Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: VlFmpgj9UwTBfSu3uVrTrDTGH7i7QXMZhPyMxSQMDyQ=
Subject key identifier: B2:E5:01:4F:09:7E:B2:03:BC:F2:E1:63:D8:DF:B4:D4:B6:97:27:2B
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019EBE113D0B8922AC9D43DC55491DCB7F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 1167
Signing time: Fri 12 Jun 2026 23:01:01 +0000
Manifest this update: Fri 12 Jun 2026 23:01:01 +0000
Manifest next update: Sat 13 Jun 2026 23:01:01 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: 5kC9RHB+R+jLsjfjxyiJCUvt/N9TBdLeTD4qOHJRBzQ=)
3: xJY_AM5c5mqbzDMlBNgNsWz_lug.roa (hash: B551H0yQy3AcP1JDauGu2ZmstUvG2dDmNnX6HF0awWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:3d:0b:89:22:ac:9d:43:dc:55:49:1d:cb:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jun 12 23:01:01 2026 GMT
Not After : Jun 13 23:01:01 2026 GMT
Subject: CN=b2e5014f097eb203bcf2e163d8dfb4d4b697272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:30:65:f2:86:27:a9:6a:98:2e:16:41:4c:
26:42:1f:52:03:d8:25:dd:42:f2:94:94:b7:c9:63:
f2:44:42:8e:a6:68:a8:98:12:71:14:9a:e0:81:65:
28:39:21:32:8e:15:5c:a4:1c:aa:49:1f:85:b5:03:
7f:68:64:89:5b:d4:9a:ef:8f:39:b6:0a:e5:e6:32:
1e:4e:ee:51:d4:16:e0:d5:15:ef:17:69:8d:6e:c5:
ce:a1:7a:f8:8f:79:49:2d:39:5e:8a:16:72:2f:89:
64:61:ff:cb:39:93:ac:32:70:6e:7b:4d:10:9b:94:
91:d8:48:58:09:9a:e5:ef:72:44:64:60:ad:42:f8:
26:16:f1:b1:1a:b5:3e:d4:b6:22:2e:db:c3:58:5f:
da:7e:e9:2d:bb:43:73:2e:b2:e5:58:24:c0:98:90:
3d:f5:fb:42:c2:51:41:85:86:80:a8:41:0b:70:73:
65:2a:4c:2d:01:83:17:42:3a:14:cd:94:f8:a8:b3:
01:a1:a1:99:13:92:b6:6f:cd:c5:b3:54:6d:77:81:
48:ae:fd:99:7d:01:bc:89:dd:52:82:40:f2:b7:f0:
c2:bf:18:93:7a:72:84:c8:39:c0:3d:1a:e0:b2:59:
97:ff:00:c3:23:21:37:71:d6:c8:df:59:ea:e5:19:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:01:4F:09:7E:B2:03:BC:F2:E1:63:D8:DF:B4:D4:B6:97:27:2B
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fc:9b:62:f8:43:79:7b:f1:3c:93:44:cb:34:12:1b:e5:70:
1d:37:92:a3:e5:76:58:d7:c9:ea:b2:24:72:72:19:60:da:c2:
56:18:7f:7f:a8:95:66:59:97:a5:5c:26:7c:dc:8a:a0:c3:9b:
10:57:96:58:90:67:3b:a1:a5:e0:b3:8d:4e:c6:b1:34:b2:dc:
6e:c9:0b:2b:6c:1f:a6:5b:e0:9e:c9:fd:40:df:e3:72:db:4e:
f3:f4:fb:83:cc:33:85:d6:8d:a9:1e:d4:1d:6e:ee:19:f4:6f:
66:f8:60:12:cf:bc:a3:d9:a2:01:e0:1f:23:26:d3:b8:6f:68:
c1:ea:50:22:d1:1f:bf:e1:9c:ef:14:b7:5b:44:0c:1f:7b:e4:
56:c6:06:53:9f:90:44:ad:19:a8:8d:88:2a:00:9b:88:3b:e1:
af:60:bd:8b:57:ee:1c:42:18:e7:98:91:d2:ce:dd:53:fa:b3:
29:4b:9f:e5:da:5b:63:78:c3:7e:27:72:a4:89:3b:76:fd:8a:
55:f9:89:40:4b:3a:aa:6a:01:b3:46:3e:09:cb:07:0a:39:04:
39:f6:4b:0b:63:07:14:29:44:73:84:e6:35:b1:99:94:e8:ed:
89:aa:02:96:f6:04:23:43:8b:08:02:f3:60:4f:eb:f7:43:02:
a7:c7:48:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ET0LiSKsnUPcVUkdy3+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjYwNjEyMjMwMTAxWhcNMjYwNjEzMjMwMTAxWjAzMTEwLwYDVQQD
EyhiMmU1MDE0ZjA5N2ViMjAzYmNmMmUxNjNkOGRmYjRkNGI2OTcyNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkowZfKGJ6lqmC4WQUwmQh9SA9gl
3ULylJS3yWPyREKOpmiomBJxFJrggWUoOSEyjhVcpByqSR+FtQN/aGSJW9Sa7485
tgrl5jIeTu5R1Bbg1RXvF2mNbsXOoXr4j3lJLTleihZyL4lkYf/LOZOsMnBue00Q
m5SR2EhYCZrl73JEZGCtQvgmFvGxGrU+1LYiLtvDWF/afuktu0NzLrLlWCTAmJA9
9ftCwlFBhYaAqEELcHNlKkwtAYMXQjoUzZT4qLMBoaGZE5K2b83Fs1Rtd4FIrv2Z
fQG8id1SgkDyt/DCvxiTenKEyDnAPRrgslmX/wDDIyE3cdbI31nq5RnCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLlAU8JfrIDvPLhY9jftNS2lycrMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvybYvhD
eXvxPJNEyzQSG+VwHTeSo+V2WNfJ6rIkcnIZYNrCVhh/f6iVZlmXpVwmfNyKoMOb
EFeWWJBnO6Gl4LONTsaxNLLcbskLK2wfplvgnsn9QN/jcttO8/T7g8wzhdaNqR7U
HW7uGfRvZvhgEs+8o9miAeAfIybTuG9owepQItEfv+Gc7xS3W0QMH3vkVsYGU5+Q
RK0ZqI2IKgCbiDvhr2C9i1fuHEIY55iR0s7dU/qzKUuf5dpbY3jDfidypIk7dv2K
VfmJQEs6qmoBs0Y+CcsHCjkEOfZLC2MHFClEc4TmNbGZlOjtiaoClvYEI0OLCALz
YE/r90MCp8dIQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:41 2026 by rpki-client