Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft (raw, json)
Hash identifier: a5vHhIc/9a2kF/AP91GZnmYPuHesc3bkhq2m+i4K/vE=
Subject key identifier: 0B:49:DA:51:0A:F4:B1:EC:90:90:DE:F0:12:42:8C:AD:1A:F2:21:9B
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A06EA761643A70495657E4E7DA49086E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
Manifest number: 34
Signing time: Fri 04 Sep 2026 23:00:58 +0000
Manifest this update: Fri 04 Sep 2026 23:00:58 +0000
Manifest next update: Sat 05 Sep 2026 23:00:58 +0000
Files and hashes: 1: KmNxzz7eij2vc69C4M9P6FeRw94.asa (hash: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=)
2: i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl (hash: 5dB5cobY0tJXXd+C7+i4UkIxJVyryl/TxrwwNn2WHek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:61:64:3a:70:49:56:57:e4:e7:da:49:08:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Sep 4 23:00:58 2026 GMT
Not After : Sep 5 23:00:58 2026 GMT
Subject: CN=0b49da510af4b1ec9090def012428cad1af2219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:5e:f0:e4:be:11:a2:d8:b8:2a:ac:d6:57:
eb:85:bc:08:43:8a:98:79:96:34:41:0d:d0:e9:bb:
f1:6f:39:e2:65:23:22:57:29:6a:88:4e:2d:1b:38:
0c:61:ba:ef:11:11:02:6a:73:08:77:b7:18:82:99:
15:7d:4c:f2:75:e5:93:c2:2d:7b:77:65:4a:58:23:
a3:7e:42:65:4d:0c:44:b8:4d:8b:77:88:01:0c:e2:
b6:e6:84:83:1c:b9:51:a5:21:0d:ca:ac:1f:d9:04:
f6:f4:d5:fc:97:b1:a9:fb:a7:40:29:34:1a:1b:0a:
15:ce:7f:f5:ec:99:f4:d0:0b:0d:53:5c:a0:50:1f:
93:1f:a6:10:5b:35:fd:bd:17:7d:d5:17:ca:42:30:
f3:77:91:53:19:b3:72:f6:04:19:02:33:96:14:93:
11:e2:15:43:cd:c8:7c:2e:ec:20:a9:ad:b1:9d:09:
e0:80:8e:dd:f1:b0:ff:79:d0:f7:08:ae:2c:aa:3d:
fa:b1:4b:a5:30:92:89:20:15:0d:de:a5:a7:3e:c2:
d4:95:1b:be:25:01:1f:15:12:8e:74:ac:81:2a:47:
81:19:2e:a7:11:60:2f:aa:95:f1:11:4a:1d:46:40:
38:2c:53:e6:dd:05:ee:70:cb:bd:9b:fe:5a:da:e5:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:DA:51:0A:F4:B1:EC:90:90:DE:F0:12:42:8C:AD:1A:F2:21:9B
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d0:88:7a:aa:f5:7b:c6:e1:b1:b5:5b:9f:85:6a:72:d6:ab:
25:2e:61:50:71:07:d9:40:5b:e6:fd:a2:b5:75:67:69:d7:81:
3d:e1:7f:b5:9c:63:d6:f1:0f:f6:ae:35:fd:0f:d9:61:6e:af:
37:ba:c0:a2:aa:f6:be:08:13:14:9d:9e:dd:61:d3:58:18:31:
fb:6b:6c:4f:91:08:78:de:99:e9:dc:6a:23:01:fb:0b:99:df:
41:74:59:94:00:86:d3:04:09:d9:6c:91:23:40:08:81:40:58:
64:0e:17:75:1e:ba:08:bc:0e:e5:b7:c2:0e:d1:47:f1:3c:d5:
52:6e:43:96:98:1e:99:1f:9e:95:eb:2f:7c:50:11:b9:f1:53:
1c:72:8e:c9:31:d3:87:0c:19:23:70:e9:54:44:0c:c6:7f:d4:
7e:fb:c5:67:0e:6e:22:e8:16:1f:71:ef:8f:4e:bd:df:ec:92:
2b:ce:3b:fa:35:e5:16:de:ca:4a:0c:4e:92:f7:2d:2b:94:99:
44:fb:12:9e:13:f2:a7:4f:79:36:a8:f1:dd:8a:18:19:b5:60:
42:47:7a:32:20:09:2a:5b:6c:10:96:e4:c1:3e:48:e8:d5:39:
5e:3f:b5:70:46:2f:25:89:13:c4:c9:90:10:c9:2b:86:04:7d:
79:fe:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:07 2026 by rpki-client