
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
File: 90-38fOtVK0sWao0kkVpj_QHNBg.mft (raw, json)
Hash identifier: xGdnIr3WrxPH7o73S70vPuHlUxOOEJ/PLXsL6zbmgDc=
Subject key identifier: 6B:DA:88:5F:B4:2A:CB:4A:25:EB:61:23:02:53:C4:9E:50:1D:EC:48
Authority key identifier: F7:4F:B7:F1:F3:AD:54:AD:2C:59:AA:34:92:45:69:8F:F4:07:34:18
Certificate issuer: /CN=f74fb7f1f3ad54ad2c59aa349245698ff4073418
Certificate serial: 019F8F7E24C21A76774FB77BF62506A83C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:36 +0000
Manifest this update: Thu 23 Jul 2026 15:00:36 +0000
Manifest next update: Fri 24 Jul 2026 15:00:36 +0000
Files and hashes: 1: 90-38fOtVK0sWao0kkVpj_QHNBg.crl (hash: JkJAp3tme+iyjfhXekC5B5AOY1SM9KDQytE00aP24n4=)
2: OkOk-j0-bh0idb2MTuVUkDe6RSk.roa (hash: nng+tq68ZftNWYIkaMIONAJZIrYod8lUFAHJdmJKUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:24:c2:1a:76:77:4f:b7:7b:f6:25:06:a8:3c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74fb7f1f3ad54ad2c59aa349245698ff4073418
Validity
Not Before: Jul 23 15:00:36 2026 GMT
Not After : Jul 24 15:00:36 2026 GMT
Subject: CN=6bda885fb42acb4a25eb61230253c49e501dec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:92:72:e2:90:a0:8e:bf:42:90:f3:a0:b2:
5c:ba:eb:e8:46:57:af:5b:27:8a:54:4d:ed:aa:b0:
e3:94:2f:88:8b:48:aa:aa:47:23:a7:32:a2:93:11:
25:f4:cc:a6:73:52:5f:05:bd:40:e8:09:7f:5a:7b:
9a:ff:b9:dc:5e:31:5a:ca:5c:c9:82:43:b4:8d:aa:
42:1c:7e:99:d5:2b:51:4b:75:2f:87:b4:4e:4f:e0:
9d:dd:d0:ed:7d:08:fc:ff:fa:42:a3:e1:86:51:0b:
24:08:df:0d:ab:84:03:8a:17:3c:57:e1:63:17:6c:
a8:3b:2c:f8:eb:4c:28:5f:b2:3e:ed:45:bc:32:1a:
f1:01:bc:e7:2a:c7:6e:17:63:aa:57:16:63:8b:e9:
34:eb:3b:6d:af:2e:d9:af:7e:50:30:88:d9:d9:39:
15:d0:f7:4d:32:37:2b:eb:4e:3b:0d:82:25:b0:97:
ad:9a:a9:8b:5f:a8:5c:5f:06:c6:6a:24:f0:e8:64:
66:05:4a:7c:0d:ab:dd:a4:ce:2e:06:6b:6e:fa:de:
41:c8:48:d2:8a:f1:90:6d:c5:a4:bf:1e:27:62:a3:
0b:c8:2d:d0:5d:bd:66:53:7c:f1:50:a0:52:d0:47:
32:9a:cd:db:db:4a:dd:df:07:8d:c0:34:2e:a8:e6:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:88:5F:B4:2A:CB:4A:25:EB:61:23:02:53:C4:9E:50:1D:EC:48
X509v3 Authority Key Identifier:
keyid:F7:4F:B7:F1:F3:AD:54:AD:2C:59:AA:34:92:45:69:8F:F4:07:34:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:24:c5:db:6a:3b:5c:99:e1:1a:dd:76:3e:7a:75:4e:bf:16:
