Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: dVs9jGQbb8DcAQOcKLHxZvXo0CRDPhroHJU4nUUM9qo=
Subject key identifier: A1:8B:15:17:33:0C:F8:36:8D:E8:D1:FE:D4:6C:48:E2:7B:4F:22:80
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019D9A06DE733EE4AA2DC7A53B86BAADEEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1602
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: AHKXd4TZ2DouhOWcv3r4CqnBfpb+n4u9BFClj2B6seM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:de:73:3e:e4:aa:2d:c7:a5:3b:86:ba:ad:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=a18b1517330cf8368de8d1fed46c48e27b4f2280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:0d:ba:7a:50:94:c4:fa:0c:da:dd:b5:2e:
44:86:9c:37:2a:cf:d1:3c:2e:89:a6:f8:05:a0:39:
57:65:e2:41:9e:94:08:24:39:ad:1e:36:af:8a:7f:
2b:75:bf:d6:c0:70:f0:e0:bf:71:1b:69:ad:ce:ad:
c0:e5:61:22:77:b7:e6:9a:26:39:6f:af:ac:cd:2d:
3b:7d:17:b0:8d:52:d6:56:04:a4:0b:e8:27:de:db:
b9:c0:74:75:51:ee:9e:18:10:92:5d:b9:af:f0:52:
84:ed:e8:eb:c4:a9:e7:3d:85:c4:dd:cf:c0:20:cb:
df:6a:12:00:a0:e0:d3:e6:26:b5:08:41:86:82:91:
36:9a:7f:cf:00:9c:6e:b1:7f:d0:70:48:47:dd:e2:
2d:81:52:a6:4f:1f:3e:63:1e:bb:a5:36:fa:bb:68:
66:03:79:20:5d:ba:1c:20:ee:e5:72:c4:57:cb:49:
26:0a:5f:88:5b:4b:d7:8b:47:98:d1:e7:08:19:7b:
27:52:b8:65:0a:91:43:01:ce:30:27:72:8d:01:92:
cf:9b:7b:40:d5:da:c6:f2:d3:39:46:53:0c:f7:9d:
65:36:52:20:d2:51:82:a3:a0:aa:e3:85:6c:70:95:
d7:95:57:6b:12:07:96:fe:d8:9e:58:c6:e7:c6:71:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:15:17:33:0C:F8:36:8D:E8:D1:FE:D4:6C:48:E2:7B:4F:22:80
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cf:4f:28:9f:41:db:cb:d2:72:8b:71:89:9c:bb:8e:77:9d:
8e:2e:e1:07:3e:0f:1f:23:7c:c4:4f:c2:a2:51:b9:a3:de:e0:
47:da:54:7b:d8:68:e9:89:13:c3:25:9b:43:2a:1b:aa:57:3c:
58:92:86:43:34:ab:2f:cd:f6:81:a4:d1:1f:63:aa:42:dd:df:
33:e1:88:01:e5:a6:a5:57:79:5d:35:31:b1:2b:8f:98:50:56:
8c:c8:98:ab:7d:2c:17:9b:79:03:b1:2c:b4:ad:0c:ae:6e:80:
cc:c2:4c:fb:2d:01:91:d3:d5:55:68:4f:d3:29:bf:88:55:cf:
39:13:a1:00:e4:fe:1c:fe:cf:69:e1:9a:7d:5b:8c:da:22:e5:
1a:fa:4b:76:c4:73:3e:66:b1:db:27:af:38:7d:87:a2:c6:61:
41:36:99:88:c9:fc:1f:77:35:96:d3:1d:9e:30:67:ca:30:a8:
bf:0d:fa:80:08:54:f5:3d:31:fc:aa:0e:61:72:a7:b9:61:a9:
19:06:17:1b:96:51:bf:d5:02:0b:d8:21:0f:d8:77:c0:13:ad:
52:b2:77:ed:8a:12:14:41:9d:26:b8:62:ea:ed:19:0b:81:db:
f1:24:f2:09:a0:7d:9c:01:a6:99:5e:d3:23:13:4c:b6:94:48:
b6:92:d1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBt5zPuSqLcelO4a6re6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjYwNDE3MDYwMDM0WhcNMjYwNDE4MDYwMDM0WjAzMTEwLwYDVQQD
EyhhMThiMTUxNzMzMGNmODM2OGRlOGQxZmVkNDZjNDhlMjdiNGYyMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrENunpQlMT6DNrdtS5Ehpw3Ks/R
PC6JpvgFoDlXZeJBnpQIJDmtHjavin8rdb/WwHDw4L9xG2mtzq3A5WEid7fmmiY5
b6+szS07fRewjVLWVgSkC+gn3tu5wHR1Ue6eGBCSXbmv8FKE7ejrxKnnPYXE3c/A
IMvfahIAoODT5ia1CEGGgpE2mn/PAJxusX/QcEhH3eItgVKmTx8+Yx67pTb6u2hm
A3kgXbocIO7lcsRXy0kmCl+IW0vXi0eY0ecIGXsnUrhlCpFDAc4wJ3KNAZLPm3tA
1drG8tM5RlMM951lNlIg0lGCo6Cq44VscJXXlVdrEgeW/tieWMbnxnHj4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGLFRczDPg2jejR/tRsSOJ7TyKAMB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos9PKJ9B
28vScotxiZy7jnedji7hBz4PHyN8xE/ColG5o97gR9pUe9ho6YkTwyWbQyobqlc8
WJKGQzSrL832gaTRH2OqQt3fM+GIAeWmpVd5XTUxsSuPmFBWjMiYq30sF5t5A7Es
tK0Mrm6AzMJM+y0BkdPVVWhP0ym/iFXPOROhAOT+HP7PaeGafVuM2iLlGvpLdsRz
Pmax2yevOH2HosZhQTaZiMn8H3c1ltMdnjBnyjCovw36gAhU9T0x/KoOYXKnuWGp
GQYXG5ZRv9UCC9ghD9h3wBOtUrJ37YoSFEGdJrhi6u0ZC4Hb8STyCaB9nAGmmV7T
IxNMtpRItpLR1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:30 2026 by rpki-client