Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: hziSBYizL2Kv4WP+p3vvIeJDJbtTK5spOlQIVLP7IKA=
Subject key identifier: C1:00:12:23:12:32:EC:FE:F6:12:D4:C3:49:BC:8A:81:40:C5:CF:FE
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019D2929AB42CBE7E3CE8EDCAE3017ED3FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 09D4
Signing time: Thu 26 Mar 2026 08:01:29 +0000
Manifest this update: Thu 26 Mar 2026 08:01:29 +0000
Manifest next update: Fri 27 Mar 2026 08:01:29 +0000
Files and hashes: 1: vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (hash: o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: FEg4IzPQy0Q86jdZBSmXykBSeEGRkZX1/GDAXV6PPV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:ab:42:cb:e7:e3:ce:8e:dc:ae:30:17:ed:3f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Mar 26 08:01:29 2026 GMT
Not After : Mar 27 08:01:29 2026 GMT
Subject: CN=c10012231232ecfef612d4c349bc8a8140c5cffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:4a:46:60:e9:73:33:80:36:a5:6a:bd:18:
64:09:14:19:ce:85:4a:d0:d1:e2:fe:a3:8a:6c:f5:
4a:29:cc:c1:f3:76:9c:d6:2d:c4:5d:40:74:ac:dd:
05:1f:10:0f:c8:9b:a2:3e:b1:42:a5:c6:12:a7:7b:
a8:bc:ff:98:95:5d:e7:44:1f:28:cd:50:60:10:dd:
9c:1d:bf:40:9f:2a:ad:c6:d3:58:fb:72:e2:72:5b:
84:8e:d7:c9:86:a3:8a:22:e8:6a:21:e7:bb:6f:87:
83:88:84:dd:c3:65:46:fb:1d:6b:06:e8:b0:d0:df:
97:c5:a8:1e:01:42:c0:13:f6:3b:68:f6:71:57:68:
f8:95:4f:20:9d:f5:d6:0c:fa:17:e4:93:38:ac:d2:
8f:ab:ec:36:14:2f:86:0e:64:4d:fe:62:11:86:e3:
13:5e:d6:02:b1:c3:f1:14:38:8e:0e:10:55:fc:fd:
7d:c2:24:ee:b0:b2:5a:3e:9e:2c:4d:f1:f1:38:a8:
8a:c9:33:6f:e2:f1:04:2a:93:35:9d:ed:0f:ea:a2:
7d:86:13:09:15:02:20:38:21:2d:51:07:5e:05:70:
cd:bf:23:47:e5:3f:c5:55:8b:34:bf:2a:10:31:a4:
06:a5:bd:63:da:6e:8a:bc:23:73:9b:b9:42:53:8f:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:12:23:12:32:EC:FE:F6:12:D4:C3:49:BC:8A:81:40:C5:CF:FE
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:c1:48:aa:02:6b:24:7d:50:89:5c:74:00:dd:e7:28:92:
12:b5:8d:cd:f3:e1:21:c5:23:93:f9:60:bd:f9:fc:16:3f:6f:
fc:64:40:83:30:04:f6:f2:ca:e2:42:72:71:6b:37:d5:30:b6:
3c:80:e5:a9:96:a5:32:f4:31:d1:2c:10:77:93:65:c5:76:0d:
ec:9a:8a:b3:85:45:b1:cd:eb:a0:34:5b:f2:98:43:58:c2:99:
80:94:22:7e:71:e0:d1:83:ad:ee:f1:de:ca:03:3a:84:a3:81:
bb:ad:92:86:fd:cc:9f:38:35:9a:ce:02:1d:c6:c8:76:98:a2:
da:4b:93:89:ff:27:8a:67:a7:74:fd:88:61:46:0e:27:ac:96:
2e:ef:ef:79:f0:11:f9:3c:69:46:07:55:09:d0:6b:ed:f0:b4:
9a:20:6d:04:8b:03:8f:9f:b0:ae:88:04:e5:ad:8e:7b:cd:6b:
be:e1:1a:94:27:ee:a3:d3:50:aa:5a:97:d9:f5:40:ea:89:d5:
49:3d:a0:be:33:65:93:fd:64:c2:33:5f:b5:fd:db:fd:e8:1b:
5c:fc:26:59:cf:ee:79:72:d4:ed:08:b0:80:ca:ce:3a:c2:f8:
e8:54:14:f1:e7:4f:27:2d:d7:50:d0:1a:45:f3:09:4d:ca:77:
14:7f:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:47 2026 by rpki-client