Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: xH1VUbMioOXW8EOar9uHYmk0EmlAXVbxFFpZBlgcTbQ=
Subject key identifier: 20:5B:41:D1:A4:F9:F3:ED:01:9B:C3:39:46:44:8A:58:5E:B3:EE:31
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019D27E0230F8F6D0462F19C59F2DA928EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 1092
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: s62v+WxETxmi/wxKyxPj8hyt1+KyNc5zpP7foZ7JDc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:23:0f:8f:6d:04:62:f1:9c:59:f2:da:92:8e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=205b41d1a4f9f3ed019bc33946448a585eb3ee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:1f:98:99:ae:ad:80:41:f4:8c:cf:84:88:
25:94:4a:a7:af:55:fd:fd:5f:03:0e:ca:c2:ce:f6:
5d:45:d8:c7:59:21:ba:a2:e5:ab:de:b0:59:ef:5d:
15:63:44:90:23:b9:2c:21:12:bc:fa:b1:db:b0:e9:
ce:85:15:15:6e:fd:65:dc:b9:45:4a:7c:ab:55:be:
3b:d2:31:f8:64:d6:6b:21:cf:b4:b9:1c:e9:29:e4:
5a:93:e7:42:b3:a4:b0:f7:85:36:2f:a0:9a:ec:fd:
35:34:ce:42:75:3e:f2:c0:1d:6a:6d:58:67:a9:5d:
43:c7:77:68:ad:f5:c6:34:df:9b:4c:76:5e:88:95:
79:59:fb:ad:c3:c6:c6:dc:a7:68:ca:b0:d5:5e:a9:
3c:1f:83:fe:52:fe:9b:8d:b6:7d:fa:c4:eb:50:68:
47:eb:80:8e:d9:cd:91:0a:fb:30:b9:a4:cd:91:9f:
5d:53:6e:34:8e:25:38:08:84:02:09:ea:f7:fb:af:
11:05:b3:00:c8:9f:d0:f5:55:20:2f:56:08:e5:83:
a5:5e:0f:fd:17:d5:23:fc:83:57:d2:84:49:bb:31:
c5:c4:f8:1c:fd:f8:26:ec:ed:8e:d7:f8:8a:44:4e:
b3:6d:6f:1e:a6:90:31:c9:31:98:b0:8d:3a:45:5e:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:41:D1:A4:F9:F3:ED:01:9B:C3:39:46:44:8A:58:5E:B3:EE:31
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:04:69:cd:84:6a:93:19:79:1b:30:f6:92:cb:bf:45:b3:38:
3d:ca:44:5d:0e:cd:1d:75:d4:71:9b:05:77:46:f9:89:be:af:
d2:e4:15:9c:8d:e9:ef:4e:97:e5:d6:c6:66:0e:c1:a4:91:eb:
bd:a0:bf:51:ff:a1:4e:3b:57:0f:40:17:4f:94:9c:86:84:07:
f4:67:a1:92:dc:53:71:3f:6f:44:e8:ff:da:cc:a8:53:0f:fa:
04:a4:37:e4:61:ab:14:b4:0f:75:c4:80:78:24:92:f6:e7:1c:
67:6f:d2:f2:43:7b:ca:3e:ba:09:b8:d6:26:5a:37:16:cf:78:
cc:1d:ed:7a:bf:96:ee:c4:a0:2b:12:0c:ca:f5:a2:72:8c:3c:
ce:82:43:bd:1d:b0:5c:88:0f:73:10:18:18:34:dd:f2:91:cf:
93:1d:57:73:90:3e:db:84:e3:65:a2:64:fc:3b:2e:f5:91:91:
a4:6c:c7:f5:f9:6a:c1:b3:fd:2d:2d:47:5d:7d:21:3d:e8:45:
2e:61:af:21:67:ed:49:c4:36:33:6d:00:4c:80:de:45:be:a6:
84:e3:2e:0e:98:66:e7:15:94:26:62:32:69:fd:b2:73:93:a0:
1a:0c:95:c1:d1:06:82:e5:13:94:33:64:86:a3:72:6a:9d:95:
15:50:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:44 2026 by rpki-client