Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: JbyNkP4HCclNEmq/R7p7onDiGwW30drhH9gx68SW4lo=
Subject key identifier: 70:A4:D7:64:A1:8E:98:8F:D6:A7:F8:B7:00:DA:B6:25:D5:59:DD:BB
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019D2A04EAD91F94B8D635F2841EB2CF42D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0145
Signing time: Thu 26 Mar 2026 12:00:58 +0000
Manifest this update: Thu 26 Mar 2026 12:00:58 +0000
Manifest next update: Fri 27 Mar 2026 12:00:58 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: nY/i6czIIBqTqwcI2cxIFirsiLE/7erIrm+wjUxb4iI=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ea:d9:1f:94:b8:d6:35:f2:84:1e:b2:cf:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Mar 26 12:00:58 2026 GMT
Not After : Mar 27 12:00:58 2026 GMT
Subject: CN=70a4d764a18e988fd6a7f8b700dab625d559ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:98:f5:ef:39:9b:9d:4b:0c:3d:41:e2:4a:
c1:e1:6f:1f:e1:35:e3:4f:b4:96:4c:de:82:ac:ef:
0a:40:f7:b6:04:42:74:a7:87:a9:3c:f0:d4:90:15:
ee:7b:19:a5:37:c8:eb:38:ed:88:77:12:6d:d9:b5:
00:a3:ee:e1:7d:c3:22:a5:40:ce:cd:48:b4:a6:87:
47:0f:5b:2b:c1:34:25:92:e2:ff:89:39:d6:99:55:
b2:04:45:34:51:8e:cf:51:07:11:fa:e4:36:cc:ab:
83:2e:ab:e2:c9:43:80:f4:ed:2d:c2:5d:97:2c:53:
af:0b:e1:84:39:6f:25:a0:56:25:22:28:22:99:6f:
db:4c:97:91:9e:bb:68:10:d7:fc:d1:13:70:aa:ad:
7b:6e:65:b3:31:d7:d8:ee:5e:0d:bb:94:bd:7e:71:
c4:de:dc:9e:89:81:92:33:d4:fa:69:8d:25:ba:fe:
8d:4d:01:a2:b1:a7:33:42:6b:62:c8:29:19:52:51:
ee:70:94:28:56:a6:0c:8d:5b:51:72:08:06:85:39:
9c:26:aa:4e:6d:f2:13:b2:85:2b:f8:8a:d6:de:a9:
f6:45:04:b0:69:8e:76:c4:63:5c:25:36:26:cc:8f:
06:54:45:a7:23:c7:e8:6a:a4:46:ad:56:fc:e4:46:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:D7:64:A1:8E:98:8F:D6:A7:F8:B7:00:DA:B6:25:D5:59:DD:BB
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:1e:6b:2d:6a:1e:f6:4f:3d:8b:a0:1c:91:e4:f3:70:b4:
dd:72:41:e1:59:0b:6a:e1:1b:6c:bb:bf:17:09:89:c6:04:2e:
c9:24:4e:be:f3:e6:42:0a:8a:9c:87:e1:9d:f1:ec:85:32:fb:
fa:24:9b:e6:3e:19:66:f6:0c:a4:90:f1:12:20:39:b7:a6:6c:
35:29:52:cb:a5:a8:0a:35:d4:5d:40:2f:40:c7:48:2c:cb:c0:
32:30:ad:1c:46:28:86:a9:5f:50:f1:d6:e3:6d:e4:d2:c5:1e:
1e:38:f6:a5:0a:e6:7a:74:ff:51:be:d8:18:5e:50:8f:30:62:
f6:1f:d1:a5:51:7e:83:62:52:a7:b9:37:6d:fe:9a:d7:f4:d0:
e5:29:c4:28:9a:d7:ef:27:80:0a:bc:0b:62:3c:1d:68:03:4e:
fe:57:d4:ec:d1:60:57:cd:3f:08:69:bd:a5:f3:9c:7c:45:6c:
97:47:4e:27:55:cf:b3:76:af:7d:2a:38:f9:82:e3:04:c7:2e:
83:00:cc:5e:40:59:b2:0d:7d:89:6b:2b:c0:8b:42:85:17:ff:
4d:04:91:ec:cb:9b:62:ec:2d:d9:28:46:7f:83:04:b2:d0:8d:
69:aa:38:3a:1d:48:d8:e8:c5:8d:82:2f:35:40:f1:48:d2:63:
a1:29:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:16 2026 by rpki-client