Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: ZcPFsVnmV4n6EN4OozkAT5xZ/mM86XtSJLIpt9kyAfY=
Subject key identifier: 54:BD:20:08:15:AD:B5:C1:D3:EA:B3:5F:DF:DB:A5:9A:41:F4:3F:78
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019FA93E58F465A91A4CAF7036C1B7818C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1713
Signing time: Tue 28 Jul 2026 15:01:03 +0000
Manifest this update: Tue 28 Jul 2026 15:01:03 +0000
Manifest next update: Wed 29 Jul 2026 15:01:03 +0000
Files and hashes: 1: 3U9XXw27zqpf94-wxZvCnYoD8Rs.roa (hash: ABKpv4/y9oSC6KDlLnuTzCpaeYoyjfjg6JlyvzIxSDs=)
2: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: WLHDOChVT+ehjEgy+5PNWNgqDT7bLAZAIScU0oJuVLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:58:f4:65:a9:1a:4c:af:70:36:c1:b7:81:8c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jul 28 15:01:03 2026 GMT
Not After : Jul 29 15:01:03 2026 GMT
Subject: CN=54bd200815adb5c1d3eab35fdfdba59a41f43f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:e7:0f:df:43:cc:db:a6:48:c8:8e:80:47:
10:54:9b:7a:f4:14:b6:e3:d6:06:14:05:5b:3b:8e:
eb:4b:46:b5:0f:d1:ab:55:fe:51:06:6b:ce:ec:9f:
65:b5:88:35:68:e1:81:80:68:9c:b2:df:3e:55:9c:
b2:bf:79:2c:ab:d8:62:21:6a:ac:dd:36:a3:b6:a2:
50:d9:d8:5d:b6:c4:04:53:a6:d7:47:31:e2:ae:fc:
ba:df:4c:a5:bb:18:f5:a5:f7:7a:0b:65:5b:c5:54:
9d:ba:a0:a9:35:a5:76:7d:69:a1:75:02:f9:29:8e:
34:51:fb:00:9d:b8:50:cf:24:52:c9:b4:67:d6:b1:
34:30:e7:ff:43:f1:70:b6:0c:d3:c6:dd:cd:08:16:
25:20:4b:70:c4:12:b0:eb:fb:80:c1:ce:27:7b:16:
e5:ef:a6:d0:ec:65:72:3c:38:0d:52:bd:28:66:f1:
06:5e:1a:59:1a:5d:a1:97:ce:45:5f:73:40:75:0f:
2d:d9:05:a9:31:cb:ee:e9:e9:43:60:87:fb:b6:10:
81:46:e2:40:9f:44:9f:c1:60:43:21:11:ea:39:91:
ad:ab:98:f7:77:92:3d:d0:b8:1c:d3:03:44:9c:fe:
ac:26:10:ee:97:af:19:c5:ff:2b:f5:98:85:26:1b:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BD:20:08:15:AD:B5:C1:D3:EA:B3:5F:DF:DB:A5:9A:41:F4:3F:78
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ca:28:9f:a6:4f:cf:16:bc:fe:15:1e:f3:1f:0f:01:2f:0f:
e9:06:58:2b:68:78:c1:c8:3b:34:c5:6f:bd:e5:df:1b:22:29:
48:27:60:23:a3:68:02:2e:7c:93:43:4a:a7:ca:ac:62:1f:b5:
6f:b2:15:ae:41:d5:1b:47:10:d5:1c:f5:a4:fd:20:b1:5c:64:
4a:b6:81:e6:5b:f5:03:b8:69:33:4b:a9:6a:4b:4b:54:5d:91:
04:c2:41:a1:ae:5b:d2:b9:23:55:18:aa:10:8f:1e:45:2c:a8:
51:89:a0:d1:cd:4e:09:f8:db:31:38:75:0b:c7:7c:e3:e0:65:
c9:4f:81:53:f7:f2:6d:a8:57:24:27:f9:bf:73:ee:34:43:10:
c1:cd:03:1d:c6:10:15:40:5b:1b:8a:c2:2b:f1:22:5d:18:cd:
3d:07:af:c0:02:ed:ab:1a:5a:2f:0a:b3:6e:7c:ba:03:43:44:
8c:d9:7f:eb:10:44:09:d3:c2:54:2e:b1:39:a1:2a:ed:fa:93:
64:eb:9e:ce:50:49:80:13:1f:bf:b1:c0:d2:b2:e6:b0:59:0e:
0f:12:bd:ad:3d:7d:c5:27:96:73:eb:48:f5:05:4a:a0:d1:98:
ca:cf:92:7c:a0:bb:ef:8b:8c:f6:d3:e4:c0:e5:94:e5:da:86:
ff:19:d0:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPlj0ZakaTK9wNsG3gYw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjYwNzI4MTUwMTAzWhcNMjYwNzI5MTUwMTAzWjAzMTEwLwYDVQQD
Eyg1NGJkMjAwODE1YWRiNWMxZDNlYWIzNWZkZmRiYTU5YTQxZjQzZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuvnD99DzNumSMiOgEcQVJt69BS2
49YGFAVbO47rS0a1D9GrVf5RBmvO7J9ltYg1aOGBgGicst8+VZyyv3ksq9hiIWqs
3TajtqJQ2dhdtsQEU6bXRzHirvy630yluxj1pfd6C2VbxVSduqCpNaV2fWmhdQL5
KY40UfsAnbhQzyRSybRn1rE0MOf/Q/FwtgzTxt3NCBYlIEtwxBKw6/uAwc4nexbl
76bQ7GVyPDgNUr0oZvEGXhpZGl2hl85FX3NAdQ8t2QWpMcvu6elDYIf7thCBRuJA
n0SfwWBDIRHqOZGtq5j3d5I90Lgc0wNEnP6sJhDul68Zxf8r9ZiFJhstlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS9IAgVrbXB0+qzX9/bpZpB9D94MB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMoon6ZP
zxa8/hUe8x8PAS8P6QZYK2h4wcg7NMVvveXfGyIpSCdgI6NoAi58k0NKp8qsYh+1
b7IVrkHVG0cQ1Rz1pP0gsVxkSraB5lv1A7hpM0upaktLVF2RBMJBoa5b0rkjVRiq
EI8eRSyoUYmg0c1OCfjbMTh1C8d84+BlyU+BU/fybahXJCf5v3PuNEMQwc0DHcYQ
FUBbG4rCK/EiXRjNPQevwALtqxpaLwqzbny6A0NEjNl/6xBECdPCVC6xOaEq7fqT
ZOuezlBJgBMfv7HA0rLmsFkODxK9rT19xSeWc+tI9QVKoNGYys+SfKC774uM9tPk
wOWU5dqG/xnQXA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:51 2026 by rpki-client