Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: utdqOVh54Lrb3No6WD5M6oLX0Afwa/+2Xh4sFST8PS8=
Subject key identifier: 5C:EE:E5:80:BC:72:B8:E3:1F:B2:04:28:1B:51:2D:7E:44:34:83:38
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019EBF91325521558F2D111B7916469CFEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 169A
Signing time: Sat 13 Jun 2026 06:00:24 +0000
Manifest this update: Sat 13 Jun 2026 06:00:24 +0000
Manifest next update: Sun 14 Jun 2026 06:00:24 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: zwxkFH3lwZqNMq8imTbBiY8nSNzNjVN99vr6kpuoFno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:32:55:21:55:8f:2d:11:1b:79:16:46:9c:fe:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jun 13 06:00:24 2026 GMT
Not After : Jun 14 06:00:24 2026 GMT
Subject: CN=5ceee580bc72b8e31fb204281b512d7e44348338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:47:a6:52:09:6f:33:b4:d1:ec:03:93:3d:
b2:28:5e:dd:df:a2:01:34:ed:f6:dd:3f:8b:d5:6e:
a2:11:d2:e9:21:5c:74:c8:b6:94:4d:23:ae:35:b8:
48:15:4b:d5:39:d4:36:bb:f4:0a:d2:c2:4f:6a:b6:
68:ec:25:86:5d:31:41:3c:44:17:37:a8:81:27:82:
5e:1e:fa:5c:b6:98:c7:24:64:46:04:1d:b8:cf:74:
3b:bf:6f:70:ae:95:99:64:90:a4:2d:6f:68:75:d6:
5d:96:f2:5a:f6:2d:36:78:ca:9c:bb:da:7f:61:cd:
4e:02:39:0f:2f:32:f0:2c:e3:05:aa:52:8a:9c:c7:
0c:c8:bf:5c:24:c2:a0:11:37:fc:60:93:b8:04:e5:
ad:83:44:c9:1d:67:a8:45:4c:d3:b5:91:58:39:ea:
1f:f2:85:25:73:b0:57:7a:3d:0f:fc:d0:d2:02:3a:
13:0f:a2:e7:6e:32:67:e0:2d:fb:0c:a3:54:c0:b9:
2e:2d:fc:3a:1b:a8:87:1a:21:e0:c8:d5:02:fa:66:
c7:9a:e1:c3:95:e4:20:0e:ee:10:ac:91:e3:59:5c:
5a:54:52:96:0c:55:61:a3:5b:05:8d:dd:ec:b4:76:
88:01:f6:2b:78:00:78:ed:0c:2f:3b:f2:e7:ba:1a:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:E5:80:BC:72:B8:E3:1F:B2:04:28:1B:51:2D:7E:44:34:83:38
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:17:ed:40:34:40:38:31:eb:b2:26:4a:c1:f8:b9:b6:fa:
47:21:65:05:ea:fc:81:9a:0b:7d:57:73:b4:65:ff:d2:d2:0f:
70:af:96:8f:7a:c8:47:b5:21:cb:14:08:7d:e8:89:87:52:74:
f7:3a:a3:2c:59:bb:81:2d:e6:eb:37:a4:51:ae:3b:eb:07:ea:
95:e2:25:62:aa:26:9c:ae:e4:b6:65:fc:23:9f:ae:e8:1e:4c:
c4:75:77:ab:3d:82:33:d1:38:79:dc:87:24:83:56:b2:33:de:
b9:bc:60:3d:6b:c1:e8:1c:e5:d4:b0:31:c4:2c:81:15:30:66:
71:c8:83:d4:a1:60:bf:29:4b:cc:27:28:f6:b5:5b:e9:60:0d:
72:ca:fa:d8:67:28:87:41:a8:04:53:8f:8a:61:9d:ae:84:74:
e0:df:b4:5a:6d:24:12:35:07:9c:c9:6b:c4:3a:15:6b:2e:56:
5e:ff:36:93:d1:bc:d5:a2:08:60:3c:f9:a7:72:cb:f3:ec:29:
4f:b4:30:b4:d4:06:50:fe:36:e2:c3:8d:40:c4:86:b2:45:87:
a0:96:86:79:ab:d6:c1:a9:a5:be:7a:4e:73:72:47:80:24:d7:
fc:18:04:a9:e7:e3:de:94:c0:80:4b:fa:3a:73:4b:17:8d:4f:
ec:2b:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:00 2026 by rpki-client