f4:43:06:60:9c:f7:03:47:57:d4:68:a6:80:0a:53:c9:e0:56:
5f:cb:cb:32:af:b9:09:da:b8:5c:d5:f3:a7:01:8f:7c:47:3e:
4a:6e:c2:54:9b:f3:f6:ec:16:bf:b9:04:4a:f8:00:15:d6:7f:
52:b6:91:69:d7:4b:26:99:f2:da:ed:13:e6:16:c6:3e:15:d7:
05:41:12:2c:14:a9:97:af:24:eb:b9:b2:ea:e9:3c:e6:ed:34:
ef:ce:ff:14:74:0f:5d:95:f0:31:78:48:5f:fa:7f:55:0f:10:
33:7b:dd:45:c3:cc:e9:2b:a2:50:32:d6:66:c2:70:34:a7:78:
87:aa:21:72:c4:8d:53:88:a2:85:bb:86:4d:f4:57:53:1d:8e:
d1:36:72:1a:f3:47:46:23:08:19:ae:4b:d7:12:8c:a8:36:8c:
49:8a:86:88:15:cd:e7:b8:81:0c:b9:55:cf:ea:e9:45:60:04:
7e:59:d5:c6:79:b0:ef:96:44:d5:5d:43:38:99:da:65:44:5f:
83:48:9f:fb:bc:42:7d:a4:21:e1:01:b4:a4:87:1b:b4:7d:7f:
b8:fa:e0:51:57:47:26:9b:f3:32:b4:e5:17:af:e6:74:a9:0c:
6e:8a:6c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfiTCGnZ3T7d79iUGqDwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NGZiN2YxZjNhZDU0YWQyYzU5YWEzNDkyNDU2OThmZjQw
NzM0MTgwHhcNMjYwNzIzMTUwMDM2WhcNMjYwNzI0MTUwMDM2WjAzMTEwLwYDVQQD
Eyg2YmRhODg1ZmI0MmFjYjRhMjVlYjYxMjMwMjUzYzQ5ZTUwMWRlYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUCScuKQoI6/QpDzoLJcuuvoRlev
WyeKVE3tqrDjlC+Ii0iqqkcjpzKikxEl9Mymc1JfBb1A6Al/Wnua/7ncXjFaylzJ
gkO0japCHH6Z1StRS3Uvh7ROT+Cd3dDtfQj8//pCo+GGUQskCN8Nq4QDihc8V+Fj
F2yoOyz460woX7I+7UW8MhrxAbznKsduF2OqVxZji+k06zttry7Zr35QMIjZ2TkV
0PdNMjcr6047DYIlsJetmqmLX6hcXwbGaiTw6GRmBUp8DavdpM4uBmtu+t5ByEjS
ivGQbcWkvx4nYqMLyC3QXb1mU3zxUKBS0Ecyms3b20rd3weNwDQuqObraQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvaiF+0KstKJethIwJTxJ5QHexIMB8GA1UdIwQY
MBaAFPdPt/HzrVStLFmqNJJFaY/0BzQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTAtMzhmT3RWSzBzV2FvMGtrVnBqX1FITkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt
NWNjNGRlZDlhN2QyLzEvOTAtMzhmT3RWSzBzV2FvMGtrVnBqX1FITkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy
LzEvOTAtMzhmT3RWSzBzV2FvMGtrVnBqX1FITkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCTF22o7
XJnhGt12Pnp1Tr8W9EMGYJz3A0dX1GimgApTyeBWX8vLMq+5Cdq4XNXzpwGPfEc+
Sm7CVJvz9uwWv7kESvgAFdZ/UraRaddLJpny2u0T5hbGPhXXBUESLBSpl68k67my
6uk85u00787/FHQPXZXwMXhIX/p/VQ8QM3vdRcPM6SuiUDLWZsJwNKd4h6ohcsSN
U4iihbuGTfRXUx2O0TZyGvNHRiMIGa5L1xKMqDaMSYqGiBXN57iBDLlVz+rpRWAE
flnVxnmw75ZE1V1DOJnaZURfg0if+7xCfaQh4QG0pIcbtH1/uPrgUVdHJpvzMrTl
F6/mdKkMbopsZg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:14 2026 by rpki-client