Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: 67S0x5NWqMuYc7yc7VopZGHMP3sN9dwJFY4bkTafnTg=
Subject key identifier: C5:86:97:84:21:CD:9C:D6:B8:2B:86:74:0B:6D:D4:D5:A2:7F:19:8A
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 01A13ECB7B4ABE50DC2C59ACDCF83DF8C5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 17E5
Signing time: Thu 15 Oct 2026 09:01:24 +0000
Manifest this update: Thu 15 Oct 2026 09:01:24 +0000
Manifest next update: Fri 16 Oct 2026 09:01:24 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: XkGROevKMKv7jM3w4PQ36mu+N6mDdAbmbUKxeaPApBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:7b:4a:be:50:dc:2c:59:ac:dc:f8:3d:f8:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Oct 15 09:01:24 2026 GMT
Not After : Oct 16 09:01:24 2026 GMT
Subject: CN=c586978421cd9cd6b82b86740b6dd4d5a27f198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:f8:9d:bd:1d:70:a3:be:53:90:50:4f:df:
58:dc:6c:eb:10:f3:f5:be:53:1c:33:bb:bb:df:3c:
30:fb:a3:24:f2:d9:a8:97:70:f2:87:c6:94:52:a5:
a9:aa:d2:7e:40:91:cd:65:13:6d:88:6d:10:4a:57:
21:c4:6e:a7:6a:ba:3b:fa:3c:6d:3d:db:08:36:79:
2d:a4:44:0f:f1:65:f5:df:6b:ac:75:8a:6f:a4:df:
fd:54:45:08:31:a5:ee:5f:fb:a6:76:fe:a5:5a:c3:
39:14:31:b9:26:7c:5c:3e:c6:f1:9a:5d:ea:b8:e8:
4d:62:56:e9:8d:01:24:64:f9:a4:e9:87:40:b1:2d:
f8:d4:1d:c6:33:b5:6e:14:ef:2e:0d:be:41:0e:cd:
29:b3:ca:63:ba:42:44:b3:97:b1:bc:2c:b6:32:f2:
81:6b:85:f1:af:a9:e9:f4:b8:7a:41:53:15:3d:22:
3a:cb:5a:9f:5a:33:9c:30:55:7b:e2:10:21:55:10:
7e:dc:df:53:c0:76:ee:e9:34:94:df:5d:49:2e:ce:
55:34:fb:e8:b9:09:71:ed:f8:bc:a8:d4:2f:f5:a1:
3e:42:0f:40:a0:ce:ab:15:ff:95:3c:a0:ef:e3:d7:
87:40:03:d6:0e:cb:b2:81:a4:65:4a:1a:73:61:12:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:97:84:21:CD:9C:D6:B8:2B:86:74:0B:6D:D4:D5:A2:7F:19:8A
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:4e:be:fa:38:7e:26:c2:df:d6:46:cd:0d:9a:53:8c:2e:
dc:6b:e0:df:54:e8:97:a2:30:64:f2:f2:fd:d1:ff:3a:53:ba:
3b:6b:c1:d5:05:61:3e:3c:7a:cc:9c:c9:fd:47:e8:68:b2:6f:
d9:69:97:7f:4f:3f:2b:63:1a:d8:cf:c1:b9:32:5c:19:c2:25:
b6:b8:a3:36:02:f1:4b:79:d5:59:4e:fb:cb:9b:31:a0:f2:36:
0b:2b:f6:ba:02:36:8e:6d:ad:18:31:36:c7:e0:e9:6d:15:48:
5a:91:d3:6b:99:dd:87:ba:8a:23:a3:b1:0d:d0:51:3f:ce:74:
2d:38:28:38:06:64:5b:54:4c:61:39:c2:35:28:d2:6a:dd:28:
02:d8:46:b2:1c:2d:b4:ad:98:2d:92:49:80:3d:13:88:a9:60:
f6:be:40:6e:c5:df:09:87:4a:43:31:c2:9c:64:58:54:a2:28:
8e:c0:ed:71:ce:10:31:ad:b2:3e:25:41:84:78:01:8e:fa:fc:
da:24:48:89:b8:f4:57:62:4e:52:7d:a4:5b:83:39:26:29:89:
70:78:38:21:a2:cf:9d:de:d4:b1:96:dc:97:7c:9b:11:ba:5e:
54:b5:41:7d:a7:21:e3:14:55:c4:f9:69:47:a8:da:47:6e:b5:
43:2f:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:23 2026 by rpki-client