Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: sKLZP9UKkRU35Y6IHNltvtkib9meCUUh7Q/K8g4XA6s=
Subject key identifier: 3D:05:87:0A:EE:49:B9:BD:07:E5:F5:D4:87:4B:92:25:2D:16:AD:17
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 01A106CA8E4467BEEE364C8180A555946D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0345
Signing time: Sun 04 Oct 2026 12:01:40 +0000
Manifest this update: Sun 04 Oct 2026 12:01:40 +0000
Manifest next update: Mon 05 Oct 2026 12:01:40 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: C5REqQzJGsFTBr5PgttypJH95dKeswwfNcZNVtFHH7M=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:8e:44:67:be:ee:36:4c:81:80:a5:55:94:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Oct 4 12:01:40 2026 GMT
Not After : Oct 5 12:01:40 2026 GMT
Subject: CN=3d05870aee49b9bd07e5f5d4874b92252d16ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:3c:72:23:8f:4f:fb:a6:44:89:84:30:81:
d2:af:36:ef:fa:67:33:18:5e:98:4f:35:79:79:2a:
1e:b1:0b:3d:6b:c1:c1:91:a0:89:81:28:d7:eb:30:
65:85:96:f8:34:a6:98:ab:22:f7:8b:0a:7b:d5:ac:
31:e2:ee:9a:ff:39:7c:86:3f:9b:71:b8:50:5c:2e:
1c:78:56:39:a9:5a:f9:4e:18:98:d9:80:3d:d6:c6:
d3:8f:f4:98:b6:3c:fe:17:78:bd:05:dd:29:b9:73:
1a:8b:38:1a:64:07:42:08:9e:09:5a:fb:51:ae:d6:
e2:ed:fd:d2:e0:4c:ba:3d:e3:5b:e8:62:59:c4:cf:
22:5e:a3:86:f4:83:f1:14:a8:8b:a6:54:b2:2c:a9:
9d:47:c1:81:2b:c9:57:e3:d2:06:55:b1:e3:43:95:
0d:70:ff:88:0e:76:d3:35:37:ae:2a:99:de:e6:2e:
82:d9:85:c5:f6:0c:f5:1b:af:98:c7:3b:91:cf:1b:
84:db:91:61:76:4d:11:46:7d:2a:cd:97:ad:47:25:
d4:d2:d8:34:aa:e1:30:dc:4b:81:af:aa:54:22:85:
7d:41:6a:0a:8e:84:55:c4:ce:f0:ec:5b:2f:b0:fe:
e4:34:6a:74:19:25:28:60:c8:8a:42:23:0c:be:30:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:87:0A:EE:49:B9:BD:07:E5:F5:D4:87:4B:92:25:2D:16:AD:17
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:12:ff:af:81:ed:74:17:9d:50:f3:67:84:e6:7d:48:16:
b6:09:bb:ab:f1:7a:40:65:49:30:bf:0f:25:61:8e:d1:d8:f3:
cd:fb:c1:c9:3e:2c:e1:24:18:64:49:74:43:fb:9d:c6:d4:e1:
82:ff:22:35:50:db:a3:72:43:f0:19:a1:d5:f5:9f:45:b0:5c:
b3:97:9c:be:fe:f0:e6:b1:9b:17:6e:80:44:5f:ea:b1:da:5d:
fc:c6:9c:50:cb:8e:61:0d:22:60:3c:dc:f2:a5:7c:8f:59:82:
20:7b:fc:00:f7:ca:f8:8b:e9:ef:4f:00:2e:e0:6d:4e:7f:df:
4d:da:3c:bb:c7:3b:c0:60:50:6d:04:b2:5b:df:44:14:75:01:
42:9a:d5:d4:49:30:ba:59:c1:2c:af:e0:22:80:8d:48:ef:9b:
ab:b8:1f:3a:d5:28:51:e0:2d:bb:9f:8d:83:79:1d:e0:c9:96:
94:75:8d:87:55:ac:24:dc:1e:03:3e:d2:1e:49:0a:c9:81:66:
71:d6:4e:7e:ee:f0:7d:11:ed:30:ed:9e:8d:bf:e5:d9:61:de:
f8:1f:e4:c4:de:27:46:c7:ed:d7:15:c0:ae:b2:b6:a2:f7:20:
af:13:5c:05:2a:26:e6:67:b4:83:05:51:94:11:0d:c5:b1:bd:
79:53:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:28:52 2026 by rpki-client