Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: AOxA8JrnIZ5ZN8y4agcqewuXVjY9fqyjWlu211QQPzU=
Subject key identifier: BD:67:92:F8:EF:5D:60:C9:C0:D2:AF:33:8D:BF:78:58:C6:03:FE:05
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 019D389BD86F2F017BBFACC969B02744291F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0CB6
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: HmEGIJk1usyQNH3ftTwcUgojhfuzFm3UTBnBZkPXtKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d8:6f:2f:01:7b:bf:ac:c9:69:b0:27:44:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=bd6792f8ef5d60c9c0d2af338dbf7858c603fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:13:c3:e0:4d:10:04:79:e7:0f:52:51:57:
96:c9:f3:c7:41:a7:a0:81:bb:8f:0c:b0:c3:1c:5c:
aa:10:8c:e0:7d:3c:1a:ea:41:50:08:66:f1:f9:38:
06:43:68:fe:87:07:49:97:b2:e3:b5:9e:69:af:f8:
10:3e:4f:89:ee:3d:f8:22:a4:0e:ea:b3:b2:fd:43:
32:64:13:82:d9:66:66:6e:20:e1:1e:2c:40:04:27:
5b:01:c5:ef:36:67:00:d1:c0:30:2c:0a:82:38:37:
1f:25:69:7b:8c:71:e5:6f:1d:ef:29:45:84:95:03:
1b:1b:58:77:33:36:29:60:3b:08:f4:c5:9f:59:33:
a0:c9:55:fe:37:30:ca:d4:06:24:19:39:6e:79:d7:
b1:4f:4f:f8:b8:4e:16:23:b8:a5:b6:1b:f9:e7:af:
45:85:d8:29:be:ca:cf:bb:8f:ff:e1:c9:b4:64:06:
bd:f0:ea:b7:8f:34:89:d5:ed:4b:ea:03:d8:02:13:
9a:c8:1e:43:61:e8:f7:5f:e3:84:4c:b0:b4:f8:74:
7a:92:7f:b7:0b:cb:a6:95:b8:d5:42:eb:5d:75:ab:
5f:75:4f:cc:2c:79:21:19:ec:2f:a1:46:e9:5d:db:
a2:6d:b3:39:46:11:f4:8b:0d:0e:91:b8:2c:82:cd:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:92:F8:EF:5D:60:C9:C0:D2:AF:33:8D:BF:78:58:C6:03:FE:05
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:bf:22:c8:14:cf:4b:f3:dd:83:52:56:5a:b4:4a:de:be:
a3:24:b6:08:1e:6f:dd:6a:3a:bb:0b:8a:9b:58:ec:f3:58:4d:
b7:60:1a:6c:6a:63:39:d8:a3:df:50:f5:02:98:bc:77:7b:6d:
28:2b:b8:e1:61:b6:a7:a1:9b:14:35:68:96:98:cb:eb:cd:9b:
5e:d5:1f:7e:8c:88:fa:ae:b3:04:ed:2d:0b:e1:df:16:f5:71:
7e:d0:f0:87:80:fd:a8:a9:b1:7d:54:cd:96:42:a5:fa:20:89:
31:e6:47:06:06:8f:1b:5f:c4:60:2a:62:43:ba:c7:76:6d:02:
1b:b7:e4:f7:04:17:70:57:97:ac:71:ca:f1:4d:56:4f:a2:4c:
52:1b:02:8b:a6:b0:0c:21:5d:5f:10:b7:09:b5:30:75:27:5d:
35:68:30:9f:99:1a:bb:97:49:4e:a9:ab:e1:47:7a:42:3d:e4:
0a:e4:9b:30:4a:6f:7e:5a:ae:55:64:ec:c4:50:d1:83:cf:90:
e7:ad:84:da:92:be:07:0d:66:23:a2:d0:e8:39:93:22:7f:42:
e9:06:81:bc:42:bd:75:31:8a:c6:ea:6a:19:d8:c1:57:75:19:
ff:77:b8:d7:c8:75:91:69:37:57:28:27:8c:dc:8e:97:b5:89:
19:d5:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:55 2026 by rpki-client