Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier: CCloUc/zggFf4WYe8oghLqt+UuOeej5ns2NHVTV4sJ8=
Subject key identifier: 39:CA:8A:F1:38:74:5E:2E:2F:A4:0B:FF:1D:CE:F0:DA:E8:B3:22:8C
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial: 019CAC7DB8729AD079C0F2D92AC81DEB2463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number: 0104
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: Y4c0D0abGs9VBQWiLBa1lDzkuDE4a/2B+jJpLvbzrNM=)
2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b8:72:9a:d0:79:c0:f2:d9:2a:c8:1d:eb:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=39ca8af138745e2e2fa40bff1dcef0dae8b3228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:2c:ae:71:e0:87:b2:4d:10:6e:bb:dc:f5:
66:a7:88:cb:c0:7e:4f:05:af:1f:aa:df:82:89:2d:
cf:3e:3f:fc:63:66:93:11:9b:52:e5:a8:ed:13:b1:
c7:9d:df:d4:9d:07:54:e8:d3:86:e5:78:22:d2:88:
e0:03:5d:6e:61:66:16:81:e6:71:9f:40:56:d0:d1:
85:5f:d2:4e:a1:1d:1d:cc:cc:d2:67:94:74:98:21:
7e:71:96:ea:d1:cb:14:28:9a:20:9d:fc:bc:a5:fa:
c2:ff:f4:43:49:d1:ad:38:e7:17:24:3a:c3:fc:54:
4c:2d:2f:c0:4f:bd:9c:77:e9:8c:d2:2c:b9:b7:1e:
40:d8:45:df:11:f7:68:5d:41:e2:b3:a1:90:1a:3d:
b5:2f:ec:59:3f:60:e4:e4:ae:ea:eb:ac:5e:10:4a:
d3:29:51:54:0c:24:da:90:37:d5:e6:6b:48:d3:09:
da:1f:5b:19:34:6b:f4:21:d7:76:b3:6b:8a:42:18:
03:c5:dc:41:f9:7e:37:2e:b9:d6:dc:33:ce:e6:2c:
18:c0:6e:0f:d6:10:9b:a4:19:f6:9f:eb:53:d3:7d:
2e:6c:1e:e0:5a:97:a6:7f:42:fc:11:0e:99:b7:0a:
9f:2b:7b:2b:c6:b8:3c:aa:2b:68:af:b8:4c:a0:0c:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:8A:F1:38:74:5E:2E:2F:A4:0B:FF:1D:CE:F0:DA:E8:B3:22:8C
X509v3 Authority Key Identifier:
keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:91:b3:2d:4c:43:72:26:a1:03:5a:23:cc:22:ad:39:8c:
1d:e2:94:95:1b:da:dc:90:2b:c6:09:ac:41:20:62:47:01:60:
db:35:eb:cd:db:75:fa:3e:c9:31:d2:7f:fa:32:26:c4:c7:13:
61:5f:2f:c9:86:9c:f5:35:68:a2:fd:00:44:58:b8:2c:77:fd:
04:b1:5e:c3:b7:6a:cc:c3:05:1f:c8:a7:ea:94:a4:2d:07:78:
5b:96:90:b2:ad:56:f7:09:20:e8:81:36:52:03:27:38:16:be:
2f:9d:d3:7d:f1:1b:97:1b:13:b0:ef:03:7f:7a:73:b6:80:0d:
60:68:05:6f:9e:48:d4:3c:96:57:ba:f3:1b:c4:69:ba:4d:dd:
8c:0b:f2:4b:67:3c:ab:4f:44:7b:46:9f:93:3a:e0:b1:36:cc:
4b:cc:7a:c9:d7:12:95:d5:a6:5e:91:68:ab:62:21:8a:0d:3b:
73:7e:f1:c2:ac:75:1a:86:4f:b4:2b:80:6c:8b:d3:dc:34:50:
56:e7:d8:0a:a7:e6:c9:5a:9f:e3:f1:33:eb:7b:a4:21:c4:c7:
5a:82:01:64:56:ce:56:68:0b:ca:71:5b:1c:68:87:89:f3:1d:
41:53:c6:54:c4:c0:34:f9:47:d2:08:f4:cf:e6:0e:16:24:1a:
9d:be:82:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:26 2026 by rpki-client