Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: 1VbYuP1JHhEwz1FmnsALP+izNZtWuDUCnmTg+xuMrOE=
Subject key identifier: 66:10:6D:AC:71:2C:89:0F:8F:94:8B:A1:A3:DA:4B:94:9B:FA:10:5F
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 019CABA203F8498EA7676F7B64C3026224DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0C6D
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: utpxL8ElOiVW68n0j7rq9tybnaMqeD/UIue0jaTfnAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:f8:49:8e:a7:67:6f:7b:64:c3:02:62:24:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=66106dac712c890f8f948ba1a3da4b949bfa105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:fa:33:b0:0a:02:c7:b0:a5:db:e2:a5:06:
8d:83:d4:42:22:bd:20:0b:a1:f9:88:d1:4e:37:5f:
41:e4:0d:4f:ff:82:48:5b:6f:57:19:55:2e:0f:c3:
d0:d1:3d:70:0d:23:ca:0a:67:88:84:8c:ed:76:a6:
cf:67:1b:c2:fd:65:01:f3:08:e2:45:60:cc:5b:fb:
8f:52:0d:fa:92:0c:f4:bb:82:81:e6:0a:24:f5:bc:
4f:4f:2d:7c:b9:c3:71:4e:72:ba:b5:a6:0a:56:6e:
64:09:29:81:6e:d8:6b:0e:ce:4a:79:d8:75:59:e4:
56:6d:33:0b:5f:78:dc:bc:ff:7c:6f:f4:6b:59:da:
9d:c2:1b:0d:c0:ff:8b:e6:71:b1:a0:5f:03:47:5f:
d9:0a:25:16:a4:c7:6c:47:ef:e9:ba:aa:9a:40:d2:
45:e8:d5:52:c1:26:3b:83:25:5b:b7:26:54:76:40:
a5:19:f1:c5:9b:26:dc:d6:b9:95:0f:ae:1d:4c:37:
dc:7a:18:37:e1:0e:d7:ba:52:5e:23:2a:be:50:a6:
49:07:7b:79:e7:32:f6:2a:2d:f2:0e:44:25:e8:49:
85:bf:34:2f:3d:8d:49:4f:f4:21:02:12:42:53:17:
62:9e:3f:a5:73:fc:2d:84:51:6e:dd:f9:99:52:37:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:6D:AC:71:2C:89:0F:8F:94:8B:A1:A3:DA:4B:94:9B:FA:10:5F
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:36:d9:78:b8:8f:f5:e8:2e:ba:a0:4f:a8:e3:be:a0:df:34:
b6:72:1f:40:e3:02:64:90:b0:0d:30:7c:d6:cb:94:00:06:bf:
51:28:20:ad:7c:fb:60:16:59:ed:37:96:5e:43:79:f3:db:02:
50:81:92:8a:b1:30:33:af:de:1b:4e:d2:38:b6:fb:b0:ce:d9:
42:61:72:8f:ee:df:14:a6:73:33:e8:3e:f6:f3:4e:fd:ef:28:
69:9e:bf:73:35:d4:27:5a:2b:f3:02:f6:42:f8:41:5f:87:2f:
c4:dc:1f:0f:9a:d1:d6:54:a8:33:d1:fa:0f:ec:25:74:14:be:
1c:74:63:a2:0a:1a:7c:01:57:88:e8:f6:f9:50:01:81:3c:09:
93:1a:6a:d1:e3:bb:b6:e8:68:fd:e5:1c:12:60:dc:38:5f:58:
d4:d5:58:2a:03:8f:a0:1f:be:34:94:c2:49:0a:cc:a7:11:22:
49:29:ef:97:76:f0:74:24:1a:9b:d8:de:5d:5f:04:11:40:37:
8d:f3:da:31:20:3f:f1:c0:e8:b5:23:33:11:38:81:e0:73:e4:
cf:b9:e8:bd:0a:ff:89:72:13:30:9a:d7:85:9d:57:85:97:24:
f5:44:3f:69:1a:ae:18:74:1d:80:37:d9:1d:23:2a:b2:07:0b:
bc:ce:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:17 2026 by rpki-client