Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: 1/4VHpldoXaWWHpxveSehGXMfWlzih1XoPCx9DeZfss=
Subject key identifier: 04:60:2C:56:7B:25:5F:A4:A1:5F:CC:B4:FF:2E:49:4E:0E:DF:C8:9C
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 019D2AAA025501671B9C13DD2A4DECB3F42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 15:01:17 +0000
Manifest this update: Thu 26 Mar 2026 15:01:17 +0000
Manifest next update: Fri 27 Mar 2026 15:01:17 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: CZaBITTx5Gv1WE3wPBJXWbseB6+3zk78bQvJv5SZpKs=)
2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:aa:02:55:01:67:1b:9c:13:dd:2a:4d:ec:b3:f4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Mar 26 15:01:17 2026 GMT
Not After : Mar 27 15:01:17 2026 GMT
Subject: CN=04602c567b255fa4a15fccb4ff2e494e0edfc89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:e3:6d:08:31:9c:ca:69:38:0d:6d:0d:ac:
88:b5:ff:98:83:40:08:36:7b:53:d4:c5:75:7c:fb:
e5:d5:bc:92:1a:bd:cf:b5:76:0c:c0:5f:91:2f:62:
7b:98:38:a0:5d:7d:78:1e:57:ba:5c:24:0f:48:74:
be:84:07:51:6c:01:ac:8b:2e:ff:ff:87:d9:ce:ca:
16:0c:e6:20:a7:1f:45:cc:f8:36:0c:f7:42:4a:82:
45:97:5a:c1:b3:1c:f8:0e:c8:6d:4f:ed:90:03:a9:
b9:cf:11:2d:be:df:19:ed:58:26:3b:d3:f8:74:92:
e7:16:c0:1e:1e:67:24:9a:ee:28:8d:92:76:f2:ab:
2e:bf:99:08:89:c5:4f:d7:16:6a:8a:44:4d:3c:a2:
0a:23:91:1a:f5:be:2f:28:09:41:a5:25:7e:30:fb:
25:1f:c4:c8:ab:74:e9:57:15:4b:ae:62:77:d7:71:
ef:6b:23:6a:31:86:e0:25:1f:ab:a6:8c:e9:e3:f7:
31:e6:88:e7:f6:81:6c:d5:3f:f7:29:e6:6e:94:59:
99:ac:2c:6d:92:60:b7:fb:95:62:a6:67:e0:d3:50:
53:d0:b1:c3:0c:96:7c:2b:fd:8e:ee:18:41:ff:2c:
a3:2d:aa:cf:e9:37:89:5e:01:8d:d6:a6:d2:9c:c4:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:2C:56:7B:25:5F:A4:A1:5F:CC:B4:FF:2E:49:4E:0E:DF:C8:9C
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:39:cb:2b:65:dc:80:e4:2c:ad:6b:c8:7a:31:de:ed:0e:
38:5b:18:92:08:83:ab:da:27:2b:f8:9d:63:62:18:1b:2a:76:
bb:b3:28:54:24:e7:fd:5b:ab:5e:0a:b5:66:7a:cd:b7:8e:29:
e3:f8:d2:37:99:f0:1c:fa:2c:90:9a:b5:79:c5:dc:9a:29:29:
30:6e:d9:32:43:d4:86:49:6b:32:8b:a8:25:27:7f:3c:75:32:
7f:f1:33:f0:8a:87:7b:4a:f8:d6:9e:9d:a3:ca:d0:c2:6d:b0:
e2:ab:f4:5b:f5:95:4e:f2:30:f8:9a:f9:0e:96:ea:f9:67:bb:
ef:f6:10:c0:bb:a5:0e:6c:2f:d6:92:7c:c6:92:3e:3b:61:f9:
ae:e1:32:15:89:2a:da:55:25:e6:b4:be:8b:0b:1c:eb:fa:a8:
4b:4d:6d:d5:a1:54:f7:ec:7e:13:70:ed:40:1b:c9:ba:cc:eb:
7e:8c:4a:5d:2c:4c:46:85:f3:3b:9c:86:c2:e3:75:ba:ef:fb:
eb:7d:9a:6e:57:11:10:83:29:18:36:11:ad:eb:d3:85:1e:4c:
11:9f:e9:15:3f:9a:a2:4e:10:86:0c:01:31:01:1e:4a:a8:3c:
9d:b8:6b:b1:b8:9b:ca:09:cb:a6:d7:64:17:a7:d6:22:3e:0c:
61:94:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:39 2026 by rpki-client