Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: Hryxv5bruh/iH+Iy1lUwrbGXEfRr4sJTHG6d8gFuB4w=
Subject key identifier: 38:33:62:2E:37:2D:FC:50:62:2B:F6:C2:9D:F0:70:39:EC:0D:53:A7
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019F92115BA57F74F065FE117B109D064BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1707
Signing time: Fri 24 Jul 2026 03:00:38 +0000
Manifest this update: Fri 24 Jul 2026 03:00:38 +0000
Manifest next update: Sat 25 Jul 2026 03:00:38 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: u1iSEbxmc0VJZYCIMyBRiAg/L5xjvWScp18eCFXhvwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:5b:a5:7f:74:f0:65:fe:11:7b:10:9d:06:4b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jul 24 03:00:38 2026 GMT
Not After : Jul 25 03:00:38 2026 GMT
Subject: CN=3833622e372dfc50622bf6c29df07039ec0d53a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:f1:c0:02:7d:f3:a8:80:b7:15:f9:f8:25:
a1:79:09:f0:2e:0c:3f:66:e9:88:98:02:db:6b:ac:
8b:6f:78:83:cf:b1:77:a0:dd:f9:5d:6a:d5:a6:8f:
85:d8:1e:10:72:95:f4:f6:ec:c2:4c:51:5d:33:52:
b5:8a:a6:a4:13:34:d6:57:c6:c2:50:2a:58:35:9b:
49:4f:a4:ec:e9:20:b7:6c:4f:20:7e:ea:ef:64:2f:
86:14:50:6a:a2:be:6f:67:df:63:bd:24:14:dc:2b:
f4:1c:e7:2d:38:ab:96:8f:b6:b9:52:6b:5c:ff:97:
10:a8:9b:d5:2e:c5:a4:ce:6c:d0:26:0c:2b:bb:29:
16:fa:ef:2e:c6:24:71:3e:87:5e:b7:e6:04:6f:7b:
ba:d7:9d:f3:05:2c:fd:f0:e5:ad:63:3a:45:2e:44:
ff:ae:a8:07:27:65:7f:6d:83:20:ae:c6:74:6c:b4:
0b:64:7d:8c:d5:95:05:d9:52:d2:1d:c3:1f:9b:ee:
49:99:e0:63:2d:cc:db:4a:a1:10:69:87:07:5e:db:
2f:62:a8:09:c3:a9:3a:4c:88:99:5f:05:04:99:a8:
11:c2:bb:3a:71:e6:9a:53:9c:e7:7b:1b:d4:c8:a2:
89:8a:82:03:a7:51:00:fd:7a:c7:9f:09:a7:e7:e0:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:33:62:2E:37:2D:FC:50:62:2B:F6:C2:9D:F0:70:39:EC:0D:53:A7
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:a2:83:81:94:7b:d8:c8:b2:17:b0:f2:63:14:e9:96:92:
b9:1a:16:99:13:0e:0d:bb:ea:dd:0b:55:48:dc:8b:11:64:48:
a7:b1:6f:51:41:31:1e:ee:e4:a2:39:f8:d2:b3:b6:28:13:b3:
28:91:56:a4:c0:07:22:c5:a9:29:3a:79:4d:79:1f:7b:7b:51:
0a:ef:ec:93:71:07:66:97:f2:8c:53:a4:4b:0a:4b:a4:cd:0a:
26:0b:91:29:a1:fb:7b:71:9c:ca:db:98:4b:81:15:5f:7b:d4:
6c:fe:b6:6a:9b:f1:dc:ee:bf:2a:3e:64:7b:f6:fc:6f:5e:40:
f3:55:c9:58:c1:f0:ef:39:94:ba:2e:8c:0e:66:f6:28:f3:cc:
2a:bd:2c:95:51:65:4a:97:e3:7b:28:be:8b:08:7a:60:fe:19:
10:81:69:c3:f9:5b:ee:18:a8:5d:cd:c4:89:ad:11:64:20:15:
a7:04:10:93:e9:f0:90:ee:66:f9:c4:eb:54:63:c3:74:62:a9:
1a:94:6c:b0:0c:76:8f:7d:70:c0:2e:9c:58:7b:52:b2:3b:e5:
d2:90:0a:fe:2a:cc:2f:62:3d:85:22:ba:61:72:80:0c:a2:e8:
96:ff:c3:a7:d4:19:d1:a0:ff:09:ae:1a:d2:0e:81:b9:27:16:
f7:d4:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:54 2026 by rpki-client