Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: O7i3tHfFdXPnU5nXk4TYFENU0V5wZI8cJjK5OOAPr2w=
Subject key identifier: AC:E9:1C:7C:8E:BA:F8:3C:25:8A:40:16:6E:F8:4A:85:28:26:AC:11
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019D2703ADDF231494C23843C54D6976E00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: z5InTGWH3Oo6h7Ng7khJsbHMTlYj8XJWUimOSe7gx/M=)
2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ad:df:23:14:94:c2:38:43:c5:4d:69:76:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=ace91c7c8ebaf83c258a40166ef84a852826ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:36:8a:3c:38:81:c4:14:51:fb:6a:67:e2:
96:51:57:71:5b:1a:06:70:24:1a:02:e2:91:04:7b:
a4:fa:72:a3:ad:72:b6:cd:34:0a:e7:e3:e0:02:9e:
e1:72:51:e4:59:cd:da:3b:ce:90:82:c2:9c:79:74:
a5:d2:e9:54:ef:9c:c9:9a:d1:ad:1a:6c:e8:91:e6:
08:1c:46:72:51:60:aa:03:88:66:b1:eb:b5:26:e7:
b4:e1:00:06:d1:6a:ea:df:c5:56:85:1a:81:4e:83:
35:97:28:69:54:83:8d:03:ce:3e:86:37:c8:75:85:
13:b6:75:b9:49:ba:84:8e:a9:00:1a:1a:02:4f:9e:
7d:c1:71:94:da:37:f4:b5:19:af:9a:78:74:c2:e6:
5b:79:f3:18:02:f8:b0:6a:36:f3:23:af:87:c9:41:
d6:3c:a3:77:45:fb:b5:9c:2e:48:a1:d0:c4:0b:19:
17:e9:ae:a5:95:06:06:17:5b:60:0e:77:7d:db:78:
94:5d:9e:ff:aa:f0:66:9c:94:a7:6c:f3:a6:9c:92:
f6:29:15:56:e5:d9:71:da:3e:0c:bf:e1:38:06:fc:
9e:e6:65:7f:35:73:15:d3:c7:7e:6e:8a:51:09:d1:
c6:12:6f:ef:87:17:f2:74:2b:84:86:15:98:34:d7:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:1C:7C:8E:BA:F8:3C:25:8A:40:16:6E:F8:4A:85:28:26:AC:11
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:b8:1e:25:fc:fb:b2:79:f6:df:45:c8:a6:4f:6f:70:e9:
a9:8a:e4:93:7f:77:03:1b:4a:9a:b6:36:b8:a4:65:b7:ee:02:
81:be:fd:a0:b5:51:ff:57:61:f4:46:1e:91:54:8e:47:b3:95:
b5:26:a1:11:d8:3d:e5:b1:70:d9:02:ca:85:3e:f9:d7:e3:57:
c2:8a:cb:11:9a:4a:31:a5:4c:10:d4:ba:4b:8c:bc:0a:24:be:
64:58:e4:ce:90:d5:7f:7c:8a:2a:c2:ef:14:6b:99:35:30:fe:
32:b2:3d:a1:1d:18:5a:d4:89:49:9f:b1:1a:2a:b8:a7:42:11:
9d:27:25:ad:41:91:00:84:a5:c2:38:9b:b1:81:42:45:b0:79:
60:85:28:1e:66:71:08:f9:f4:0d:78:fc:30:3e:59:e1:38:32:
9e:38:59:0c:31:8b:d7:8c:9d:16:31:10:15:ab:b1:f8:43:43:
f7:18:98:2f:f5:aa:8d:7a:ea:a2:f8:23:ea:a2:2a:f7:21:f0:
39:65:ce:28:95:4d:05:e2:83:ba:7d:91:e1:35:f0:65:b0:da:
b6:f3:17:94:9e:8c:9d:ba:89:d4:52:3f:28:b5:53:42:99:de:
93:fa:f0:0f:5e:d7:04:f8:f0:de:f7:1e:dd:f5:2e:3c:b8:0a:
80:a1:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:49 2026 by rpki-client