Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: 4dWM+eVOG53V9tQg8dVEslGaPRgvuzspHJBqvEjjeOY=
Subject key identifier: 6F:F1:DF:B5:7E:D4:EF:FA:A7:31:E2:7E:88:46:37:DF:E4:EF:90:FF
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01A0C632D7E890DA1EB2D6A3EE067714149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 1275
Signing time: Mon 21 Sep 2026 23:00:15 +0000
Manifest this update: Mon 21 Sep 2026 23:00:15 +0000
Manifest next update: Tue 22 Sep 2026 23:00:15 +0000
Files and hashes: 1: 41p3kpRJWL2MgitfF2i70VkmycM.roa (hash: gLJxBjMA5TyS6tzrLh6xE9DIPjxuKa3Tf9+7RkGDxRs=)
2: 8PJsiSgawJpqi4WMA0rE-WSVzw4.roa (hash: gH5uM65Zqr7CX//7XHgG1PbcCvfvj2cn2duCm7yPiEg=)
3: W1I4zwk5u62kEWKU3w3ttcGBy2k.roa (hash: m2lBjL0FDEr7OnguUKCR+j/T0K4u4HNIAXm6k1LnPZo=)
4: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: i85neUzoOFOKCzOtYdTJqUbyr6c2cMj+zOzzdlj1Vk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:d7:e8:90:da:1e:b2:d6:a3:ee:06:77:14:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 21 23:00:15 2026 GMT
Not After : Sep 22 23:00:15 2026 GMT
Subject: CN=6ff1dfb57ed4effaa731e27e884637dfe4ef90ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:87:ab:1a:a6:01:01:2f:ce:da:4f:6f:c0:
2f:8e:9c:84:20:0a:00:79:44:96:f7:0d:0f:2a:8d:
d3:3f:1c:b7:bb:4a:97:18:7d:5f:d7:d7:f1:da:ef:
32:1d:b1:c2:05:27:6c:d2:bc:a0:d4:9c:d7:1f:fb:
0c:b0:0f:b5:bd:79:7e:e5:17:1d:bd:98:4d:db:12:
45:25:17:ef:ec:d7:79:b3:af:85:b6:d4:91:c4:de:
f4:e5:28:7e:ed:62:47:55:5c:87:a2:8f:9e:bd:7b:
e5:7c:74:d1:84:45:17:7c:1e:9d:56:51:b8:f5:d5:
01:d2:de:2f:90:6d:22:c5:1d:2b:e7:31:ab:d3:98:
9c:34:c3:f6:b3:01:ef:54:d1:cb:eb:59:b5:30:7a:
d0:f9:35:1b:73:fd:ca:e4:c2:34:4c:d2:1a:32:0b:
e2:95:6f:71:91:64:41:15:46:2e:f8:32:ba:36:bd:
8d:d8:d3:c0:d1:2d:ef:49:f2:0d:9c:ed:eb:5a:c0:
7d:54:12:44:a8:5a:7b:f9:27:41:d6:e3:f6:7e:01:
1a:1c:2e:c6:29:f3:28:9e:e1:8c:b8:e0:3a:89:55:
c1:8e:60:84:f7:a3:45:12:96:21:23:29:c7:c6:30:
1a:68:da:6f:ab:ed:e4:37:1a:7b:1c:12:31:5f:4e:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:DF:B5:7E:D4:EF:FA:A7:31:E2:7E:88:46:37:DF:E4:EF:90:FF
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c4:eb:60:47:5d:e8:4e:23:6a:41:a3:72:26:e5:f6:4c:02:
ce:88:d0:69:7a:d8:6f:a1:7d:2f:0c:81:6f:0d:11:de:f8:c6:
61:6b:c5:b6:1d:d4:ae:dd:d7:e3:d9:ea:e2:c5:71:a1:c2:7b:
ca:eb:68:21:b3:ea:86:a8:1d:94:ba:d3:18:06:aa:8c:f5:1f:
6d:d5:bf:39:8b:b0:8b:16:a5:fc:28:97:40:2e:9e:f0:89:f5:
f0:43:ef:2e:bc:6c:bb:90:3a:ea:17:93:92:94:83:3f:c4:00:
57:43:9a:7c:0e:ea:98:24:12:d6:cd:19:f9:f9:2c:51:a6:e5:
b9:6e:08:2a:a3:0c:73:9f:dd:6c:4d:33:7e:d0:02:cb:1e:42:
6e:a9:aa:14:2b:3e:b7:0d:0d:62:ef:1f:24:44:c4:7e:44:17:
00:64:27:9e:a1:cf:18:21:08:b2:64:92:f2:46:5a:a0:18:89:
1b:f3:47:30:43:f7:15:53:40:f5:ac:24:b7:97:eb:ff:b8:ba:
6f:48:0f:dd:fc:99:2e:df:e0:23:da:92:1a:29:1c:45:b0:89:
0d:da:8b:70:3f:48:64:bd:a6:f8:cc:52:4b:2e:5d:b4:b2:7a:
e8:91:17:00:d4:ac:1e:5c:44:7b:b1:e0:f6:75:21:a9:75:96:
eb:b8:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:38:40 2026 by rpki-client