Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: zlU1lLs2/HSzke74tv9XRt5iiBa1kYRAeC6ke7nFDe0=
Subject key identifier: 9F:51:5F:3A:D2:A2:3A:D2:CC:F8:FA:23:EC:99:50:BA:6E:12:FD:40
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019E1DC7AC42A0360A84F2B1E28E721309AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 1114
Signing time: Tue 12 May 2026 20:01:25 +0000
Manifest this update: Tue 12 May 2026 20:01:25 +0000
Manifest next update: Wed 13 May 2026 20:01:25 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: xIu5LX2MtQ3RnsWtpiyc+29fNxtXOXjbnqupSjigFtQ=)
3: xJY_AM5c5mqbzDMlBNgNsWz_lug.roa (hash: B551H0yQy3AcP1JDauGu2ZmstUvG2dDmNnX6HF0awWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:ac:42:a0:36:0a:84:f2:b1:e2:8e:72:13:09:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: May 12 20:01:25 2026 GMT
Not After : May 13 20:01:25 2026 GMT
Subject: CN=9f515f3ad2a23ad2ccf8fa23ec9950ba6e12fd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:2a:19:c3:46:61:e5:84:ec:08:00:c0:38:
06:ad:60:db:b9:36:05:fa:0e:4b:ea:2b:91:c4:af:
ec:f4:45:a0:5b:82:e1:16:84:73:4a:be:cc:a2:37:
d4:11:0b:7d:36:15:93:80:ee:b0:d2:ad:ca:cd:fd:
2b:18:08:96:c2:cb:73:1b:b7:32:5d:1a:19:44:62:
5e:54:5c:36:54:bb:c9:ac:db:0e:80:51:62:7d:11:
48:7d:71:6d:09:64:67:21:52:f0:d9:d0:0d:e1:33:
13:33:5a:56:a6:f8:8d:2b:24:69:d6:89:c2:6e:64:
26:3d:27:0a:f6:00:3d:89:ba:5b:43:6a:df:3f:f6:
1c:c0:ce:63:7b:79:7d:57:69:b8:42:ca:1f:38:7e:
d4:85:0d:75:c6:56:ac:ec:53:be:60:cc:d7:bb:3b:
21:40:79:c3:a0:13:4c:4d:f0:83:05:f9:db:6a:2b:
c9:43:1f:29:3b:87:ac:a6:3d:10:75:cd:22:0f:4e:
85:a1:61:98:eb:bb:fc:d2:3e:88:a2:82:93:62:93:
0b:74:07:a6:b2:3e:3a:46:4d:ff:2a:1e:63:e1:13:
fe:9b:66:4a:f9:75:f7:79:06:45:f2:37:42:10:0b:
c0:48:fb:70:48:e0:ca:d1:9b:58:5d:93:52:1b:39:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:5F:3A:D2:A2:3A:D2:CC:F8:FA:23:EC:99:50:BA:6E:12:FD:40
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:22:24:88:23:44:c2:ca:fa:c7:60:fe:5a:61:06:b1:bc:
57:11:6d:e2:05:b9:33:fc:c6:b8:90:a4:7f:2a:98:31:1d:8e:
17:3d:99:41:ff:ed:e6:34:94:98:58:fc:44:09:a3:fd:a4:c3:
36:d7:93:94:1f:e2:5d:95:af:69:62:ed:00:ad:5e:e8:1c:df:
8c:99:9b:62:c9:8d:c9:db:98:4f:87:b4:2e:89:49:51:65:46:
46:fb:ae:1b:5c:6b:c2:73:62:ed:5f:63:c9:eb:6f:d9:1a:8a:
d9:2c:7a:8e:7c:0e:bb:ce:63:52:11:3b:18:31:e8:61:27:bb:
2b:3a:86:64:eb:b2:c5:e2:89:c8:f3:1b:ea:da:ac:14:dc:b5:
de:33:f2:80:2f:0d:2d:2e:38:fe:74:1c:52:4c:19:a4:c6:5a:
bb:b1:05:17:08:69:5a:af:5f:b5:e4:30:fe:f0:67:84:f6:7f:
b0:fd:42:99:b7:f5:e5:82:e4:b6:09:e1:48:f0:ac:7b:85:82:
01:7f:a8:58:90:6c:de:33:50:10:d7:b6:0f:a3:b0:8a:06:9a:
06:7a:95:58:1e:20:52:87:b4:11:f0:7c:c6:8c:1c:39:98:55:
96:9a:e2:26:06:70:68:97:07:30:7a:c0:01:26:1c:c4:81:d3:
5f:5e:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:29 2026 by rpki-client