Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: xevmqgkMGNvdw+PaolvWbTvT/GrEGXZjjXVdM+8cUGo=
Subject key identifier: E2:2A:69:EB:0C:FF:A8:D5:F0:48:AA:0C:63:EA:1E:2D:82:B2:F2:93
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019F927FD35323BEF8C6E1865676672D929D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 11D5
Signing time: Fri 24 Jul 2026 05:01:18 +0000
Manifest this update: Fri 24 Jul 2026 05:01:18 +0000
Manifest next update: Sat 25 Jul 2026 05:01:18 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: Xr+cFSYqzA0NvuxuZpn6ea/CQgK1b18/bzF5V0ptqPY=)
3: xJY_AM5c5mqbzDMlBNgNsWz_lug.roa (hash: B551H0yQy3AcP1JDauGu2ZmstUvG2dDmNnX6HF0awWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:d3:53:23:be:f8:c6:e1:86:56:76:67:2d:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jul 24 05:01:18 2026 GMT
Not After : Jul 25 05:01:18 2026 GMT
Subject: CN=e22a69eb0cffa8d5f048aa0c63ea1e2d82b2f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:05:12:5e:94:54:cb:8e:ba:af:c2:14:e5:
2d:49:9f:e6:02:51:38:80:32:4b:f6:7b:90:78:94:
53:be:2a:6c:ab:48:d4:55:b5:a5:a0:4a:bd:5f:83:
ea:03:ae:5e:2c:be:b1:fa:3b:fa:5d:9e:41:5e:16:
f6:e8:f4:53:3f:af:8f:c2:23:46:c1:08:e4:8c:03:
09:38:29:26:b3:f5:0a:d0:f9:f6:35:46:37:dd:98:
8f:c6:09:2b:86:56:c1:48:e6:c8:43:e1:19:de:b1:
0f:76:f3:3e:d0:63:4c:37:3e:7e:a2:85:11:d4:de:
99:b4:45:65:dc:83:c2:4c:b6:89:26:bb:9a:92:bb:
bb:07:48:c9:47:00:10:d3:2c:34:52:68:38:02:a8:
cd:2b:97:1c:28:08:de:06:ae:d9:46:23:8c:ec:aa:
8d:55:11:a3:96:39:f7:21:47:c4:34:9b:f4:c9:f7:
db:2e:1f:ff:b9:a4:dc:c9:57:b0:14:1b:d3:59:32:
44:45:12:90:01:56:d4:f0:12:db:e1:b6:ca:5a:5d:
8e:12:c6:a2:23:b8:3b:ab:bc:23:3e:a0:1c:30:62:
6e:88:25:bb:e3:01:4f:d9:0f:17:2f:61:87:bd:78:
2c:97:5b:5b:26:e5:22:cf:b5:54:bc:f1:98:55:a0:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:69:EB:0C:FF:A8:D5:F0:48:AA:0C:63:EA:1E:2D:82:B2:F2:93
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:ab:aa:7d:d5:68:12:89:48:ac:2f:23:0d:81:3e:cb:e4:
5a:a4:92:9c:77:9d:c3:af:07:20:8b:4f:6a:f9:ed:2e:cf:9c:
b1:0d:56:eb:f3:bc:d9:bf:b1:a0:f2:28:2b:d1:bd:c7:6a:69:
c8:ed:0f:91:b2:a5:1d:a1:b0:fb:a8:45:2f:88:b3:99:9a:f4:
63:18:d3:1b:86:e6:ad:df:fd:e8:b9:0d:39:82:3a:a0:43:1b:
e3:6a:82:05:77:90:6d:3b:b5:03:99:a3:a0:9b:e6:f4:e1:b8:
b6:11:2a:c9:d5:c9:9f:62:f3:eb:1c:17:98:20:f4:62:f5:21:
1b:35:0c:d9:db:a4:24:6f:77:4c:f8:24:88:80:6a:df:f7:54:
98:17:b7:4f:22:59:df:19:0a:0e:b3:c2:b4:e0:cc:e6:5c:42:
f1:be:eb:40:74:ef:40:c1:95:58:a0:70:1f:d4:d6:b1:63:88:
da:27:9c:35:50:36:9a:ce:72:fe:1a:5f:17:5d:ab:21:a0:77:
48:89:4b:b7:20:7a:34:77:58:10:3a:dc:0d:77:6e:1a:e1:5b:
b3:d8:12:96:b1:87:59:21:fd:09:81:bd:de:90:05:81:14:c2:
81:e6:35:ef:6a:5c:82:94:d3:9c:24:f7:87:ec:e6:bd:71:e8:
64:07:bf:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf9NTI774xuGGVnZnLZKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjYwNzI0MDUwMTE4WhcNMjYwNzI1MDUwMTE4WjAzMTEwLwYDVQQD
EyhlMjJhNjllYjBjZmZhOGQ1ZjA0OGFhMGM2M2VhMWUyZDgyYjJmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIFEl6UVMuOuq/CFOUtSZ/mAlE4
gDJL9nuQeJRTvipsq0jUVbWloEq9X4PqA65eLL6x+jv6XZ5BXhb26PRTP6+PwiNG
wQjkjAMJOCkms/UK0Pn2NUY33ZiPxgkrhlbBSObIQ+EZ3rEPdvM+0GNMNz5+ooUR
1N6ZtEVl3IPCTLaJJruakru7B0jJRwAQ0yw0Umg4AqjNK5ccKAjeBq7ZRiOM7KqN
VRGjljn3IUfENJv0yffbLh//uaTcyVewFBvTWTJERRKQAVbU8BLb4bbKWl2OEsai
I7g7q7wjPqAcMGJuiCW74wFP2Q8XL2GHvXgsl1tbJuUiz7VUvPGYVaBNUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIqaesM/6jV8EiqDGPqHi2CsvKTMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntSrqn3V
aBKJSKwvIw2BPsvkWqSSnHedw68HIItPavntLs+csQ1W6/O82b+xoPIoK9G9x2pp
yO0PkbKlHaGw+6hFL4izmZr0YxjTG4bmrd/96LkNOYI6oEMb42qCBXeQbTu1A5mj
oJvm9OG4thEqydXJn2Lz6xwXmCD0YvUhGzUM2dukJG93TPgkiIBq3/dUmBe3TyJZ
3xkKDrPCtODM5lxC8b7rQHTvQMGVWKBwH9TWsWOI2iecNVA2ms5y/hpfF12rIaB3
SIlLtyB6NHdYEDrcDXduGuFbs9gSlrGHWSH9CYG93pAFgRTCgeY172pcgpTTnCT3
h+zmvXHoZAe/NA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:12 2026 by rpki-client