Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: 6so91u0dyPy3aXOIZwY1KV3gc61cPzAVXY3ev56Utko=
Subject key identifier: 75:F0:DD:A1:3B:52:DA:22:48:A0:94:83:55:EB:22:50:FF:3B:F1:9B
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 01A0C5C4DFB639A6023978C88E615CC966FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 19F6
Signing time: Mon 21 Sep 2026 21:00:08 +0000
Manifest this update: Mon 21 Sep 2026 21:00:08 +0000
Manifest next update: Tue 22 Sep 2026 21:00:08 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: AJzLM79iD8k2CecGGv6yq3P35VCeMYtId94jvkEgSfo=)
2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c4:df:b6:39:a6:02:39:78:c8:8e:61:5c:c9:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Sep 21 21:00:08 2026 GMT
Not After : Sep 22 21:00:08 2026 GMT
Subject: CN=75f0dda13b52da2248a0948355eb2250ff3bf19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:5c:3a:b7:61:39:f0:94:34:60:b3:9d:2a:
45:56:e7:a7:38:38:ab:02:fb:a6:54:a2:2a:1c:ab:
c6:d1:96:b5:be:ad:59:fd:65:9e:49:5e:16:73:af:
ab:96:82:13:23:7e:6f:05:6f:b2:2e:28:ac:4b:0c:
84:00:61:03:57:72:ef:8a:ff:09:b2:f9:02:d5:4a:
0d:63:4c:b7:45:1e:35:50:c8:b8:12:35:b2:ad:66:
da:7e:5f:b2:f1:a9:4b:19:da:04:0b:34:ee:66:f6:
54:49:9c:0b:fc:a7:d0:ac:09:27:f8:66:53:cf:f4:
b1:7b:91:71:2e:33:88:a0:fe:34:1f:8d:d2:d2:19:
f0:2b:e3:e3:7f:81:27:e8:a3:ad:88:c0:91:e2:9c:
51:f2:5b:b5:e5:5a:76:f9:ca:3c:86:cd:54:78:06:
10:9a:1f:f4:4d:f2:57:12:8c:fb:4b:76:f1:d1:e0:
2b:7f:87:6a:76:63:1a:e7:9b:d5:32:27:f1:e8:79:
f7:8e:2a:21:1a:76:c2:c6:7e:6c:c7:73:e6:a2:9f:
bf:c2:37:7b:d4:3b:9c:66:e8:64:44:58:88:2a:b5:
8c:b6:b3:8b:31:ec:7f:19:5c:68:ea:fa:e2:22:85:
1d:84:e8:23:18:f2:19:a9:06:33:15:ef:6e:a0:30:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:DD:A1:3B:52:DA:22:48:A0:94:83:55:EB:22:50:FF:3B:F1:9B
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:27:5b:50:f3:19:ad:a7:eb:a2:ca:dd:00:d2:49:4a:45:71:
40:9f:13:7b:ad:b1:3f:0a:d5:58:eb:ae:69:93:47:7d:26:c4:
e0:8f:73:3b:d8:40:18:d8:8d:99:27:fd:94:23:48:fb:31:0e:
5d:d1:b0:00:50:49:88:d6:e5:99:96:15:95:aa:de:ef:7c:e6:
49:da:6e:3c:0a:e3:79:56:20:48:d0:ff:e3:33:ec:47:bd:2a:
3e:16:06:65:6b:ff:96:e4:b7:d4:c4:c6:d9:2b:91:15:4c:c6:
bb:7f:5c:6f:d7:db:4d:ea:ef:e4:2b:93:8c:3c:95:93:d2:9c:
5f:31:65:d2:eb:63:73:59:62:a4:c8:0a:12:1d:84:b8:d7:0a:
6e:19:d8:0c:b7:13:44:b2:46:18:bd:d0:62:d5:b5:d2:34:ef:
71:ae:26:48:2c:d1:df:b9:50:81:1c:57:72:dc:da:19:1b:90:
d9:ec:d4:4c:10:1b:10:c1:87:d5:22:66:7b:d4:67:c0:93:84:
b1:b4:5e:b5:a0:ca:45:2f:95:e4:54:b9:fa:27:57:5b:e5:3d:
70:9c:9b:4a:81:72:d3:9d:3d:bd:85:c1:e6:25:dc:5b:1b:5d:
11:ed:ff:52:ac:2b:45:03:bd:b8:e0:51:2e:91:6e:ca:79:68:
44:ab:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:05:49 2026 by rpki-client