Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: lUemRSH7vbzEIuw0ZNDekdIX/Mtk+tftWsIFFK7qBxE=
Subject key identifier: 34:A2:C0:29:35:12:BA:61:B8:CA:4B:12:94:5F:18:D7:B1:12:5D:6B
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019E30A92A027E78B48A84C3DDA02ADD29B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1650
Signing time: Sat 16 May 2026 12:00:53 +0000
Manifest this update: Sat 16 May 2026 12:00:53 +0000
Manifest next update: Sun 17 May 2026 12:00:53 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: +PqdxYSMAD67Pt5SDVe42sZ+4WBmGuIMNY4rU5WM768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:2a:02:7e:78:b4:8a:84:c3:dd:a0:2a:dd:29:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: May 16 12:00:53 2026 GMT
Not After : May 17 12:00:53 2026 GMT
Subject: CN=34a2c0293512ba61b8ca4b12945f18d7b1125d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:02:6b:86:52:b6:9f:55:64:13:c6:29:54:
77:18:4c:ee:28:8f:bb:df:ba:9d:26:01:76:4d:71:
7a:f7:1e:ca:1e:0f:ca:09:c2:25:e9:cd:e1:0a:87:
7b:19:9b:d3:ea:09:77:4b:8e:8e:b7:4b:77:16:48:
39:86:e3:23:2f:e4:47:86:83:29:bf:8d:fc:00:3f:
98:66:a8:c0:53:75:13:c9:8a:ff:b5:6c:b6:a0:1c:
b4:d1:70:a2:78:d5:e1:a9:f6:95:6a:99:f4:0d:31:
ea:96:bd:55:cc:d7:af:4b:d9:65:08:7e:77:2f:3d:
a2:0b:e4:d0:c5:c0:0a:eb:22:c7:04:a6:1b:b8:3f:
b2:b6:3c:37:7b:3d:63:89:14:1c:1f:b6:95:7e:34:
9c:80:bf:4f:6a:a7:20:77:0d:93:ea:96:ed:b5:00:
77:af:c5:cc:61:eb:65:a6:c3:e2:3b:5a:c5:04:d0:
03:e7:f4:4e:06:b4:49:ce:dc:3d:f1:86:e7:42:ef:
60:d1:cd:a7:fb:84:ab:ac:d9:9d:10:94:12:99:77:
ba:18:73:46:9c:5a:ce:f6:b6:6b:25:05:7b:e9:21:
e9:65:cd:c4:80:99:d7:c8:1a:11:76:65:63:a5:68:
15:1a:74:02:73:c9:3f:d5:83:ce:51:88:9d:e5:08:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:C0:29:35:12:BA:61:B8:CA:4B:12:94:5F:18:D7:B1:12:5D:6B
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:26:38:a7:42:d7:7c:d5:b9:2e:fc:26:fd:a3:e2:68:85:d3:
73:ab:13:00:ec:5a:88:db:03:a3:ef:c4:e9:d7:f8:b9:f6:a7:
fb:12:16:5c:3b:dc:87:25:3d:ec:58:d5:af:ad:26:1b:dd:99:
fe:13:9c:e2:2d:6c:38:8a:76:8c:3f:95:9b:05:11:51:bc:0b:
e4:35:e2:e3:80:36:8d:ba:4f:81:c9:3e:5b:80:5b:b7:31:64:
67:e1:d3:bd:b5:a6:a6:78:e6:bb:36:28:45:8a:66:ee:09:4b:
86:b6:5c:38:5a:c8:88:64:ec:08:d1:0f:12:94:32:d0:83:d9:
10:d0:54:d7:8a:26:ef:bd:67:dd:a5:6a:61:ba:56:14:9f:b9:
73:a5:a5:b1:af:a3:5f:13:cd:0f:59:2d:bb:6b:ef:71:c2:f0:
e2:3c:80:1d:c4:03:fe:60:fa:9a:5b:fb:f3:c7:5e:4e:10:12:
66:e9:a5:a2:d5:fa:0b:ce:30:e5:c6:f0:af:e2:c6:dd:89:fe:
dd:76:0b:fe:3e:28:42:77:c4:88:54:3b:16:b5:1c:bb:18:62:
5c:86:6b:1f:84:fc:4b:dd:ec:b3:f5:b1:c2:89:35:36:7f:e9:
1d:6f:7f:88:1a:d9:5f:a5:98:2c:08:b6:6d:0a:e2:b5:e2:63:
0b:b0:80:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqSoCfni0ioTD3aAq3Sm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjYwNTE2MTIwMDUzWhcNMjYwNTE3MTIwMDUzWjAzMTEwLwYDVQQD
EygzNGEyYzAyOTM1MTJiYTYxYjhjYTRiMTI5NDVmMThkN2IxMTI1ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzUCa4ZStp9VZBPGKVR3GEzuKI+7
37qdJgF2TXF69x7KHg/KCcIl6c3hCod7GZvT6gl3S46Ot0t3Fkg5huMjL+RHhoMp
v438AD+YZqjAU3UTyYr/tWy2oBy00XCieNXhqfaVapn0DTHqlr1VzNevS9llCH53
Lz2iC+TQxcAK6yLHBKYbuD+ytjw3ez1jiRQcH7aVfjScgL9Paqcgdw2T6pbttQB3
r8XMYetlpsPiO1rFBNAD5/ROBrRJztw98YbnQu9g0c2n+4SrrNmdEJQSmXe6GHNG
nFrO9rZrJQV76SHpZc3EgJnXyBoRdmVjpWgVGnQCc8k/1YPOUYid5QihaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSiwCk1ErphuMpLEpRfGNexEl1rMB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyY4p0LX
fNW5Lvwm/aPiaIXTc6sTAOxaiNsDo+/E6df4ufan+xIWXDvchyU97FjVr60mG92Z
/hOc4i1sOIp2jD+VmwURUbwL5DXi44A2jbpPgck+W4BbtzFkZ+HTvbWmpnjmuzYo
RYpm7glLhrZcOFrIiGTsCNEPEpQy0IPZENBU14om771n3aVqYbpWFJ+5c6Wlsa+j
XxPND1ktu2vvccLw4jyAHcQD/mD6mlv788deThASZumlotX6C84w5cbwr+LG3Yn+
3XYL/j4oQnfEiFQ7FrUcuxhiXIZrH4T8S93ss/Wxwok1Nn/pHW9/iBrZX6WYLAi2
bQriteJjC7CA+w==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:00 2026 by rpki-client