64:7a:80:49:a1:
8b:59:da:db:c7:8d:04:18:66:4a:6a:70:cc:c5:2f:
2d:3a:a5:3c:53:dd:f3:0a:bd:d9:6c:4e:f2:48:45:
ce:5c:4e:36:29:1f:a3:6e:ff:43:d1:27:91:bf:93:
30:b6:5e:0a:a5:f2:bc:b8:f3:3b:b3:f4:d3:52:5b:
91:85:0b:46:79:b6:09:55:e3:d7:cc:3a:3d:91:44:
e5:df:1a:2c:8d:aa:e6:a3:09:08:e0:af:9f:07:1d:
7e:29:4c:16:7c:f0:dc:f7:83:5e:32:c3:76:cf:31:
8c:37:30:27:cd:99:10:c6:f1:28:b9:c0:7d:f4:49:
80:02:c4:4d:5b:ed:c2:2d:b7:4a:7e:ef:7b:0d:78:
d3:7c:17:d4:42:90:7a:ad:e3:0d:d3:df:9a:c0:2a:
66:65:a3:d0:7d:86:f9:0f:f1:a0:8c:08:58:a4:68:
dd:be:3a:c6:ca:c6:dd:42:f4:b7:4f:d4:c6:a7:0f:
91:d7:c7:0b:fd:15:c9:d1:b6:0a:27:86:6a:4e:b6:
b6:63:86:ac:22:64:8f:5f:69:da:97:77:9b:52:13:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:49:6B:F3:57:F1:35:AE:01:69:F2:86:C6:CD:03:A6:44:1F:81
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3e:5d:2c:49:bd:a5:15:e8:f1:21:29:5a:99:e4:5d:99:f4:
2c:c8:67:c8:5b:da:a6:1c:0b:43:31:eb:f6:0b:37:1f:e8:b5:
51:8e:8e:4a:7d:c1:3f:76:b1:21:70:6d:f4:47:8a:5e:e1:94:
85:9b:35:aa:e9:32:33:c8:08:36:10:e2:16:96:f8:6b:ba:84:
b9:d3:28:da:16:31:05:6e:e7:55:32:a6:e6:ba:93:39:5e:b3:
92:f1:60:7e:a9:82:b6:00:ac:88:42:a2:43:6e:ee:3d:bc:08:
32:dd:83:11:2a:cb:59:c5:52:f2:84:27:16:db:54:32:fb:86:
3b:7f:1e:4c:82:e8:63:4f:da:f1:0c:8b:59:cf:55:4b:e5:80:
8a:f5:46:63:57:fe:d8:10:6b:72:0f:df:36:a4:4c:0e:ca:bc:
cc:a3:ac:69:f7:c5:03:9c:3f:b6:8d:de:cd:f4:81:32:3b:6f:
fa:5d:3d:19:38:b3:1b:60:84:47:fc:d6:b8:2c:b1:c3:85:41:
08:78:2e:8c:68:bb:91:6f:79:46:23:65:a5:d5:93:ee:09:02:
3d:82:7a:ab:cb:ba:f8:ef:70:83:51:07:4b:4b:96:16:cb:e8:
88:8b:62:af:fa:cb:a9:a7:91:39:11:99:10:08:2c:7d:2b:73:
45:95:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:23:16 2026 by rpki-client