Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: ffGP+paUTOdYDIymh8DJGeVVP1B301hZ331Lps5fHow=
Subject key identifier: 4B:D2:46:A0:7F:F2:47:7E:E2:72:83:A8:FD:63:E8:0B:87:04:38:4A
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019D2816B12D24AE7EE0F46D7E4257E62CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0144
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: 3/4e4xcW0oGq4S0YQqFUSDCUrSR2nGa50Eoqer+745E=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b1:2d:24:ae:7e:e0:f4:6d:7e:42:57:e6:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=4bd246a07ff2477ee27283a8fd63e80b8704384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:d3:f5:b4:45:6c:d5:1c:96:7e:92:23:ab:
33:ae:5f:ca:39:bb:c1:9f:f3:df:dc:4c:50:cd:e8:
fd:9a:bf:cf:a6:01:74:69:d8:55:90:43:1b:b5:2c:
fd:6e:8d:39:7a:81:fd:81:f7:ab:b5:38:90:e9:ac:
6f:be:57:d1:58:c1:3c:ea:0f:ae:82:58:0c:06:4e:
59:38:63:47:06:83:18:62:fd:3b:b3:38:8a:0b:25:
b6:b4:ff:f9:de:d3:33:d5:bc:bd:3d:26:aa:9d:4a:
8e:9d:5f:83:66:20:96:7b:d8:ce:dd:86:d6:78:2e:
b7:11:52:ca:b3:81:02:2a:06:13:1e:eb:20:af:bd:
5e:64:1c:86:86:81:93:2e:b5:bc:61:ff:2d:77:81:
58:0f:b7:5d:f6:86:d8:f1:46:e4:a6:70:27:cf:2b:
93:bf:a7:fa:d1:3f:1f:a7:03:31:32:c9:a3:5d:2b:
94:2a:0c:09:6c:de:60:79:60:d0:b1:80:c8:6c:80:
82:0d:ae:eb:b4:27:0f:db:d6:7e:42:55:3b:03:48:
7f:5d:f3:d3:e5:9d:32:07:7c:be:64:17:88:11:c9:
6d:fc:95:76:6a:ea:c7:8a:c0:0e:2a:2c:93:2b:03:
13:a0:ca:c1:7d:91:cd:40:25:36:3a:5c:29:cc:9f:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:46:A0:7F:F2:47:7E:E2:72:83:A8:FD:63:E8:0B:87:04:38:4A
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:61:fe:b7:3e:56:a3:60:f3:9f:4d:9e:b8:3b:5a:a8:86:db:
6c:90:a1:bf:30:65:c4:1d:93:34:ed:b8:51:36:fe:4a:c9:bf:
d4:0a:56:10:17:6c:77:dd:c6:4b:7f:7f:15:33:a4:e4:3e:be:
fd:e1:7d:27:e2:b2:15:32:41:c6:a3:45:bd:a9:46:3c:27:c8:
d7:ed:ca:d3:fa:6e:46:e2:7b:d8:99:b3:a7:f7:41:c6:38:58:
a4:86:46:bc:d0:4b:1c:bd:60:2b:56:47:23:09:9c:29:ca:7a:
40:3e:d6:e4:b1:4d:07:a5:69:4f:1f:4f:fc:c3:f6:bf:4f:4a:
a6:cb:6b:0c:0e:bb:83:4d:a4:7c:26:c6:e5:9d:d8:08:62:78:
2f:0c:9a:5b:d2:54:0b:54:e5:d3:99:ac:c0:50:a8:0a:2c:a1:
a9:14:2d:7b:6a:24:72:dc:e7:b3:17:c5:f1:f4:90:45:e9:78:
ec:79:4c:e6:2e:93:aa:37:c9:6f:93:67:fb:67:fb:1f:13:d1:
97:89:e9:46:bb:49:ff:56:f3:79:bc:92:bf:9a:00:9c:cf:38:
cb:1e:52:b8:60:56:c3:b6:ef:f4:85:f7:45:ff:54:12:f8:7c:
18:67:37:c8:27:cd:9e:34:18:83:56:50:e4:b5:d4:4b:1b:0e:
f0:51:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:46 2026 by rpki-client