Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: h3z0FcIuZ1szlH9CnDeTuF64iByAi2jUHHJE0vmXfdg=
Subject key identifier: 80:B5:FE:E3:C6:6A:91:DB:27:42:95:12:09:BE:AA:16:58:82:9A:2F
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019F9211B74BEB9603BE9C4DF0472A57D343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0284
Signing time: Fri 24 Jul 2026 03:01:02 +0000
Manifest this update: Fri 24 Jul 2026 03:01:02 +0000
Manifest next update: Sat 25 Jul 2026 03:01:02 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: 3twOSoIyukBcxnD2lb4zhs+6yumpHHD4PMtAsbMBiRk=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b7:4b:eb:96:03:be:9c:4d:f0:47:2a:57:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Jul 24 03:01:02 2026 GMT
Not After : Jul 25 03:01:02 2026 GMT
Subject: CN=80b5fee3c66a91db2742951209beaa1658829a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:6b:d2:b6:37:32:4f:ff:df:89:ed:ea:e0:
c9:5c:29:a0:97:e1:ea:95:1e:75:86:50:54:88:f7:
06:ee:dc:ae:e3:0b:96:cf:07:00:0b:26:27:45:c8:
9e:d3:60:2a:64:9c:71:5c:ac:79:36:89:79:b5:48:
e1:7e:54:71:cd:78:2c:0d:5c:97:a3:82:ee:8a:a4:
a7:e1:6a:6c:d3:16:4d:a0:7f:93:ea:64:75:e1:fc:
3d:23:7e:af:fb:3c:dc:95:55:4e:66:1d:76:a9:14:
78:6f:fb:b4:b9:e9:93:4e:82:6b:af:54:6c:47:7b:
13:7d:1b:de:9f:43:d8:ee:2b:e4:90:0e:e1:d0:e4:
9c:f1:21:43:38:46:5b:6e:e0:d7:f5:51:0a:bd:9a:
60:12:78:19:b1:fb:5d:f4:fa:36:e3:e9:ae:5b:82:
06:4d:c7:c3:41:fe:6d:94:da:17:4d:b4:b1:f9:82:
54:c7:f6:23:4f:a6:83:7a:3c:29:3e:f2:95:2b:45:
10:1c:ba:f0:3d:82:ea:5b:dd:3f:3b:19:c8:a5:1c:
66:72:34:ef:e1:ea:9d:47:ea:ba:79:b8:05:7d:aa:
da:1a:29:01:db:5e:16:9c:74:c5:c6:66:d2:3e:4d:
7e:dd:4f:97:e2:99:72:24:62:85:95:3d:97:e8:d5:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B5:FE:E3:C6:6A:91:DB:27:42:95:12:09:BE:AA:16:58:82:9A:2F
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:24:84:5c:fd:ae:0a:ca:20:aa:df:21:a4:e2:6f:08:3b:
9f:ad:0f:db:d4:fe:6f:74:b8:c0:7b:ae:7c:4b:60:89:5e:aa:
d3:64:09:13:fa:65:2a:8a:c1:ee:06:f1:3a:41:ae:d8:e1:b2:
81:3b:2f:94:d4:e6:ca:06:fd:bb:aa:12:0c:40:b1:03:f1:3f:
ac:8c:a6:ba:5a:f0:02:ed:4d:12:db:98:fe:c0:20:61:0b:b9:
ad:c1:79:09:29:41:35:8d:8f:d7:36:f8:ec:be:9e:0a:54:a1:
1f:2a:8d:69:28:82:dc:7b:75:c8:41:d7:0a:0a:e4:4d:25:6d:
6b:e1:9e:6e:9f:6f:1f:9f:c4:b8:b1:62:97:cd:7a:80:a0:b1:
35:6e:8f:eb:b0:2e:18:95:76:01:2a:e5:ce:ee:9b:b4:ea:54:
97:2c:b6:06:55:37:46:f9:16:10:3c:50:15:df:ad:06:91:a3:
86:21:55:6c:76:62:01:64:34:cb:a0:15:b9:10:90:e4:0a:5c:
35:86:d2:24:4d:33:9d:34:03:c9:00:07:4d:73:43:bf:19:14:
eb:f0:d9:41:2e:2b:05:6f:7e:cc:be:ae:e7:ff:b2:c0:33:4c:
30:83:8c:9a:f7:30:39:b7:4a:51:7d:16:74:0d:33:da:27:5a:
c5:b3:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:05 2026 by rpki-client