Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: 74n6VUw++WDhyeMVQWjnsv2RAAAM1yf9bVrJPfSF+KU=
Subject key identifier: 0C:A1:93:F8:19:DA:CA:52:EF:5E:D2:B6:EF:9D:BC:5B:CB:2E:C2:FA
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019CABA212AB8FA026D368300A1A9D563177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 0993
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (hash: o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: cz8ioKoO+bl2tZxSj5NHAWAyy0wUCtHi4s/66sFbhMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:12:ab:8f:a0:26:d3:68:30:0a:1a:9d:56:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=0ca193f819daca52ef5ed2b6ef9dbc5bcb2ec2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:e9:8f:cf:ac:b2:15:8e:60:07:d9:eb:6c:
df:dc:ee:12:61:a0:2e:85:b0:80:30:bf:79:83:9b:
83:e3:99:0e:e3:3d:cb:81:ae:41:1c:c8:61:6b:27:
34:63:86:9c:40:b9:a4:3a:e9:7a:58:d7:0f:7a:88:
47:02:b5:d1:32:40:2f:16:f3:1a:44:0e:35:3c:41:
3f:e4:9c:05:f0:ec:7c:29:14:6d:f8:33:7e:fb:6a:
d4:34:ff:77:58:fc:58:79:3f:dd:60:d0:aa:53:76:
4b:6d:cd:b0:e9:63:ee:aa:a7:67:26:fd:43:fe:34:
df:4a:22:9c:52:63:07:5c:53:ab:6c:17:85:6a:b9:
bf:9b:a8:d1:cf:d6:d4:18:2d:4b:bf:85:79:3b:58:
df:7c:e2:5a:02:a8:27:db:e0:56:fe:69:d4:af:6b:
30:a7:57:65:53:f9:6e:c0:aa:96:2a:96:29:1d:fe:
e9:b2:81:9c:79:3d:8d:16:97:6d:45:27:09:31:2a:
8e:88:df:47:b0:66:2f:ee:b6:7c:46:34:47:99:b3:
66:c4:66:5d:59:c7:2d:fd:eb:67:4c:21:79:ba:dc:
68:fd:0d:35:bd:f2:33:cc:f7:fa:47:82:8d:a4:8b:
70:8a:4c:5a:2f:58:a0:92:87:f0:8b:b8:e9:88:19:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:93:F8:19:DA:CA:52:EF:5E:D2:B6:EF:9D:BC:5B:CB:2E:C2:FA
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:49:9e:f5:de:cc:e4:a6:6c:49:66:8d:7e:ab:1f:5f:f2:
01:db:7d:94:a0:74:18:94:01:c9:69:a5:bd:84:e6:49:16:a4:
5e:8c:d3:fa:8a:04:e3:42:03:ef:ef:4e:e1:38:6f:98:ec:38:
8f:17:93:cb:fe:c6:2d:b6:11:a7:7b:03:8d:28:97:0f:07:c7:
54:03:21:c4:ee:0d:a2:57:d7:c7:9e:0b:4c:9c:c3:f5:fd:c0:
8c:1f:36:e3:7f:e6:bd:06:c7:1a:3d:37:8f:52:31:c6:53:7f:
9f:1f:3c:1e:4c:44:71:68:b5:32:74:82:82:10:b3:3c:0f:78:
54:fe:e3:4f:e3:8b:be:97:72:79:c2:19:d2:38:4f:a1:53:4b:
74:ea:c3:ca:e6:7d:aa:da:7d:55:4f:44:0f:47:da:9d:f5:54:
93:cc:df:3e:7e:e4:40:ab:67:e4:d9:c1:fd:55:9e:65:5a:a4:
67:70:89:5c:29:8c:20:ca:da:13:43:00:6e:63:eb:69:c6:14:
1e:74:ad:38:45:c0:f3:c2:48:7c:9e:68:ff:d5:a0:25:a3:b5:
5b:d4:b0:64:23:72:3e:7e:41:98:6b:60:e7:65:da:bc:ed:21:
a5:bc:76:58:fd:04:07:41:e1:1c:9b:f4:35:f4:e9:83:20:68:
c8:6b:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:32 2026 by rpki-client