Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: lz46m8LeZFDk0/hx2KX11bADgT2et4Dw3oFMBpaA3L8=
Subject key identifier: 28:7F:A9:81:50:37:98:B5:D1:62:1D:EA:30:E1:D5:7D:1B:18:15:A7
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 01A0C3323898E1B607578B6291219495C6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 17A5
Signing time: Mon 21 Sep 2026 09:00:43 +0000
Manifest this update: Mon 21 Sep 2026 09:00:43 +0000
Manifest next update: Tue 22 Sep 2026 09:00:43 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: 6lWMAs2GEOP0hTLTCoYtvUstwKy7WOo13X4ugRL1EG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:38:98:e1:b6:07:57:8b:62:91:21:94:95:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Sep 21 09:00:43 2026 GMT
Not After : Sep 22 09:00:43 2026 GMT
Subject: CN=287fa981503798b5d1621dea30e1d57d1b1815a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:74:a7:d8:49:20:02:ce:48:7f:41:74:24:
58:75:b6:9d:87:24:2b:14:23:d6:dd:a0:0a:cb:99:
a8:af:46:57:af:17:56:e4:3d:20:8e:85:68:5e:3f:
cb:41:3a:e3:5d:97:61:a0:e6:10:ce:b5:d6:7d:2f:
55:0b:6d:ad:60:ae:e5:c7:aa:69:d5:95:25:56:68:
af:0c:2a:0d:d8:07:50:57:0e:63:4a:54:c7:aa:e1:
ee:28:ab:b1:9e:ef:3f:d8:30:62:ba:a0:b1:82:16:
30:59:58:4e:83:fd:53:27:82:9e:7f:37:d0:26:f8:
34:ce:86:15:69:f2:c3:26:a1:c1:23:c2:74:0b:7c:
86:98:96:9e:63:6b:94:65:4e:8f:36:58:3a:c3:92:
a0:b2:be:9f:1a:22:11:c9:52:0e:a5:f4:5e:10:fc:
7a:5a:00:31:7e:5f:eb:ba:d1:e5:04:8c:98:f3:3f:
3d:76:21:37:00:b4:b8:61:0a:59:90:60:31:3e:9a:
32:3e:d4:55:cd:b1:27:ab:b8:59:ca:0a:0f:aa:93:
22:13:91:53:cc:a6:3b:33:9c:3d:00:74:47:ea:cd:
d5:4a:87:d4:7e:25:83:9a:87:71:b2:33:05:8e:5c:
f9:82:37:16:81:b8:d2:39:bb:7e:77:85:48:46:57:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:A9:81:50:37:98:B5:D1:62:1D:EA:30:E1:D5:7D:1B:18:15:A7
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8b:16:05:95:82:3b:77:44:e5:1e:38:22:a5:66:09:7b:bd:
d0:88:93:22:39:16:81:cc:2b:1e:04:c5:95:a4:e1:ea:bb:10:
c1:42:ba:6e:c5:b0:dc:17:55:7d:95:0a:04:5e:f7:1c:35:f2:
8d:f5:b4:68:27:6c:f6:a4:1d:3e:86:d4:5b:4d:af:36:1a:a3:
19:75:c1:80:b7:7c:11:b0:43:0b:69:e3:ca:36:89:52:89:40:
36:3e:0e:ee:f2:d3:d6:87:fd:be:44:42:3d:29:c8:b9:d7:29:
85:3e:04:63:92:31:dc:9a:cd:44:b6:96:47:3e:c1:fe:f5:28:
d8:3b:e3:41:a2:27:cd:cb:a0:b3:10:2d:94:1a:9f:f1:4a:f8:
83:11:08:12:5a:69:5f:ac:f7:83:f7:34:1a:ba:a3:51:25:45:
7e:04:4d:7d:2d:5d:0b:c9:8d:b0:25:1b:c2:16:fc:69:66:99:
d6:30:89:46:35:73:03:fa:df:0d:86:15:ed:46:50:40:00:2d:
5f:85:79:18:c9:54:f4:be:eb:85:ab:cc:80:3d:f4:9f:47:39:
4c:d1:a6:1a:e1:92:5c:69:d3:c0:a1:c5:2a:1d:27:f2:93:fa:
92:00:92:4c:c5:58:19:7e:fb:bd:ff:9a:95:ba:39:df:d4:30:
1c:31:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:02:34 2026 by rpki-client