Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: Dq4K0oUd5HtnbuT0adfi5/FKeQaLqJLCuUmpPhzAXgc=
Subject key identifier: 99:85:F8:A6:5A:2C:46:FD:16:A5:16:4E:3D:20:67:F7:3B:8D:90:73
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 019D992B2E0CE3739C9BF6CD752D72B2E30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0CE8
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: bW2nexaa9Twg+83hQ9/c5gq5SWfBIRRtOhuQdVsSiIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2e:0c:e3:73:9c:9b:f6:cd:75:2d:72:b2:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=9985f8a65a2c46fd16a5164e3d2067f73b8d9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:fc:58:c3:36:bb:1f:ee:f6:08:c7:ba:7e:
7c:65:7d:e0:02:90:cc:f6:1a:d0:20:4d:85:41:86:
20:b1:f9:81:e2:5b:64:62:cd:92:51:41:ff:63:d8:
80:74:61:0e:99:e8:6f:e3:41:2d:f9:bb:97:91:99:
d7:5f:f5:fb:94:98:03:03:28:97:09:ce:ac:04:5e:
14:6d:5f:9a:6f:b4:7b:d5:5f:9f:35:4a:53:49:bc:
56:3e:8e:2d:d8:b3:5f:ff:db:a4:ac:8b:04:5a:69:
7d:85:6c:90:2b:6d:94:18:82:9c:90:e5:d3:39:17:
40:6c:6c:ae:48:85:79:df:02:13:11:35:0c:12:63:
48:b5:05:56:9d:7e:e5:e3:ae:24:e9:c3:c9:34:01:
26:9e:47:62:c4:12:91:98:00:44:e5:67:05:4f:cb:
19:f8:66:0a:2b:26:86:a4:31:dc:d8:81:9c:d5:4a:
17:a4:47:79:a9:8b:e9:05:e9:88:9b:33:55:d8:28:
f1:98:8c:3d:8d:29:49:ff:66:68:df:33:32:41:d1:
d2:64:ea:23:85:62:b3:15:10:c8:dc:bd:e9:e4:a4:
e3:eb:6f:1a:c0:5f:94:48:47:1b:d1:51:54:b6:20:
6b:1b:45:4b:89:65:bb:cc:17:27:a4:78:a5:19:6e:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:F8:A6:5A:2C:46:FD:16:A5:16:4E:3D:20:67:F7:3B:8D:90:73
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:e6:b7:b2:6f:39:cb:1e:05:12:fa:ac:1e:3f:47:20:cc:
2b:72:64:e4:ca:3b:08:e3:cb:8b:e3:ef:6c:a5:a6:f1:8e:ff:
3c:bc:5b:e2:c6:81:60:92:7e:ba:2c:44:8d:c8:96:ad:8b:77:
36:9b:8b:8d:00:8a:09:8a:7b:13:f4:9c:8b:bc:d4:49:0a:31:
2f:8e:fd:3e:bf:89:b1:a9:fd:61:0f:be:54:17:e4:df:fa:65:
e8:70:ea:6f:24:8c:53:37:2e:f4:96:cd:86:33:3f:72:bf:ca:
d9:0b:2a:2b:8f:7e:30:c3:62:d9:4c:9a:36:c5:e4:bb:0f:3c:
c7:6c:5e:b5:d6:03:b8:f7:ef:f7:75:78:6a:0a:31:5a:ad:18:
91:18:8f:9b:45:b4:a6:bb:89:ca:a4:c4:7a:1f:80:ed:23:e6:
e3:01:c2:60:ea:a7:9c:4e:2d:27:60:9a:cd:bc:9b:42:e6:80:
18:54:61:5d:60:bc:87:e6:d1:be:f6:de:43:36:5f:41:34:00:
f4:ff:65:26:c8:d8:78:01:f2:03:c7:93:0a:44:40:ba:dd:22:
28:b5:01:2d:6d:f0:fa:20:95:1d:64:d5:d7:43:93:ad:71:f1:
fc:3d:33:35:a6:d2:8b:35:66:23:98:d8:20:14:26:1b:2b:c7:
5d:45:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:01 2026 by rpki-client