
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft (raw, json)
Hash identifier: s8QoPjBnKF1gZmtYS2CdSVN5ySaGj01U+bs20vAYe0M=
Subject key identifier: 86:EB:00:6A:16:8D:1A:33:76:36:B1:93:15:CE:12:F7:55:D6:EA:3A
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A0D6F124E7293D96AE73EDA9A23E89C98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
Manifest number: 6A
Signing time: Fri 25 Sep 2026 05:02:02 +0000
Manifest this update: Fri 25 Sep 2026 05:02:02 +0000
Manifest next update: Sat 26 Sep 2026 05:02:02 +0000
Files and hashes: 1: KmNxzz7eij2vc69C4M9P6FeRw94.asa (hash: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=)
2: i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl (hash: abJNDAkYDrKvwLcgUXOsYIIgQsddCxqEPOLavlYyRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f1:24:e7:29:3d:96:ae:73:ed:a9:a2:3e:89:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Sep 25 05:02:02 2026 GMT
Not After : Sep 26 05:02:02 2026 GMT
Subject: CN=86eb006a168d1a337636b19315ce12f755d6ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:b1:77:05:97:1e:43:66:e7:8d:bf:6e:7b:
43:f9:39:dd:2d:22:d1:c1:fa:92:94:7f:d1:a7:d6:
08:42:6f:5e:01:62:46:e2:04:54:d1:21:df:89:0b:
8a:94:ee:c4:a8:cc:94:cb:93:c6:12:56:09:40:ac:
bb:df:00:e3:ef:2b:bc:af:ac:2f:3a:5d:91:e9:04:
b8:07:6e:1d:8e:74:e4:dc:e9:e5:e4:07:8a:a3:67:
85:fa:df:e9:ee:96:d9:0b:28:73:91:ac:7a:05:14:
90:cf:c0:b5:7e:83:d0:15:0c:b1:1d:66:15:6e:7d:
63:4a:7e:e6:e4:89:29:09:f8:01:46:d8:de:73:df:
71:33:f5:e2:ed:76:70:9d:23:57:4d:70:b5:a1:da:
f7:d9:7f:c9:9b:27:4f:66:e7:38:22:02:90:6b:c2:
35:17:c8:24:a8:e3:37:b0:39:87:12:b9:c4:17:95:
17:6c:fc:a0:c8:86:60:c8:0c:2b:e4:b4:ee:42:38:
f8:8e:86:e1:6b:3e:8c:11:3d:67:07:51:7e:9b:81:
74:b3:63:12:df:55:2c:24:79:78:fc:d8:93:f9:c9:
94:61:ca:02:87:71:c8:6c:25:54:35:76:98:9d:37:
b1:75:67:58:93:0d:cb:cf:92:3a:4a:07:80:03:e4:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:00:6A:16:8D:1A:33:76:36:B1:93:15:CE:12:F7:55:D6:EA:3A
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:ab:d9:0c:cd:28:5b:a4:26:e7:f1:3f:8c:9b:2a:fb:85:
94:9a:af:20:4e:9b:57:5f:57:61:26:6c:d0:65:5a:e1:60:83:
65:6a:ec:f8:90:a4:19:7f:b8:79:88:eb:a9:cf:cf:b8:ec:66:
e6:82:bd:b4:a5:e9:13:65:94:c3:3c:4b:b8:5b:51:e3:5c:20:
e5:0f:ea:60:a0:8c:f4:eb:61:21:f1:77:9e:72:75:1e:6a:d0:
11:24:07:83:08:fc:0d:e8:f2:1d:35:05:fb:4b:65:37:2c:5f:
38:7a:9d:2c:b9:07:d4:41:b3:6f:83:f8:70:0d:e3:d7:f2:b7:
c8:e1:fa:c8:a4:14:c8:6c:77:c6:4a:d8:c1:08:5e:8b:e5:1e:
8e:97:55:cd:de:f5:8f:58:a2:98:c5:cf:5d:f5:b7:cf:ab:33:
c2:54:33:e5:6a:01:fc:92:0e:26:13:d0:e7:bf:3f:d9:a9:0d:
99:b1:54:91:70:2e:66:81:94:ec:d0:ad:dc:ce:40:25:90:4c:
c2:79:02:6b:cb:12:ca:10:5f:67:b3:7c:ad:62:63:e6:96:ee:
8f:42:86:a1:51:1f:b7:fe:98:a1:a0:aa:55:57:12:79:36:39:
e5:95:c2:e9:26:e5:12:ef:28:23:32:c9:ac:cc:a3:e6:8e:96:
b5:38:5f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8STnKT2WrnPtqaI+icmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGQzMDNjMjQ1OGMzNjQ5YWQ1Njg0ZTE2ZTIwOTYwMzUx
NWY2ZjkwHhcNMjYwOTI1MDUwMjAyWhcNMjYwOTI2MDUwMjAyWjAzMTEwLwYDVQQD
Eyg4NmViMDA2YTE2OGQxYTMzNzYzNmIxOTMxNWNlMTJmNzU1ZDZlYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqSxdwWXHkNm542/bntD+TndLSLR
wfqSlH/Rp9YIQm9eAWJG4gRU0SHfiQuKlO7EqMyUy5PGElYJQKy73wDj7yu8r6wv
Ol2R6QS4B24djnTk3Onl5AeKo2eF+t/p7pbZCyhzkax6BRSQz8C1foPQFQyxHWYV
bn1jSn7m5IkpCfgBRtjec99xM/Xi7XZwnSNXTXC1odr32X/JmydPZuc4IgKQa8I1
F8gkqOM3sDmHErnEF5UXbPygyIZgyAwr5LTuQjj4jobhaz6MET1nB1F+m4F0s2MS
31UsJHl4/NiT+cmUYcoCh3HIbCVUNXaYnTexdWdYkw3Lz5I6SgeAA+Q2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbrAGoWjRozdjaxkxXOEvdV1uo6MB8GA1UdIwQY
MBaAFIvdMDwkWMNkmtVoThbiCWA1Ffb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTkwd1BDUll3MlNhMVdoT0Z1SUpZRFVWOXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yZTM5NDktNGJmOC00NDIwLWJiMzAt
MTA5OWE4OTlmYjViLzEvaTkwd1BDUll3MlNhMVdoT0Z1SUpZRFVWOXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yZTM5NDktNGJmOC00NDIwLWJiMzAtMTA5OWE4OTlmYjVi
LzEvaTkwd1BDUll3MlNhMVdoT0Z1SUpZRFVWOXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7qr2QzN
KFukJufxP4ybKvuFlJqvIE6bV19XYSZs0GVa4WCDZWrs+JCkGX+4eYjrqc/PuOxm
5oK9tKXpE2WUwzxLuFtR41wg5Q/qYKCM9OthIfF3nnJ1HmrQESQHgwj8DejyHTUF
+0tlNyxfOHqdLLkH1EGzb4P4cA3j1/K3yOH6yKQUyGx3xkrYwQhei+UejpdVzd71
j1iimMXPXfW3z6szwlQz5WoB/JIOJhPQ578/2akNmbFUkXAuZoGU7NCt3M5AJZBM
wnkCa8sSyhBfZ7N8rWJj5pbuj0KGoVEft/6YoaCqVVcSeTY55ZXC6SblEu8oIzLJ
rMyj5o6WtThfpQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:32 2026 by rpki-client