Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: XuRWGpWwmCAK0zz0yb++kdD7iIFdTzLtDB5P6SDxyck=
Subject key identifier: 72:24:6A:F7:82:24:BF:08:84:A5:6D:DC:DA:D8:96:9D:4F:D1:7F:DD
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019D9B1963ACEC9D91A22D43C148B1C29FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 0A0F
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (hash: o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: YijZX5oFWnW4rHzP03AtV7QQpxCs2rpKHvuKOO9OEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:63:ac:ec:9d:91:a2:2d:43:c1:48:b1:c2:9f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=72246af78224bf0884a56ddcdad8969d4fd17fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:b8:6d:cd:44:10:d6:e1:80:dc:68:47:4f:
8c:8b:a4:fa:c3:58:9b:55:1a:42:f7:9f:93:76:09:
c5:5f:8b:fb:a0:6f:38:c3:82:a2:64:88:2c:05:bc:
e4:11:4c:73:00:8c:3d:a8:ea:79:24:8a:6e:84:53:
66:73:6f:4c:5f:1e:51:9a:cf:6d:bc:cc:e8:fa:7b:
54:5e:66:91:a6:02:c8:8c:ca:c8:d9:10:bc:bb:24:
84:a8:67:b2:a8:2e:1a:fe:9b:0a:03:9b:ab:8f:01:
f9:0b:c1:b6:f9:fa:17:72:c5:8f:13:7d:3f:d8:6a:
b4:96:94:2e:eb:fd:6f:eb:82:5a:83:ab:65:58:75:
e1:85:35:34:d7:94:fc:62:c4:7d:b2:11:fe:e3:d2:
14:5d:57:88:f1:69:08:93:95:9f:7a:cc:05:21:d7:
85:d5:72:1a:8a:a1:d0:80:ff:8f:1d:28:28:d0:5f:
22:3d:19:64:9a:8a:a4:85:15:50:93:b3:46:af:7a:
c3:dd:56:87:08:fc:b6:8d:f0:ac:e7:9e:93:7b:5d:
3f:a2:ae:ca:ae:07:80:0c:c9:be:dd:8a:e1:59:aa:
1a:e0:0e:2c:34:24:74:55:b2:3c:81:b9:8f:00:c9:
75:4c:74:2c:e1:71:c0:2c:e4:42:d8:a4:9c:50:ef:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:24:6A:F7:82:24:BF:08:84:A5:6D:DC:DA:D8:96:9D:4F:D1:7F:DD
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:12:7b:04:ee:dd:7a:13:07:e9:ec:df:8c:8a:d0:f3:ae:
0e:b1:54:f4:32:b6:73:10:30:1b:68:fe:18:d8:fc:67:4e:00:
a6:9a:e2:3d:15:d4:5b:b5:b1:36:38:2c:d7:3e:6c:3d:b7:48:
5a:bb:53:e9:65:02:bc:0f:98:34:e5:47:bf:6b:5f:28:e8:ef:
c4:71:29:e9:a6:04:e2:fc:c8:96:99:e5:e5:f2:81:e3:8e:cb:
d8:15:8b:0b:1c:4b:b7:a0:25:01:be:94:2a:ec:f4:ca:ad:4f:
dc:5a:8c:73:c3:16:28:46:ee:5f:32:28:e0:9a:bd:78:7c:f7:
2c:1b:37:79:67:ac:c4:f6:97:c2:33:96:ea:76:a6:51:53:0a:
50:3e:e8:d6:f4:5b:47:c9:29:fc:69:9f:a1:85:fc:b7:7d:d8:
02:6f:44:89:3b:a8:70:8f:7f:f1:a9:aa:44:06:a6:d4:73:09:
bd:f9:a8:7b:03:3c:6a:28:91:d0:83:b1:12:07:a8:2e:96:e0:
f4:db:69:e0:d3:0d:e8:98:df:dd:59:76:9b:55:79:2c:31:d8:
12:5f:28:27:7e:fc:d1:90:3e:f0:ea:89:8d:82:66:33:86:79:
2e:b9:dc:0c:28:01:c1:82:74:c7:87:3d:76:03:a3:53:39:87:
28:30:d1:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGWOs7J2Roi1DwUixwp/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGQyOTdkMDg5OGZmZmRlMjhkNzY5Njc5NWJkYmQ1MjIz
ZjhhNjYwHhcNMjYwNDE3MTEwMDI1WhcNMjYwNDE4MTEwMDI1WjAzMTEwLwYDVQQD
Eyg3MjI0NmFmNzgyMjRiZjA4ODRhNTZkZGNkYWQ4OTY5ZDRmZDE3ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMq4bc1EENbhgNxoR0+Mi6T6w1ib
VRpC95+TdgnFX4v7oG84w4KiZIgsBbzkEUxzAIw9qOp5JIpuhFNmc29MXx5Rms9t
vMzo+ntUXmaRpgLIjMrI2RC8uySEqGeyqC4a/psKA5urjwH5C8G2+foXcsWPE30/
2Gq0lpQu6/1v64Jag6tlWHXhhTU015T8YsR9shH+49IUXVeI8WkIk5WfeswFIdeF
1XIaiqHQgP+PHSgo0F8iPRlkmoqkhRVQk7NGr3rD3VaHCPy2jfCs556Te10/oq7K
rgeADMm+3YrhWaoa4A4sNCR0VbI8gbmPAMl1THQs4XHALORC2KScUO/A4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIkaveCJL8IhKVt3NrYlp1P0X/dMB8GA1UdIwQY
MBaAFMfdKX0ImP/94o12lnlb29UiP4pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEt
MWYzYjViMDU2ZGZjLzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEtMWYzYjViMDU2ZGZj
LzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI90SewTu
3XoTB+ns34yK0POuDrFU9DK2cxAwG2j+GNj8Z04AppriPRXUW7WxNjgs1z5sPbdI
WrtT6WUCvA+YNOVHv2tfKOjvxHEp6aYE4vzIlpnl5fKB447L2BWLCxxLt6AlAb6U
Kuz0yq1P3FqMc8MWKEbuXzIo4Jq9eHz3LBs3eWesxPaXwjOW6namUVMKUD7o1vRb
R8kp/GmfoYX8t33YAm9EiTuocI9/8amqRAam1HMJvfmoewM8aiiR0IOxEgeoLpbg
9Ntp4NMN6Jjf3Vl2m1V5LDHYEl8oJ3780ZA+8OqJjYJmM4Z5LrncDCgBwYJ0x4c9
dgOjUzmHKDDR4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:45 2026 by rpki-client