Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: UoXpsJTkUA7HN3w2NOpHFuFKdDZ8ks8PHtMsrm9/p4Y=
Subject key identifier: 11:E7:57:06:30:AF:0E:21:5F:C3:76:DA:0C:B6:A0:24:C4:BC:F4:E2
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019D9A06EFD54E902297754D17160B752E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 017F
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: UwT/83njyj71S4VoQAZCVRSuzhR9Spt+MEizPf3JkSo=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ef:d5:4e:90:22:97:75:4d:17:16:0b:75:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=11e7570630af0e215fc376da0cb6a024c4bcf4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:cd:d5:8e:8d:66:0a:bc:c6:58:2d:0c:86:
0a:22:28:b7:6e:ff:76:6a:9b:af:6d:ca:f1:cb:6e:
92:a0:ba:12:b0:88:11:c2:53:eb:f1:7c:b4:2a:73:
fc:1e:e1:d9:95:db:e8:e0:7d:17:67:6f:39:d9:f4:
24:7d:12:53:53:af:87:3c:6e:d0:39:e7:33:e9:37:
8e:1b:89:57:10:15:04:16:cd:53:41:6c:96:fc:c8:
02:aa:a4:78:02:85:d8:04:7a:c9:57:39:49:a3:d8:
47:cf:c5:92:29:ab:9d:5e:bc:6a:6c:63:7c:67:f4:
a1:df:c0:36:8a:2a:52:9c:95:f7:8d:9b:5b:c9:ca:
a5:84:74:8e:5d:1c:2f:19:4f:de:15:bb:52:1e:e2:
18:7f:e6:40:87:0e:1a:1f:44:6c:3b:08:e4:1e:09:
48:ce:08:5b:02:87:ac:a6:6c:b4:c4:83:51:70:1b:
9a:26:88:2a:b5:ce:df:92:d9:f0:9b:37:c7:96:c9:
d1:e0:25:68:33:a5:18:a6:77:78:3f:a0:36:de:3c:
f2:80:9a:71:1e:c8:06:dc:26:cf:c8:4e:57:d4:c6:
29:bf:a9:93:06:f1:ea:a3:0c:69:62:2f:20:26:3b:
1e:d5:5a:ed:96:0a:f4:23:a2:35:73:a3:4c:b3:ce:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:57:06:30:AF:0E:21:5F:C3:76:DA:0C:B6:A0:24:C4:BC:F4:E2
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:fc:c1:39:83:26:cf:9f:c5:12:87:06:0f:53:5b:62:22:40:
59:fc:82:a1:4c:e9:04:c1:b2:ae:a2:22:89:56:b6:fe:bf:8d:
0b:94:40:c8:e4:bd:26:84:a5:8a:21:65:c4:f3:b6:af:74:03:
0d:f0:1a:18:8f:27:62:eb:86:b3:d1:07:fe:19:1d:5a:c8:f4:
0d:bc:e0:9f:33:4e:65:65:55:a2:e2:bf:d6:b3:5d:98:67:b7:
70:70:a1:98:36:1b:d9:5b:c9:67:73:7b:ff:e0:fa:4b:f5:71:
2f:d0:b2:0a:63:9f:71:a2:bc:86:37:e9:be:41:67:5d:6b:55:
df:48:10:6a:46:38:26:b4:f0:9e:93:32:62:7e:c3:90:cb:32:
5d:7c:0a:2b:e7:25:c8:5c:b5:0a:36:64:6e:1c:07:3e:ca:68:
bc:4a:e0:e1:62:c4:d7:b5:a7:dc:31:68:3c:e9:43:c0:1e:36:
06:eb:67:b6:81:a0:14:fc:9b:87:fd:9d:26:97:cc:0a:5a:15:
81:47:e5:27:2c:71:cb:36:d9:29:24:85:7a:35:9b:06:3a:2c:
e8:f9:db:10:f8:f7:26:e0:a3:92:96:a5:e3:7d:81:1f:55:0b:
9a:9f:49:01:a2:a2:f9:8d:2c:6c:56:58:ca:c7:2e:4e:df:b3:
31:49:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:00 2026 by rpki-client