Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: Dpcj94cCRx+CtrI/zvMbbpJzyXIJ2CtOBIQMlB6dK9Q=
Subject key identifier: 27:49:68:20:B0:82:FB:F3:8E:F5:50:76:FC:64:69:26:51:57:30:E0
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 019CAD22C96AF8DE1D71A9C5F07D7FFA9B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: LcEu+KW+W3abDRk0/DMFwCpqvKqZp8l2puDkDHEyN9s=)
2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c9:6a:f8:de:1d:71:a9:c5:f0:7d:7f:fa:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=27496820b082fbf38ef55076fc646926515730e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:bb:16:c9:38:c9:fe:92:f0:55:cf:63:ed:
33:d1:53:bf:fb:75:49:80:0e:3d:f1:a7:3a:bd:ae:
18:db:5f:fe:35:ed:90:50:0f:f8:85:93:81:da:8d:
d9:9c:cd:fa:7f:60:80:34:11:dd:c9:f4:e5:42:e7:
65:f6:22:61:3d:84:62:fd:09:82:f2:d0:53:19:ae:
45:d8:a8:b4:4c:60:ce:46:80:78:82:f2:d4:84:1d:
66:1f:0d:75:f7:6f:76:2f:28:1f:a5:66:b9:e9:75:
85:3a:c9:76:43:9c:27:b4:58:4a:1f:b9:3e:ca:d0:
5e:cb:a2:0a:55:5a:55:0d:27:1e:c8:12:85:2b:3f:
ab:88:83:bb:69:ac:a1:aa:0f:e2:62:9d:6b:ec:7f:
af:ad:19:ab:e7:90:c6:2d:42:d5:98:69:c5:02:c1:
9b:f3:06:3a:af:da:ad:ea:5b:12:e4:a3:07:ad:2c:
ef:76:89:83:cb:03:df:e1:b6:8a:45:cc:73:e4:48:
7a:3a:d3:24:6f:4f:b4:d9:ef:9b:60:e5:b5:3b:a5:
d8:80:7e:63:cd:bc:6f:aa:2c:94:12:7e:2e:85:e3:
bd:4b:9b:15:f3:2e:c1:5d:36:c3:63:42:cc:b1:4c:
d7:4f:b9:a9:af:1f:2c:30:88:6a:b7:6d:b5:bb:15:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:68:20:B0:82:FB:F3:8E:F5:50:76:FC:64:69:26:51:57:30:E0
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bf:06:1e:c6:9a:13:69:44:3e:6e:72:3d:fd:ae:1d:42:fd:
ec:6a:b5:04:d1:b9:d0:e5:cd:47:2d:e8:e7:72:09:4d:c6:a1:
a8:9b:36:fe:9f:26:b4:a9:5d:f7:31:af:22:26:32:70:91:fe:
ae:cc:07:f5:d9:26:41:c4:23:df:69:f0:29:4d:77:de:12:9b:
ba:79:cc:c2:c1:26:87:ae:f3:8a:9e:66:96:e8:56:34:24:05:
8c:db:51:66:c8:07:23:ae:63:77:9f:33:d4:31:dc:45:3e:83:
66:dd:55:97:f5:f8:b8:ce:f0:94:00:20:e2:80:e7:50:e7:97:
08:e6:9d:c3:84:c6:f0:ed:e8:27:2d:7a:0c:8c:68:6e:c7:b6:
f8:6d:78:b4:6a:88:4e:cf:87:64:be:7f:2d:bd:75:1b:c5:5d:
d4:2a:4e:61:6c:a9:42:27:92:a2:a3:40:04:cb:68:a4:b4:4f:
bd:12:f4:1f:35:47:99:9c:ab:2a:ac:42:7c:cc:0e:9b:ab:ac:
fa:87:34:67:ff:19:d9:27:ad:48:9d:a0:e7:f3:ee:ed:12:64:
b0:16:27:93:2d:eb:44:0a:88:0b:d5:f7:5e:7e:73:8d:50:17:
1c:69:03:7d:f4:8b:47:e8:d5:e0:9a:d9:e3:1c:4f:3f:97:92:
b5:3d:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:53 2026 by rpki-client