Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: G2kyOh5xuRZxxG+9zskC1iWeNABjW3+vIP+kIxvr5A8=
Subject key identifier: 48:BE:CE:B0:AD:DF:C6:85:51:63:66:09:13:38:58:96:C1:46:47:2D
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019F1867D9CA7F35180D54ED83C1CBF38523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 16C8
Signing time: Tue 30 Jun 2026 12:01:26 +0000
Manifest this update: Tue 30 Jun 2026 12:01:26 +0000
Manifest next update: Wed 01 Jul 2026 12:01:26 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: K1K2VYTOPK7jam/y5UG8DYXRc+5iY390/xeHhmeTlfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:d9:ca:7f:35:18:0d:54:ed:83:c1:cb:f3:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jun 30 12:01:26 2026 GMT
Not After : Jul 1 12:01:26 2026 GMT
Subject: CN=48beceb0addfc6855163660913385896c146472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:59:90:70:eb:26:67:ae:17:e6:97:c9:ff:
84:2d:6c:af:02:a8:92:f2:ff:2d:15:4a:82:8f:b3:
e3:7e:5d:18:c9:07:36:5a:2a:fe:15:94:85:b5:29:
fd:60:a6:29:96:4f:8a:60:59:1b:48:68:d4:d6:12:
10:cd:36:6b:12:b3:43:0c:d9:5b:4c:ef:87:39:10:
ab:28:bb:d1:64:8a:43:a8:72:4c:81:91:3f:60:4c:
37:24:b0:bd:3b:cb:f4:f5:6b:04:5c:35:7d:db:ed:
db:72:26:ba:0f:26:75:8c:d5:94:51:f3:50:13:e7:
66:53:87:dc:c1:c4:fe:a7:f1:f2:3f:c0:0b:68:24:
f4:65:99:44:c1:9d:15:b7:73:db:83:66:49:35:da:
da:6e:bf:bc:f7:4c:a8:b3:ea:ee:1b:ad:70:80:12:
b8:79:ca:f2:35:94:c9:66:4d:70:2d:42:30:cc:43:
6b:ba:99:06:c5:b9:89:de:b6:0f:27:26:bb:aa:2e:
78:bd:ac:8e:41:12:48:30:25:97:45:08:4c:bb:12:
e5:72:19:ad:89:82:79:05:e5:7f:3c:0c:90:a5:95:
6e:0f:dc:38:b5:42:8b:28:9c:80:8c:fb:a1:a9:fb:
a8:04:c0:1c:6f:09:ce:fe:45:64:6f:e5:12:ff:1b:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:CE:B0:AD:DF:C6:85:51:63:66:09:13:38:58:96:C1:46:47:2D
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:83:7b:23:d3:8c:a5:3a:ec:bf:be:d6:71:d3:91:d0:eb:
91:69:20:3b:7b:4e:87:b4:1d:fe:2b:74:fb:02:c5:8e:5c:0a:
c5:a6:1d:5d:f3:82:61:e3:a6:44:37:33:f7:bb:09:bf:87:48:
57:c4:7e:f4:6f:b1:95:52:b5:0e:a8:2c:5a:f8:04:03:06:6f:
59:49:4d:5e:e6:e8:30:ba:28:d2:31:7d:6a:34:59:ad:0a:a3:
08:c9:84:7c:f6:5b:f1:85:68:03:0d:42:cb:b9:d0:de:1f:68:
0d:74:ce:58:3d:f8:40:ad:da:32:fe:d8:a0:7f:c9:ba:4c:84:
ed:70:42:10:4f:45:28:5d:58:b7:f1:f8:a1:d3:67:9b:c6:bc:
e5:8d:e1:7f:12:e6:ac:44:75:84:e6:9a:5f:04:3b:4c:fc:bf:
98:27:91:0d:e2:16:09:97:08:cd:a7:0e:be:93:82:b5:43:33:
3e:3e:33:57:36:00:d3:73:9f:d9:b2:70:f7:23:5f:bd:f3:b7:
a4:e4:a2:3b:0a:18:51:49:7c:5a:38:9d:c8:a4:42:97:58:ea:
86:8e:9f:a8:42:2f:bb:89:7f:cc:72:37:9a:2f:48:4b:69:32:
ef:c5:8f:01:42:4c:74:e7:95:d0:cb:39:9c:ce:4c:de:b0:c9:
9c:ea:fa:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ9nKfzUYDVTtg8HL84UjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjYwNjMwMTIwMTI2WhcNMjYwNzAxMTIwMTI2WjAzMTEwLwYDVQQD
Eyg0OGJlY2ViMGFkZGZjNjg1NTE2MzY2MDkxMzM4NTg5NmMxNDY0NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzlZkHDrJmeuF+aXyf+ELWyvAqiS
8v8tFUqCj7Pjfl0YyQc2Wir+FZSFtSn9YKYplk+KYFkbSGjU1hIQzTZrErNDDNlb
TO+HORCrKLvRZIpDqHJMgZE/YEw3JLC9O8v09WsEXDV92+3bcia6DyZ1jNWUUfNQ
E+dmU4fcwcT+p/HyP8ALaCT0ZZlEwZ0Vt3Pbg2ZJNdrabr+890yos+ruG61wgBK4
ecryNZTJZk1wLUIwzENrupkGxbmJ3rYPJya7qi54vayOQRJIMCWXRQhMuxLlchmt
iYJ5BeV/PAyQpZVuD9w4tUKLKJyAjPuhqfuoBMAcbwnO/kVkb+US/xu0iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi+zrCt38aFUWNmCRM4WJbBRkctMB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALliDeyPT
jKU67L++1nHTkdDrkWkgO3tOh7Qd/it0+wLFjlwKxaYdXfOCYeOmRDcz97sJv4dI
V8R+9G+xlVK1DqgsWvgEAwZvWUlNXuboMLoo0jF9ajRZrQqjCMmEfPZb8YVoAw1C
y7nQ3h9oDXTOWD34QK3aMv7YoH/JukyE7XBCEE9FKF1Yt/H4odNnm8a85Y3hfxLm
rER1hOaaXwQ7TPy/mCeRDeIWCZcIzacOvpOCtUMzPj4zVzYA03Of2bJw9yNfvfO3
pOSiOwoYUUl8WjidyKRCl1jqho6fqEIvu4l/zHI3mi9IS2ky78WPAUJMdOeV0Ms5
nM5M3rDJnOr64w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:56 2026 by rpki-client