Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: 06mPN9aAUikXHeThqXUwrkDF1jOZ5iUlNiEYS/OQ6Mo=
Subject key identifier: A1:22:20:85:06:67:83:FA:7C:DA:29:59:D2:89:77:75:54:4C:76:D3
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019D3A54307A2108625ACA15FC61EA115642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:01:29 +0000
Manifest this update: Sun 29 Mar 2026 16:01:29 +0000
Manifest next update: Mon 30 Mar 2026 16:01:29 +0000
Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: sXOhEulYUzGnbc3joJCQkmNXLaqd5sgYdG2kEshqEPk=)
2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:30:7a:21:08:62:5a:ca:15:fc:61:ea:11:56:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Mar 29 16:01:29 2026 GMT
Not After : Mar 30 16:01:29 2026 GMT
Subject: CN=a1222085066783fa7cda2959d2897775544c76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:b5:ac:10:47:63:73:88:b6:1f:c1:34:6f:
eb:15:41:22:60:e9:48:fa:d7:e9:0b:e9:35:eb:60:
60:49:39:62:88:e7:09:3e:7d:dd:cf:ff:58:f9:cd:
db:7b:c5:97:7e:34:71:17:cd:94:77:ca:49:21:fa:
63:cd:00:4a:09:45:ba:59:1f:74:80:77:e2:d0:b9:
bf:a2:5b:c8:02:4e:ca:51:f9:65:fd:81:6f:38:f6:
96:96:ff:99:8b:32:13:b6:f8:c5:0b:b3:5c:90:be:
1f:82:41:ce:12:ac:61:70:bd:b6:2a:4b:fd:d2:f6:
c6:53:b2:17:9b:b3:3c:be:b7:be:16:d2:76:36:8d:
7c:38:fb:54:15:f9:8a:2d:1d:83:84:37:08:bc:d7:
23:43:23:57:20:54:3f:1e:e9:fa:a7:2e:9e:ff:90:
97:bc:97:a9:3b:72:94:f6:ce:4f:38:d0:a7:06:c5:
8a:8d:68:ca:07:e8:b4:98:de:cf:5f:3e:63:30:ea:
5c:da:80:30:07:99:11:1c:2b:39:bd:de:90:a2:80:
4b:24:77:b8:27:82:b4:10:60:ec:ad:c9:1b:7a:9a:
df:0f:a6:f5:a5:13:08:87:fb:7f:95:90:e6:20:c1:
9f:4f:cd:ed:f1:2b:85:81:f8:03:3f:b4:d0:59:34:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:20:85:06:67:83:FA:7C:DA:29:59:D2:89:77:75:54:4C:76:D3
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d0:4d:19:ee:7a:26:a3:06:03:51:97:f0:c5:4b:14:13:33:
34:ec:59:67:68:ee:9f:97:8e:8a:e0:4b:cd:70:ee:7e:b7:c1:
cd:59:95:8f:28:32:1b:5d:63:73:ff:17:72:7e:be:ba:44:0f:
52:d9:fb:9e:d6:e0:d1:39:83:5f:ac:08:4c:e5:4d:0e:72:27:
e4:dc:ed:01:dc:8c:ac:d2:39:4d:96:53:26:6c:9f:6d:bc:96:
56:29:ab:d1:97:ce:0c:5d:53:ca:93:a5:af:43:94:8c:5a:ff:
eb:a4:cd:c2:cf:9f:7f:43:92:97:60:62:79:56:bc:57:24:f4:
0b:6b:23:ee:4c:1f:ec:b4:90:17:07:ba:9b:82:0e:04:88:3e:
bc:b0:90:fe:3b:e0:99:0b:e5:d3:b2:36:f6:b5:61:70:9d:a5:
89:c0:e7:88:c9:4c:2f:16:3a:35:ea:aa:43:16:de:03:62:0e:
9f:1a:1a:fc:a7:6a:50:00:77:25:32:fb:d1:53:7a:99:49:25:
37:39:72:eb:f0:a0:56:f9:55:34:9a:ac:54:27:e8:a4:19:13:
ce:d3:65:b1:d9:b8:7a:57:2a:17:93:a2:c7:8e:f1:a9:6d:ef:
a3:d4:ae:a4:f9:50:cc:c9:6d:72:22:4c:9b:3a:f7:30:5c:65:
2d:93:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:22 2026 by rpki-client