Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: MeWF+fUSn70KzS5F5Q3h6xYsvhRlJbruLg7fD5cBCNY=
Subject key identifier: 73:42:76:ED:52:D6:D1:DE:DB:3B:34:8F:4F:C6:EA:7C:42:F2:57:61
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019D37895591DBA9BC4DB7FA737B70D390A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 15CF
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: iUwtEAO4lY9fTr9A5aoFdXcA/6LLHCiJ4oa0O33BEAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:55:91:db:a9:bc:4d:b7:fa:73:7b:70:d3:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=734276ed52d6d1dedb3b348f4fc6ea7c42f25761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:c5:4c:b0:31:86:00:f9:70:2b:a5:fe:e0:
67:3e:99:8d:b4:d0:c4:a6:e9:6d:d9:84:5c:46:08:
58:c4:3c:b8:17:0d:6d:ef:57:bc:6a:05:65:77:c2:
00:ee:7d:15:ed:74:c4:43:31:35:a7:cb:64:5b:a3:
c1:5c:bc:78:a1:e1:fb:b8:7e:32:63:0f:9c:8c:bb:
8c:84:a5:38:d6:83:12:66:58:7f:af:54:24:14:70:
5c:62:67:cb:36:7a:92:ae:f7:75:12:aa:da:3d:33:
34:34:f9:6e:ec:d9:6b:6b:4a:f4:29:98:62:af:5b:
f5:a7:c7:d7:f0:32:f0:5a:4e:ce:d5:f6:7a:dd:14:
5e:26:73:19:52:bb:46:7d:ee:29:94:cd:1c:87:74:
1b:9b:93:49:56:55:94:f1:07:81:7e:ab:f6:5f:7d:
39:64:22:e7:b2:bc:2c:1b:e2:4a:2d:ce:6a:96:5d:
eb:46:83:ae:17:80:8c:58:57:ea:5b:6b:ad:37:1c:
d9:57:de:6d:92:db:35:75:cf:5d:6e:40:99:d2:8f:
eb:1e:dd:0c:e9:f7:3d:88:d9:47:37:92:ea:71:98:
6e:a8:e1:4a:f7:8c:fc:00:5b:39:d7:58:08:e0:a3:
20:91:25:31:e3:50:ce:73:d0:9d:70:31:d8:ca:bb:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:76:ED:52:D6:D1:DE:DB:3B:34:8F:4F:C6:EA:7C:42:F2:57:61
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:27:db:18:e9:7e:33:55:ed:a1:b4:39:91:96:8c:e3:c4:fb:
54:23:1d:8f:a3:46:af:4c:56:0b:31:6c:6d:63:22:48:f3:f1:
d2:8d:13:86:12:63:99:99:23:6d:72:c9:38:c6:a3:5b:6e:d5:
5d:a3:bf:b3:72:d4:bb:83:49:78:9e:23:e6:ca:55:d3:43:a2:
e8:f6:32:c2:41:42:3d:63:51:37:f1:68:95:5c:41:b0:78:63:
f2:47:79:a2:98:0a:73:5a:2c:88:18:52:3c:2b:f1:ca:be:91:
0d:6a:61:77:7b:eb:81:ac:7f:4d:dc:ec:48:82:0d:bb:dc:bf:
8d:fb:6c:ff:45:0e:8d:93:e6:20:e5:a7:cf:79:91:c8:0c:78:
30:98:ed:52:98:94:cc:41:b9:0b:71:cb:f1:ef:0e:8a:08:28:
cb:46:02:5d:2f:01:24:44:ab:8c:45:26:67:b6:f2:cb:cb:1d:
7a:7d:18:7d:cb:0d:08:20:15:02:c6:39:13:6d:15:c9:5b:8f:
31:72:b4:c9:44:91:1e:12:1a:6e:47:0d:47:4b:cf:0b:1c:56:
64:dc:a3:fd:3c:27:7f:ad:9e:ad:e4:2c:6a:c6:49:52:50:4a:
0b:b6:3e:58:40:49:19:b8:76:34:59:a1:56:e3:28:9d:17:da:
f4:ee:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client