Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: kj/SozSJjG+hLCImGcMOJkeMdjEpEAaUMMlv1/cXeEc=
Subject key identifier: 30:EA:36:E7:22:98:97:C3:90:3E:E5:93:0D:EE:F3:54:12:DC:22:65
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019E1D59C53EBF46F8B1522016225EA49148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1646
Signing time: Tue 12 May 2026 18:01:22 +0000
Manifest this update: Tue 12 May 2026 18:01:22 +0000
Manifest next update: Wed 13 May 2026 18:01:22 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: ee8PxzmsHGA/SIUtOpd2oCHWmMgGv9ebwHqI+bb5q0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c5:3e:bf:46:f8:b1:52:20:16:22:5e:a4:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: May 12 18:01:22 2026 GMT
Not After : May 13 18:01:22 2026 GMT
Subject: CN=30ea36e7229897c3903ee5930deef35412dc2265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:46:75:ee:f5:91:36:07:ee:cc:e7:25:ad:
f4:51:01:07:be:59:8b:e2:b2:39:d8:fc:80:d4:46:
04:bc:ed:5a:ac:ab:af:ac:ff:70:ce:3d:4d:78:5a:
4b:14:0d:b5:1c:32:8d:23:2e:bd:27:af:0c:a7:77:
2f:e5:55:1b:c7:6d:e4:6f:dd:90:60:a2:12:5a:84:
cc:e6:37:aa:b2:21:45:08:9b:e8:4c:05:56:eb:ca:
ab:4e:64:a0:f4:3c:e8:73:99:b1:43:57:b5:26:ba:
24:8e:90:7c:e8:e4:f8:dd:39:68:10:ed:e8:5f:39:
6b:c9:1e:8c:1e:87:82:46:c4:82:6c:0b:82:e9:8f:
2f:11:ff:52:56:bc:0f:d7:2c:fa:f1:3d:1d:2c:d3:
2d:05:2c:a1:0c:19:34:8c:a7:09:59:03:dc:62:12:
ce:86:fd:b2:62:08:50:8c:ce:01:ae:2e:aa:db:0a:
be:bb:ee:96:c9:70:3a:c9:cd:7d:b8:f4:5d:86:66:
27:06:03:37:20:b5:d9:27:db:6f:df:fb:22:a4:a0:
54:d0:fb:c8:e5:10:8e:49:2e:03:95:a5:1e:d9:55:
cb:68:be:e3:d6:cd:d5:50:a0:7f:2a:8e:d4:a9:e0:
2c:6b:15:5e:44:fa:d5:09:13:50:b8:61:ee:db:dc:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:36:E7:22:98:97:C3:90:3E:E5:93:0D:EE:F3:54:12:DC:22:65
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:8c:63:83:45:ab:a8:c8:2e:d1:70:35:71:51:15:ea:73:
e9:ed:7e:03:86:38:57:86:97:c2:e6:43:6a:36:7b:c7:c0:55:
54:3e:a7:ae:3b:ff:07:5a:8f:22:3a:ca:d8:ae:74:87:77:2f:
29:6f:31:65:d2:00:76:15:9a:6e:22:97:db:d5:1f:93:d2:6c:
ce:c3:81:6d:ff:cf:74:c7:96:32:24:f0:44:b3:d4:7d:34:8d:
cd:1b:e8:77:54:d2:bf:96:3b:cd:6b:4e:e6:98:ea:47:71:10:
8b:97:f2:64:82:d7:23:e7:cf:ea:92:07:f1:42:91:87:a4:85:
fc:ad:f4:ff:76:70:1e:45:f0:e1:a3:59:4c:21:a3:f6:25:1f:
37:fb:ed:0c:2c:e2:4f:14:26:1e:12:29:06:64:14:6a:a0:a6:
77:bd:38:a2:f8:f5:f8:5c:4f:8d:e9:04:97:74:f0:0e:c8:b6:
28:dd:29:95:e3:f9:b2:23:58:e3:fa:1c:90:82:9c:1b:55:c2:
82:29:c7:e4:59:a6:14:d8:06:4c:38:b9:21:d8:04:b4:6a:d5:
ad:ed:b2:3e:28:0e:0a:98:4a:10:9a:b6:e7:30:84:b2:1d:0a:
a3:69:f5:c0:04:5f:aa:09:6a:0c:18:39:f1:bd:63:26:3a:9c:
7c:99:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:45 2026 by rpki-client