Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: Ga4wtGaKEZmthTy+DhmMDGkrpPU6eAbVIgLULSS5low=
Subject key identifier: 24:CB:7B:F5:77:F5:AD:52:4A:54:FC:6A:F0:30:A4:02:B6:72:52:09
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 01A0CCDA15CEC9A218896BBE4F1B011006F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 17AA
Signing time: Wed 23 Sep 2026 06:00:39 +0000
Manifest this update: Wed 23 Sep 2026 06:00:39 +0000
Manifest next update: Thu 24 Sep 2026 06:00:39 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: rjR9SN+ndTZDA27yRnzyH6HMlKwqRFVFIPKJxo7OTHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:15:ce:c9:a2:18:89:6b:be:4f:1b:01:10:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Sep 23 06:00:39 2026 GMT
Not After : Sep 24 06:00:39 2026 GMT
Subject: CN=24cb7bf577f5ad524a54fc6af030a402b6725209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:51:0a:28:d9:db:e4:c0:8e:83:1e:d0:0b:
18:49:be:50:5c:fc:26:9c:63:67:96:04:40:00:e1:
ba:6e:20:0c:68:f1:7f:22:88:87:c3:21:ca:cb:77:
2e:88:1e:ba:ff:e3:a8:00:f8:18:0e:35:cb:51:60:
48:75:e7:0b:68:16:0b:84:e0:5f:7b:df:3d:ca:43:
1d:84:ed:d7:b4:86:11:e6:d6:d7:7a:2d:a0:54:56:
0b:60:45:47:99:a3:23:65:ce:00:1d:03:c8:a1:a6:
42:94:6c:90:8c:3a:e6:48:15:f9:22:e2:83:20:6f:
05:6d:ce:60:35:ef:85:22:1e:ea:c8:47:5b:85:81:
62:d1:22:a8:46:2e:1e:0c:6b:7c:72:9b:a5:ec:5b:
0d:60:d6:ea:e2:12:d5:98:77:c0:3c:ff:03:60:ec:
a9:fa:05:6a:44:04:2c:8f:4f:5e:aa:a1:4e:55:aa:
25:9d:97:ea:28:50:e6:16:ab:40:4d:58:6e:d2:55:
d0:16:96:50:d4:10:8a:5a:0b:5c:8c:ae:31:cb:32:
43:7b:3c:ac:6a:23:ac:c4:91:1d:20:1c:b7:71:1c:
25:98:9b:76:c0:54:25:be:9b:94:5c:a1:40:1c:6e:
d1:dd:25:0f:57:40:59:94:0d:ac:2f:44:a9:bc:e7:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:7B:F5:77:F5:AD:52:4A:54:FC:6A:F0:30:A4:02:B6:72:52:09
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e1:6b:d1:2f:ec:83:25:47:6f:c9:b4:a2:16:51:9c:c1:33:
c4:86:1f:ae:a3:cf:4f:a1:45:79:1c:39:c8:37:31:5d:a5:38:
d6:c0:fb:87:64:ff:5d:fb:07:b5:60:81:78:b1:88:1b:40:d5:
1a:a5:b8:b0:4a:5d:e3:a6:72:da:cf:be:ea:68:9c:ba:6b:b0:
d7:66:68:1b:23:07:ef:ca:10:0f:c5:f4:b9:d4:6d:4b:82:7e:
6f:e0:62:bf:ad:15:c0:b4:13:5a:af:79:28:a9:29:21:b2:dc:
26:24:09:a7:d5:4a:1c:0d:f5:ca:13:9d:a8:3d:2c:1d:19:5a:
1d:12:3d:ce:e7:32:1a:b0:48:37:05:09:3a:72:71:7c:8f:7c:
3d:96:f8:c8:71:9d:d6:dd:a1:25:26:d9:bb:6c:fe:c0:c1:49:
b3:53:13:f4:e2:7c:d4:a5:df:02:4a:ae:27:25:dc:18:c9:70:
82:cc:c5:80:42:1e:ef:1b:3c:c7:1b:f1:99:dd:3a:4e:59:d5:
af:f4:b5:7d:ca:07:92:22:dd:b8:65:f4:5f:2a:18:68:1d:5a:
e5:d0:7d:71:b3:84:cf:b3:32:45:8f:de:20:9b:0e:a5:82:2f:
71:e9:7e:f6:e1:5b:b3:71:6e:d1:b8:d1:e2:e1:c7:e1:e9:c6:
b3:9b:6f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2hXOyaIYiWu+TxsBEAbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjYwOTIzMDYwMDM5WhcNMjYwOTI0MDYwMDM5WjAzMTEwLwYDVQQD
EygyNGNiN2JmNTc3ZjVhZDUyNGE1NGZjNmFmMDMwYTQwMmI2NzI1MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1xRCijZ2+TAjoMe0AsYSb5QXPwm
nGNnlgRAAOG6biAMaPF/IoiHwyHKy3cuiB66/+OoAPgYDjXLUWBIdecLaBYLhOBf
e989ykMdhO3XtIYR5tbXei2gVFYLYEVHmaMjZc4AHQPIoaZClGyQjDrmSBX5IuKD
IG8Fbc5gNe+FIh7qyEdbhYFi0SKoRi4eDGt8cpul7FsNYNbq4hLVmHfAPP8DYOyp
+gVqRAQsj09eqqFOVaolnZfqKFDmFqtATVhu0lXQFpZQ1BCKWgtcjK4xyzJDezys
aiOsxJEdIBy3cRwlmJt2wFQlvpuUXKFAHG7R3SUPV0BZlA2sL0SpvOeZ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTLe/V39a1SSlT8avAwpAK2clIJMB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+Fr0S/s
gyVHb8m0ohZRnMEzxIYfrqPPT6FFeRw5yDcxXaU41sD7h2T/XfsHtWCBeLGIG0DV
GqW4sEpd46Zy2s++6micumuw12ZoGyMH78oQD8X0udRtS4J+b+Biv60VwLQTWq95
KKkpIbLcJiQJp9VKHA31yhOdqD0sHRlaHRI9zucyGrBINwUJOnJxfI98PZb4yHGd
1t2hJSbZu2z+wMFJs1MT9OJ81KXfAkquJyXcGMlwgszFgEIe7xs8xxvxmd06TlnV
r/S1fcoHkiLduGX0XyoYaB1a5dB9cbOEz7MyRY/eIJsOpYIvcel+9uFbs3Fu0bjR
4uHH4enGs5tvoQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:11:55 2026 by rpki-client