Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: Tn5BfKqLs/1zFBkNYj3ZjLKzKMa22ptVd9/gotPasEY=
Subject key identifier: 67:3C:7E:C7:F0:F0:1E:E4:FD:3D:D4:6F:FE:92:AF:75:63:3C:EF:CB
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019CAA8F93233440E8185D920FF007691167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1586
Signing time: Sun 01 Mar 2026 18:01:01 +0000
Manifest this update: Sun 01 Mar 2026 18:01:01 +0000
Manifest next update: Mon 02 Mar 2026 18:01:01 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: zI8yBN+i447Sft2GJx0XBaGmwdTadU+jtdcXgt/THtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:93:23:34:40:e8:18:5d:92:0f:f0:07:69:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Mar 1 18:01:01 2026 GMT
Not After : Mar 2 18:01:01 2026 GMT
Subject: CN=673c7ec7f0f01ee4fd3dd46ffe92af75633cefcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:c1:48:9e:a5:8f:28:34:5c:17:35:31:c1:
4a:d3:55:7f:05:97:04:5e:f3:aa:35:cd:e4:ac:73:
c5:69:4a:a8:5a:9d:95:04:74:d6:89:8c:97:7e:58:
08:35:da:fd:a2:bc:a0:e5:c2:ae:21:19:c8:b7:98:
3b:5f:c9:2e:29:96:cd:5c:15:ed:52:e5:b4:73:ba:
a6:e1:9f:5f:e7:08:b7:10:28:80:6d:a9:01:89:b1:
29:64:ad:e6:5c:c3:f6:fa:c4:c7:06:c1:8d:11:45:
b0:71:4f:e8:c0:4b:5e:50:5e:9e:f7:fa:7a:a9:12:
86:5d:c4:e2:09:28:1b:9d:9a:c3:95:14:d1:6e:b1:
d8:fb:c1:1d:6d:78:59:c5:ee:ef:9d:2a:a2:d0:9d:
04:25:96:60:4a:fa:05:3f:2d:51:f5:4a:7b:17:ca:
4c:96:65:ce:e5:33:0c:4a:80:0f:be:ee:ad:52:89:
ef:a6:b1:10:6d:f0:a6:ec:a5:b4:57:9b:55:af:93:
89:30:ef:12:b6:55:c0:6b:e8:82:b9:6e:9f:78:55:
1a:01:a0:81:d1:29:d7:17:d8:bc:47:55:ef:da:f9:
1a:f6:be:f6:3a:cb:cb:b8:a5:18:da:42:d6:8f:dd:
d4:69:8a:1d:b6:86:b0:a3:ce:65:23:ac:d5:1a:ca:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3C:7E:C7:F0:F0:1E:E4:FD:3D:D4:6F:FE:92:AF:75:63:3C:EF:CB
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:6c:5d:ba:96:4f:8b:2d:0f:d6:69:a2:29:6b:32:e6:c8:
32:be:7e:09:96:f7:e7:cb:7a:96:9a:a0:ed:eb:0a:95:b1:da:
f0:10:35:f2:00:d9:e9:de:4a:84:94:8f:11:0d:63:df:d0:64:
2b:63:b4:32:aa:08:df:b1:65:07:bb:25:9e:09:0f:db:98:08:
a1:6c:24:e4:48:98:b3:cb:c9:b3:e2:17:47:7b:7f:7f:57:03:
8e:5b:7e:e2:76:f9:cb:ac:3c:3e:f0:b9:58:13:24:bb:fe:a3:
09:92:38:c9:80:f6:5a:af:76:4a:18:3d:ef:77:dc:4a:c2:80:
2b:ce:1f:77:1f:7c:83:fb:0a:2a:a7:44:c6:2a:68:99:4a:88:
31:92:dc:b4:0c:65:37:2f:bb:55:9e:dd:ae:36:91:b7:63:00:
01:53:ac:de:df:f7:c7:f9:c9:c3:db:8e:34:4e:c7:94:74:2e:
e3:96:05:43:56:f2:fd:9d:2b:5d:eb:99:65:5d:f1:95:29:71:
4a:91:39:cd:5d:9d:55:11:ca:50:58:90:3d:03:c1:a4:77:33:
11:c8:7c:70:b0:56:f6:ca:0d:60:5e:46:50:75:f1:71:2e:a8:
eb:72:e5:bc:78:c6:e2:b0:33:d0:37:93:8c:4f:de:dc:e5:db:
76:f2:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:33 2026 by rpki-client