Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft (raw, json)
Hash identifier: O8rDHA3N8ILGS9O/hoIUmw+lsiKG/ZnX3d7vp+FLl9k=
Subject key identifier: 6A:E6:70:3B:68:19:73:BF:90:A3:EC:E9:22:A9:10:48:80:CB:21:D3
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A182D0FE2C3B64A82E3ADD2F2FCD73B2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
Manifest number: C3
Signing time: Wed 28 Oct 2026 14:01:36 +0000
Manifest this update: Wed 28 Oct 2026 14:01:36 +0000
Manifest next update: Thu 29 Oct 2026 14:01:36 +0000
Files and hashes: 1: KmNxzz7eij2vc69C4M9P6FeRw94.asa (hash: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=)
2: i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl (hash: 2GpUICUcSDn+f5vYyRlI8pe7bm8TY9+E0yZ5GPgW/3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:fe:2c:3b:64:a8:2e:3a:dd:2f:2f:cd:73:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Oct 28 14:01:36 2026 GMT
Not After : Oct 29 14:01:36 2026 GMT
Subject: CN=6ae6703b681973bf90a3ece922a9104880cb21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:00:70:e4:6f:30:d3:fb:68:07:58:3c:b1:
62:0f:d0:c7:f0:04:c8:ed:b4:c9:c5:cc:21:2e:56:
64:00:29:c3:57:4e:ae:06:da:e5:95:77:05:cc:cb:
4a:9c:3f:af:92:f4:a2:5e:a7:78:4f:37:82:0f:15:
13:c6:f0:3d:f1:91:54:28:91:7d:77:c1:ae:50:7a:
26:99:fc:b1:62:0b:79:08:eb:d2:1e:95:bf:0f:83:
a2:5b:bf:bc:04:52:27:94:6c:1a:48:45:f8:01:2a:
9f:82:e2:42:be:85:52:50:0c:d4:e8:7a:1c:ed:fa:
ca:78:e0:ec:7b:67:ce:1c:6f:4d:aa:2b:69:c6:0c:
3f:97:b3:70:e7:6b:6a:4f:a1:4b:3b:5b:1e:e9:7c:
e1:10:7e:1e:83:a4:9d:5e:ac:49:17:3b:22:21:e2:
17:a4:6f:11:37:c3:5e:1e:63:f7:b2:46:ed:00:72:
08:f3:a8:f4:37:e7:c6:24:c9:64:e6:c4:48:00:1f:
cc:1f:17:53:c3:d4:43:a5:40:d7:31:77:a1:03:69:
d6:64:05:b8:31:a4:b0:13:2f:d2:43:80:f1:8f:e2:
d1:cf:26:e1:db:f6:98:59:e1:63:ec:df:d5:f4:94:
c6:d4:cd:12:a7:6a:fc:73:8b:63:60:39:dd:84:0e:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E6:70:3B:68:19:73:BF:90:A3:EC:E9:22:A9:10:48:80:CB:21:D3
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ff:01:1c:b1:29:2f:74:4f:fb:d1:2d:c2:80:ac:02:ff:8e:
79:70:dd:69:f2:b5:ed:3d:de:b5:ce:a9:f8:99:01:89:1b:df:
82:b0:1f:56:d4:1e:b8:db:a9:5b:72:73:e9:dc:75:c1:bd:e4:
d1:17:66:78:8d:9f:8b:42:0f:05:0d:16:10:1a:9f:99:65:6f:
33:79:f8:78:99:bc:62:6a:ba:7d:93:12:77:19:37:30:5c:db:
e6:7e:02:9c:f9:b0:19:59:3a:36:83:bc:7c:40:ae:7c:45:07:
32:80:20:a9:9a:09:e6:db:46:74:62:9a:f4:0f:9b:4c:35:fb:
d1:f3:1c:f9:60:8a:89:5a:df:1d:e9:f6:e9:d9:27:cb:67:d5:
2c:8d:b9:30:11:3e:ee:04:c2:de:30:f5:ea:ea:72:74:45:da:
90:ae:87:50:03:7c:b9:e6:ea:5c:f5:33:4f:a8:a0:8f:65:57:
66:fc:93:94:64:9f:b4:b2:5f:58:dc:42:48:ec:52:e3:e3:4c:
45:2e:8a:30:77:bb:42:9f:18:7d:6e:18:f8:a1:bf:d6:a2:e3:
ac:a3:71:ce:ce:0f:2b:49:80:6d:c9:07:29:3b:31:5a:d1:54:
87:ef:08:c4:e2:2d:59:93:b1:d9:d3:28:2f:cd:4e:96:a5:fa:
7d:0d:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:36:07 2026 by rpki-client