Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: SPBB5DxmcSmA27Q2iTpaa9n8d+v6+hAD8qdVSJGq8jk=
Subject key identifier: A8:15:62:73:8C:90:23:B6:04:83:80:A0:78:A0:D4:C0:E1:B4:53:8B
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01A0D5A727500B1EAB507A7A14085CECE8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 127D
Signing time: Thu 24 Sep 2026 23:01:36 +0000
Manifest this update: Thu 24 Sep 2026 23:01:36 +0000
Manifest next update: Fri 25 Sep 2026 23:01:36 +0000
Files and hashes: 1: 41p3kpRJWL2MgitfF2i70VkmycM.roa (hash: gLJxBjMA5TyS6tzrLh6xE9DIPjxuKa3Tf9+7RkGDxRs=)
2: 8PJsiSgawJpqi4WMA0rE-WSVzw4.roa (hash: gH5uM65Zqr7CX//7XHgG1PbcCvfvj2cn2duCm7yPiEg=)
3: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
4: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: XNXWUO2WTJVGlZcz5MmzxY0jBKT2s3NPoCYOsgShZ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:27:50:0b:1e:ab:50:7a:7a:14:08:5c:ec:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 24 23:01:36 2026 GMT
Not After : Sep 25 23:01:36 2026 GMT
Subject: CN=a81562738c9023b6048380a078a0d4c0e1b4538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:37:12:30:7b:53:85:fe:25:5a:3c:db:8a:
23:af:76:67:27:06:55:09:e5:6e:a3:d4:a6:6f:47:
22:bf:18:c0:9a:83:d1:3e:21:8d:c4:ad:2f:4c:c8:
e3:6b:cc:4c:d6:1a:d9:8a:6e:31:fc:f0:ca:4d:e1:
b4:99:14:32:1f:e3:40:db:25:9c:49:d8:44:c2:fc:
ee:a1:45:0f:cd:d2:b2:67:9f:87:65:15:71:94:6c:
83:45:f7:52:36:d2:17:95:6f:c8:4d:16:df:6f:17:
a4:9c:f9:1e:a2:3f:42:b3:d5:05:59:60:7f:d4:82:
ee:e7:02:b6:82:60:0f:6c:b6:ae:54:f9:52:02:5e:
e8:7d:b8:b3:f0:00:ef:5d:98:9e:84:bc:88:f3:c3:
b4:82:25:b9:66:c4:7d:37:9c:e8:1b:b1:dc:cb:a1:
8e:2a:f5:36:31:46:0d:bf:0f:c5:2f:00:65:1c:ba:
10:22:cb:c7:78:75:ec:6a:d5:ed:ec:27:97:a7:69:
07:8f:9e:c0:9f:6b:03:9d:b0:8f:04:c4:d0:3b:b9:
ec:af:40:a1:81:90:49:57:2f:af:1e:16:52:c9:9f:
b9:c1:b4:7b:f7:54:76:c4:5f:74:4d:ce:9b:00:ba:
a8:3b:26:4f:8a:ef:c8:46:f5:d8:ca:51:cc:78:d3:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:15:62:73:8C:90:23:B6:04:83:80:A0:78:A0:D4:C0:E1:B4:53:8B
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:63:c0:3a:6c:71:0c:90:2f:4a:5c:0b:4c:22:c0:40:1d:96:
f3:5c:5e:68:76:4f:b1:f3:62:a1:b5:06:0b:69:12:40:d7:81:
44:91:43:1d:de:06:17:af:c8:3c:36:33:ec:0b:1a:16:0b:e6:
d1:f7:50:37:fe:28:f9:86:83:5b:3f:13:8e:26:fc:2f:6d:db:
f2:a8:49:ce:d7:24:f0:ae:43:04:e2:03:cc:a0:ec:de:60:80:
b3:c9:99:bd:04:ef:39:bc:b9:95:24:09:6d:ca:d6:0f:0c:3a:
10:7f:93:4e:69:b9:76:50:7c:0f:39:fe:b1:a6:9f:16:d4:07:
a5:4a:3d:5e:92:5d:84:ef:cf:87:76:c4:0a:c4:aa:f1:af:76:
95:25:88:5d:89:ed:f0:3c:7b:b1:fe:9a:b7:83:4f:e0:23:fc:
a5:87:53:28:ad:1e:77:b1:93:22:a4:82:a0:54:cb:61:8a:30:
1b:10:cb:ae:7c:ab:3d:6d:2e:b8:a7:c6:02:3f:bd:e4:6d:ba:
2c:47:eb:7e:8a:ee:15:64:ce:a7:85:6c:37:f7:39:91:00:0c:
d1:77:2f:28:21:a2:02:87:81:5f:83:54:57:a2:ac:e0:7a:2b:
05:87:a6:a7:c6:82:05:de:7f:88:42:b2:54:31:41:ea:60:64:
b1:14:46:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpydQCx6rUHp6FAhc7OivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjYwOTI0MjMwMTM2WhcNMjYwOTI1MjMwMTM2WjAzMTEwLwYDVQQD
EyhhODE1NjI3MzhjOTAyM2I2MDQ4MzgwYTA3OGEwZDRjMGUxYjQ1MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQ3EjB7U4X+JVo824ojr3ZnJwZV
CeVuo9Smb0civxjAmoPRPiGNxK0vTMjja8xM1hrZim4x/PDKTeG0mRQyH+NA2yWc
SdhEwvzuoUUPzdKyZ5+HZRVxlGyDRfdSNtIXlW/ITRbfbxeknPkeoj9Cs9UFWWB/
1ILu5wK2gmAPbLauVPlSAl7ofbiz8ADvXZiehLyI88O0giW5ZsR9N5zoG7Hcy6GO
KvU2MUYNvw/FLwBlHLoQIsvHeHXsatXt7CeXp2kHj57An2sDnbCPBMTQO7nsr0Ch
gZBJVy+vHhZSyZ+5wbR791R2xF90Tc6bALqoOyZPiu/IRvXYylHMeNOiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgVYnOMkCO2BIOAoHig1MDhtFOLMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGPAOmxx
DJAvSlwLTCLAQB2W81xeaHZPsfNiobUGC2kSQNeBRJFDHd4GF6/IPDYz7AsaFgvm
0fdQN/4o+YaDWz8Tjib8L23b8qhJztck8K5DBOIDzKDs3mCAs8mZvQTvOby5lSQJ
bcrWDww6EH+TTmm5dlB8Dzn+saafFtQHpUo9XpJdhO/Ph3bECsSq8a92lSWIXYnt
8Dx7sf6at4NP4CP8pYdTKK0ed7GTIqSCoFTLYYowGxDLrnyrPW0uuKfGAj+95G26
LEfrforuFWTOp4VsN/c5kQAM0XcvKCGiAoeBX4NUV6Ks4HorBYemp8aCBd5/iEKy
VDFB6mBksRRGKw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:53:01 2026 by rpki-client