Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: k9swvy7+NI7xGqE37fua8cehz63rxY0M1rZdtwkY4IY=
Subject key identifier: 52:AD:D0:56:D1:2A:85:DE:55:8C:12:DE:AF:5E:02:DC:E8:66:06:CE
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019CAC475CB8BA62C336019939E0CA345D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 1052
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: lsNcXQx1qdDaywWEAIflykTgxu9Bo26EMsQsc2qOJJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5c:b8:ba:62:c3:36:01:99:39:e0:ca:34:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=52add056d12a85de558c12deaf5e02dce86606ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:84:a0:6a:c3:f7:04:1f:6a:55:66:1e:9b:
5f:d8:40:38:65:23:5d:52:35:e0:8a:1a:ae:29:a6:
1e:78:8d:32:ea:91:ff:49:12:6a:4b:32:e0:19:61:
bb:96:cf:32:24:28:51:cf:dc:af:a1:c2:e1:7f:2a:
1f:a7:e0:0a:ad:0c:6b:42:b3:05:e0:b6:3c:dd:30:
d5:91:df:3e:25:57:5d:6d:79:db:c0:57:66:79:7a:
5f:be:21:ae:93:58:8e:da:7b:d4:0d:36:13:31:aa:
0b:7b:75:d3:72:1c:53:29:38:b9:c3:b8:b8:90:fa:
95:1c:8c:bc:02:e8:c4:53:b3:b2:f2:c8:c8:8f:08:
8f:99:d1:ab:f7:18:d9:a2:07:e0:40:dc:a4:1b:56:
d8:74:c0:e5:61:d3:5c:3b:0f:26:d0:b0:fa:6a:fc:
fa:46:c5:50:ab:79:18:f8:e7:89:c1:bf:5a:4e:0e:
67:cb:a3:ec:c7:ee:2e:e2:ca:2f:ad:4a:fe:ac:f4:
ce:08:87:40:4c:a8:2d:c9:92:75:e9:c5:9c:61:a1:
82:0b:5f:a8:1d:5c:29:8e:05:19:19:cc:65:18:ac:
dd:34:48:90:85:69:fb:4b:6b:e6:25:f2:37:27:e9:
64:5b:9d:a5:6b:56:c1:08:b3:0b:ed:64:9c:30:8a:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:D0:56:D1:2A:85:DE:55:8C:12:DE:AF:5E:02:DC:E8:66:06:CE
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:b4:ff:21:4a:46:99:70:9d:47:74:d6:da:a1:c5:ec:c2:
98:d9:eb:ad:91:a2:7e:79:a3:0a:b1:7c:2b:ac:45:44:18:91:
92:33:ab:63:a8:c5:e3:f1:22:0f:42:aa:0c:47:2b:55:15:18:
c2:47:8b:5b:47:8f:5b:b7:49:dc:4f:00:a3:01:04:26:a9:c2:
a1:32:07:e6:3c:2a:34:3b:9d:4a:c1:c5:86:8a:65:91:94:57:
c2:bd:c7:d0:27:a4:83:e2:c6:81:d5:4e:e4:88:0d:29:7f:63:
17:23:6b:c0:ed:a5:fe:70:65:c9:85:6b:fc:fd:57:b1:a2:8a:
37:3c:f4:73:84:c8:1a:21:18:2c:47:ff:5f:25:e4:3a:08:59:
a6:30:71:99:39:be:68:78:04:c8:90:2b:ce:2a:16:3d:d3:f5:
cb:ef:be:4f:79:63:0f:d2:01:1d:93:d5:fd:27:9c:8a:9b:18:
bd:bf:b1:39:53:9a:a1:a2:c8:c4:6f:64:37:a0:f0:e2:18:08:
3b:a1:eb:b0:91:54:91:7a:1b:7d:ee:5b:d9:bc:ca:ff:8a:42:
63:b2:46:1d:cf:a5:97:a0:f9:b5:13:be:66:82:29:94:b7:e2:
0a:ff:83:28:94:75:7e:e0:4d:82:f5:f6:7d:50:b8:2d:34:d5:
8a:fd:89:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1y4umLDNgGZOeDKNF03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjYwMzAyMDIwMTIzWhcNMjYwMzAzMDIwMTIzWjAzMTEwLwYDVQQD
Eyg1MmFkZDA1NmQxMmE4NWRlNTU4YzEyZGVhZjVlMDJkY2U4NjYwNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufiEoGrD9wQfalVmHptf2EA4ZSNd
UjXgihquKaYeeI0y6pH/SRJqSzLgGWG7ls8yJChRz9yvocLhfyofp+AKrQxrQrMF
4LY83TDVkd8+JVddbXnbwFdmeXpfviGuk1iO2nvUDTYTMaoLe3XTchxTKTi5w7i4
kPqVHIy8AujEU7Oy8sjIjwiPmdGr9xjZogfgQNykG1bYdMDlYdNcOw8m0LD6avz6
RsVQq3kY+OeJwb9aTg5ny6Psx+4u4sovrUr+rPTOCIdATKgtyZJ16cWcYaGCC1+o
HVwpjgUZGcxlGKzdNEiQhWn7S2vmJfI3J+lkW52la1bBCLML7WScMIomNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKt0FbRKoXeVYwS3q9eAtzoZgbOMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHy0/yFK
RplwnUd01tqhxezCmNnrrZGifnmjCrF8K6xFRBiRkjOrY6jF4/EiD0KqDEcrVRUY
wkeLW0ePW7dJ3E8AowEEJqnCoTIH5jwqNDudSsHFhoplkZRXwr3H0Cekg+LGgdVO
5IgNKX9jFyNrwO2l/nBlyYVr/P1XsaKKNzz0c4TIGiEYLEf/XyXkOghZpjBxmTm+
aHgEyJArzioWPdP1y+++T3ljD9IBHZPV/SecipsYvb+xOVOaoaLIxG9kN6Dw4hgI
O6HrsJFUkXobfe5b2bzK/4pCY7JGHc+ll6D5tRO+ZoIplLfiCv+DKJR1fuBNgvX2
fVC4LTTViv2JZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:42 2026 by rpki-client